What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

PC has become RIDICULOUSLY slow, even after I doubled wireless speed&#

39 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #46
I have absolute trust in you! My life (aka: my computer) is in your hands! I downloaded the NET 4.5 update, but it wouldn't install. Here's the error message: Blocking Issues: The .NET Framework 4.5 is not supported on this operating system. Warnings: Setup may not run properly, because the Windows Modules Installer Service is not available on this computer.
Post #48
Ok Shannon

Follow this


Run OTL

  • Open OTL again and click the Quick Scan button (don't check the boxes beside LOP Check or Purity this time)
  • Post the OTL.txt log it produces in your next reply.
Post #49
OK, I started OTL and made sure LOP and Purity were NOT checked. Then I clicked on "Quick Scan" per your instructions. I watched the scan for a few minutes then looked at the TV, and – I swear – when I looked back the LOP and Purity boxes were checked and so were all of the boxes in the "File Scans" box (which I'm pretty sure weren't checked when I started). I've tried to stop the scan, but it's not stopping. When it does stop, I guess I'll try to run it again without those boxes checked and see what happens. Yes?
Post #50
So here's the OTL.Txt log given what I previously reported.

OTL logfile created on: 6/3/2013 11:51:36 PM - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Shannon.HHCA\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1014.11 Mb Total Physical Memory | 547.45 Mb Available Physical Memory | 53.98% Memory free
2.38 Gb Paging File | 1.80 Gb Available in Paging File | 75.65% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 111.73 Gb Total Space | 50.86 Gb Free Space | 45.52% Space Free | Partition Type: NTFS

Computer Name: SHANNON-DELL | User Name: shannon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Program Files\Java\jre7\bin\jqs.exe (Oracle Corporation)
PRC - C:\Documents and Settings\Shannon.HHCA\Desktop\OTL.exe (OldTimer Tools)
PRC - c:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
PRC - C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
PRC - C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe (Intel® Corporation)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Dell\QuickSet\NicConfigSvc.exe (Dell Inc.)
PRC - C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
PRC - C:\Program Files\DellTPad\ApntEx.exe (Alps Electric Co., Ltd.)
PRC - C:\Program Files\DellTPad\ApMsgFwd.exe (Alps Electric Co., Ltd.)
PRC - C:\Program Files\DellTPad\hidfind.exe (Alps Electric Co., Ltd.)
PRC - C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe (Broadcom Corporation)


========== Modules (No Company Name) ==========


========== Services (SafeList) ==========

SRV - (JavaQuickStarterService) – C:\Program Files\Java\jre7\bin\jqs.exe (Oracle Corporation)
SRV - (MsMpSvc) – c:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
SRV - (rpcapd) – C:\Program Files\WinPcap\rpcapd.exe (CACE Technologies, Inc.)
SRV - (EvtEng) – C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel® Corporation)
SRV - (WLANKEEPER) – C:\Program Files\Intel\WiFi\bin\WLKEEPER.exe (Intel® Corporation)
SRV - (S24EventMonitor) – C:\Program Files\Intel\WiFi\bin\S24EvMon.exe (Intel® Corporation)
SRV - (RegSrvc) – C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel® Corporation)
SRV - (NICCONFIGSVC) – C:\Program Files\Dell\QuickSet\NicConfigSvc.exe (Dell Inc.)
SRV - (ASFIPmon) – C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe (Broadcom Corporation)


========== Driver Services (SafeList) ==========

DRV - (WDICA) – File not found
DRV - (WaveFDE) – system32\DRIVERS\WaveFDE.sys File not found
DRV - (USBAAPL) – System32\Drivers\usbaapl.sys File not found
DRV - (UIUSys) – system32\DRIVERS\UIUSYS.SYS File not found
DRV - (PDRFRAME) – File not found
DRV - (PDRELI) – File not found
DRV - (PDFRAME) – File not found
DRV - (PDCOMP) – File not found
DRV - (PCIDump) – File not found
DRV - (MpKsla25442f6) – c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{4AC413B0-F3D4-4F48-A41D-B483CB302190}\MpKsla25442f6.sys File not found
DRV - (LMIInfo) – C:\Program Files\LogMeIn\x86\RaInfo.sys File not found
DRV - (lbrtfdc) – File not found
DRV - (i2omgmt) – File not found
DRV - (guardian2) – System32\Drivers\oz776.sys File not found
DRV - (cpuz134) – C:\DOCUME~1\SHANNO~1.HHC\LOCALS~1\Temp\cpuz134\cpuz134_x32.sys File not found
DRV - (Changer) – File not found
DRV - (catchme) – C:\DOCUME~1\SHANNO~1.HHC\LOCALS~1\Temp\catchme.sys File not found
DRV - (NPF) – C:\WINDOWS\system32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (WFMC_VAD) – C:\WINDOWS\system32\drivers\wfmcvad.sys (WiFi Media Connect)
DRV - (Revoflt) – C:\WINDOWS\system32\drivers\revoflt.sys (VS Revo Group)
DRV - (NETw5x32) – C:\WINDOWS\system32\drivers\NETw5x32.sys (Intel Corporation)
DRV - (LMIRfsClientNP) – C:\WINDOWS\System32\LMIRfsClientNP.dll (LogMeIn, Inc.)
DRV - (s24trans) – C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation)
DRV - (LMIRfsDriver) – C:\WINDOWS\system32\drivers\LMIRfsDriver.sys (LogMeIn, Inc.)
DRV - (NvtSp50) – C:\WINDOWS\system32\drivers\NvtSp50.sys (Printing Novatel Wireless Inc.)
DRV - (NWADI) – C:\WINDOWS\system32\drivers\NWADIenum.sys (Novatel Wireless Inc)
DRV - (NWDellPort) – C:\WINDOWS\system32\drivers\nwdelser.sys (Novatel Wireless Inc.)
DRV - (NWDellModem) – C:\WINDOWS\system32\drivers\nwdelmdm.sys (Novatel Wireless Inc.)
DRV - (ApfiltrService) – C:\WINDOWS\system32\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV - (STHDA) – C:\WINDOWS\system32\drivers\sthda.sys (SigmaTel, Inc.)
DRV - (b57w2k) – C:\WINDOWS\system32\drivers\b57xp32.sys (Broadcom Corporation)
DRV - (APPDRV) – C:\WINDOWS\system32\drivers\APPDRV.SYS (Dell Inc)
DRV - (USBCCID) – C:\WINDOWS\system32\drivers\usbccid.sys (Microsoft Corporation)
DRV - (BASFND) – C:\Program Files\Broadcom\ASFIPMon\BASFND.sys (Broadcom Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerm…mp;sourceid=ie7

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = FC 22 27 4D 39 EE CA 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {5F89AEEC-D6E8-4378-9F20-6E8009087D95}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{5F89AEEC-D6E8-4378-9F20-6E8009087D95}: "URL" = http://www.google.com/search?q={searchTerm…1I7WZPC_enUS378
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.732: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.732: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=1.0.0.0: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.732: c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Documents and Settings\Shannon.HHCA\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010/05/07 22:13:01 | 000,000,000 | —D | M]


O1 HOSTS File: ([2013/05/14 18:42:13 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [IntelZeroConfig] C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe (Intel® Corporation)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = HiddenHills.org
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{87FE965E-1596-4ACA-A8FA-B51FD9E87A23}: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LMIinit: DllName - (LMIinit.dll) - C:\WINDOWS\System32\LMIinit.dll (LogMeIn, Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Shannon.HHCA\My Documents\My Pictures\personalpics\mom, dad, andy boat early key west.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Shannon.HHCA\My Documents\My Pictures\personalpics\mom, dad, andy boat early key west.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/05/05 23:32:42 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013/05/25 23:53:29 | 000,000,000 | —D | C] – C:\Documents and Settings\Shannon.HHCA\Local Settings\Application Data\VS Revo Group
[2013/05/25 23:53:18 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Revo Uninstaller Pro
[2013/05/25 23:53:10 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\VS Revo Group
[2013/05/25 23:53:09 | 000,027,064 | —- | C] (VS Revo Group) – C:\WINDOWS\System32\drivers\revoflt.sys
[2013/05/24 21:24:45 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Java
[2013/05/24 21:22:55 | 000,000,000 | —D | C] – C:\Program Files\Java
[2013/05/22 00:24:28 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2013/05/16 22:47:58 | 000,000,000 | —D | C] – C:\RegBackup
[2013/05/16 22:47:40 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Tweaking.com
[2013/05/16 22:47:39 | 000,000,000 | —D | C] – C:\Program Files\Tweaking.com
[2013/05/14 18:46:20 | 000,000,000 | —D | C] – C:\WINDOWS\temp
[2013/05/14 18:24:21 | 000,000,000 | RHSD | C] – C:\cmdcons
[2013/05/14 18:20:18 | 000,518,144 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2013/05/14 18:20:18 | 000,060,416 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2013/05/14 18:20:17 | 000,406,528 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2013/05/14 18:20:17 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2013/05/14 18:18:56 | 000,000,000 | —D | C] – C:\Qoobox
[2013/05/14 18:18:27 | 000,000,000 | —D | C] – C:\WINDOWS\erdnt
[2013/05/14 18:11:48 | 005,066,131 | R— | C] (Swearware) – C:\Documents and Settings\Shannon.HHCA\Desktop\ComboFix.exe
[2013/05/10 00:16:03 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2013/05/09 23:55:37 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013/05/09 23:55:33 | 000,022,856 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2013/05/09 23:51:19 | 010,285,040 | —- | C] (Malwarebytes Corporation ) – C:\Documents and Settings\Shannon.HHCA\Desktop\mbam-setup-1.75.0.1300.exe
[2013/05/09 12:35:39 | 000,000,000 | —D | C] – C:\WINDOWS\ERUNT
[2013/05/09 12:35:35 | 000,000,000 | —D | C] – C:\JRT
[2013/05/09 12:33:59 | 000,545,954 | —- | C] (Oleg N. Scherbakov) – C:\Documents and Settings\Shannon.HHCA\Desktop\JRT.exe
[2013/05/08 01:24:00 | 004,745,728 | —- | C] (AVAST Software) – C:\Documents and Settings\Shannon.HHCA\Desktop\aswMBR.exe
[2013/05/08 00:47:14 | 000,602,112 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Shannon.HHCA\Desktop\OTL.exe
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/06/03 23:59:05 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013/05/31 00:02:52 | 000,000,004 | —- | M] () – C:\Documents and Settings\Shannon.HHCA\Local Settings\Application Data\~wmrg
[2013/05/30 22:50:55 | 000,000,471 | —- | M] () – C:\Documents and Settings\Shannon.HHCA\Desktop\microsoft .NET framework 4.5.rtf
[2013/05/30 22:49:41 | 000,000,471 | —- | M] () – C:\Documents and Settings\Shannon.HHCA\My Documents\microsoft .NET framework 4.5 not supported.rtf
[2013/05/29 00:05:39 | 000,000,282 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-462779985-694065086-542639570-1003.job
[2013/05/29 00:05:38 | 000,000,290 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-462779985-694065086-542639570-1003.job
[2013/05/28 23:20:49 | 000,000,384 | -H– | M] () – C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
[2013/05/28 23:11:18 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2013/05/28 23:11:17 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013/05/28 23:10:35 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2013/05/25 23:53:18 | 000,000,925 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Revo Uninstaller Pro.lnk
[2013/05/24 22:37:52 | 000,225,616 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2013/05/24 22:27:00 | 000,514,882 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2013/05/24 22:27:00 | 000,093,240 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2013/05/24 22:15:38 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2013/05/24 21:50:02 | 000,001,734 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Adobe Reader XI.lnk
[2013/05/16 22:47:40 | 000,001,876 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Tweaking.com - Registry Backup.lnk
[2013/05/16 22:45:58 | 004,038,919 | —- | M] () – C:\Documents and Settings\Shannon.HHCA\Desktop\tweaking.com_registry_backup_setup.exe
[2013/05/14 18:42:13 | 000,000,027 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2013/05/14 18:24:30 | 000,000,327 | RHS- | M] () – C:\boot.ini
[2013/05/14 18:13:04 | 005,066,131 | R— | M] (Swearware) – C:\Documents and Settings\Shannon.HHCA\Desktop\ComboFix.exe
[2013/05/09 23:55:37 | 000,000,784 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2013/05/09 23:51:27 | 010,285,040 | —- | M] (Malwarebytes Corporation ) – C:\Documents and Settings\Shannon.HHCA\Desktop\mbam-setup-1.75.0.1300.exe
[2013/05/09 12:54:28 | 000,816,128 | —- | M] () – C:\Documents and Settings\Shannon.HHCA\Desktop\RogueKiller.exe
[2013/05/09 12:45:59 | 000,628,743 | —- | M] () – C:\Documents and Settings\Shannon.HHCA\Desktop\adwcleaner.exe
[2013/05/09 12:34:24 | 000,545,954 | —- | M] (Oleg N. Scherbakov) – C:\Documents and Settings\Shannon.HHCA\Desktop\JRT.exe
[2013/05/08 07:07:17 | 000,000,512 | —- | M] () – C:\Documents and Settings\Shannon.HHCA\Desktop\MBR.dat
[2013/05/08 01:24:09 | 004,745,728 | —- | M] (AVAST Software) – C:\Documents and Settings\Shannon.HHCA\Desktop\aswMBR.exe
[2013/05/08 00:47:24 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Shannon.HHCA\Desktop\OTL.exe
[2013/05/08 00:44:36 | 000,890,825 | —- | M] () – C:\Documents and Settings\Shannon.HHCA\Desktop\SecurityCheck.exe
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/05/30 22:50:55 | 000,000,471 | —- | C] () – C:\Documents and Settings\Shannon.HHCA\Desktop\microsoft .NET framework 4.5.rtf
[2013/05/30 22:49:41 | 000,000,471 | —- | C] () – C:\Documents and Settings\Shannon.HHCA\My Documents\microsoft .NET framework 4.5 not supported.rtf
[2013/05/25 23:53:18 | 000,000,925 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Revo Uninstaller Pro.lnk
[2013/05/25 22:46:10 | 000,000,282 | —- | C] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-462779985-694065086-542639570-1003.job
[2013/05/25 22:46:09 | 000,000,290 | —- | C] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-462779985-694065086-542639570-1003.job
[2013/05/24 21:50:01 | 000,001,804 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Reader XI.lnk
[2013/05/24 21:50:01 | 000,001,734 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Adobe Reader XI.lnk
[2013/05/16 22:47:40 | 000,001,876 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Tweaking.com - Registry Backup.lnk
[2013/05/16 22:45:49 | 004,038,919 | —- | C] () – C:\Documents and Settings\Shannon.HHCA\Desktop\tweaking.com_registry_backup_setup.exe
[2013/05/14 18:24:30 | 000,000,211 | —- | C] () – C:\Boot.bak
[2013/05/14 18:24:25 | 000,260,272 | RHS- | C] () – C:\cmldr
[2013/05/14 18:20:18 | 000,256,000 | —- | C] () – C:\WINDOWS\PEV.exe
[2013/05/14 18:20:18 | 000,208,896 | —- | C] () – C:\WINDOWS\MBR.exe
[2013/05/14 18:20:18 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2013/05/14 18:20:18 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2013/05/14 18:20:18 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2013/05/10 04:54:17 | 000,000,886 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013/05/10 04:54:16 | 000,000,882 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013/05/09 23:55:37 | 000,000,784 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2013/05/09 12:45:53 | 000,628,743 | —- | C] () – C:\Documents and Settings\Shannon.HHCA\Desktop\adwcleaner.exe
[2013/05/08 07:07:17 | 000,000,512 | —- | C] () – C:\Documents and Settings\Shannon.HHCA\Desktop\MBR.dat
[2013/05/08 00:44:11 | 000,890,825 | —- | C] () – C:\Documents and Settings\Shannon.HHCA\Desktop\SecurityCheck.exe
[2013/04/02 01:29:08 | 000,138,480 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2013/03/01 00:11:40 | 000,000,162 | —- | C] () – C:\WINDOWS\reimage.ini
[2013/02/28 23:31:27 | 000,000,000 | —- | C] () – C:\Documents and Settings\Shannon.HHCA\defogger_reenable
[2012/09/05 19:18:47 | 000,003,303 | —- | C] () – C:\WINDOWS\BRPARAM.INI
[2012/09/05 19:18:18 | 000,045,056 | —- | C] () – C:\WINDOWS\System32\BRTCPCON.DLL
[2012/09/05 19:18:11 | 000,000,114 | —- | C] () – C:\WINDOWS\System32\BRLMW03A.INI
[2012/08/12 22:30:17 | 000,000,004 | —- | C] () – C:\Documents and Settings\Shannon.HHCA\Local Settings\Application Data\~wmrg
[2012/02/18 22:23:09 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\iacenc.dll
[2011/10/18 12:02:59 | 000,002,412 | R-S- | C] () – C:\Documents and Settings\All Users\ntuser.pol
[2011/10/07 20:03:13 | 000,023,624 | —- | C] () – C:\WINDOWS\System32\drivers\hitmanpro35.sys
[2011/01/24 12:22:58 | 000,000,131 | —- | C] () – C:\Documents and Settings\Shannon.HHCA\Application Data\DMNetworkViewer.INI
[2010/05/27 11:14:59 | 000,079,360 | —- | C] () – C:\Documents and Settings\Shannon.HHCA\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/05/17 11:48:24 | 000,061,678 | —- | C] () – C:\Documents and Settings\Shannon.HHCA\Application Data\PFP100JPR.{PB
[2010/05/17 11:48:24 | 000,012,358 | —- | C] () – C:\Documents and Settings\Shannon.HHCA\Application Data\PFP100JCM.{PB
[2010/05/07 15:46:40 | 000,000,000 | —- | C] () – C:\Documents and Settings\Shannon.HHCA\Local Settings\Application Data\WavXMapDrive.bat

========== ZeroAccess Check ==========

[2010/05/06 01:59:11 | 000,000,227 | RHS- | M] () – C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll – [2010/03/09 21:33:41 | 001,509,888 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2009/02/09 05:10:48 | 000,473,600 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll – [2008/04/13 17:12:08 | 000,273,920 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2010/05/10 10:22:18 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AIM
[2010/07/09 09:54:08 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Applications
[2013/03/12 23:11:07 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\CDB
[2011/10/07 20:02:59 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Hitman Pro
[2013/03/01 01:46:48 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\HitmanPro
[2010/05/06 01:46:38 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Novatel Wireless
[2013/04/01 20:23:39 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PCDr
[2010/05/06 01:50:15 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\UIB
[2013/05/25 23:53:10 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\VS Revo Group
[2010/05/07 23:52:06 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Wave Systems Corp
[2010/09/09 12:50:36 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\WinZip
[2012/03/23 17:47:09 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2011/09/19 09:59:25 | 000,000,000 | —D | M] – C:\Documents and Settings\Shannon.HHCA\Application Data\acccore
[2012/02/18 22:42:01 | 000,000,000 | —D | M] – C:\Documents and Settings\Shannon.HHCA\Application Data\com.amazon.music.uploader
[2013/02/09 22:04:30 | 000,000,000 | —D | M] – C:\Documents and Settings\Shannon.HHCA\Application Data\ElevatedDiagnostics
[2010/06/24 10:38:36 | 000,000,000 | —D | M] – C:\Documents and Settings\Shannon.HHCA\Application Data\InterVideo
[2013/04/01 20:24:52 | 000,000,000 | —D | M] – C:\Documents and Settings\Shannon.HHCA\Application Data\PCDr
[2011/10/07 19:37:25 | 000,000,000 | —D | M] – C:\Documents and Settings\Shannon.HHCA\Application Data\TeamViewer
[2011/04/30 15:10:36 | 000,000,000 | —D | M] – C:\Documents and Settings\Shannon.HHCA\Application Data\Unity
[2010/05/07 15:46:40 | 000,000,000 | —D | M] – C:\Documents and Settings\Shannon.HHCA\Application Data\Wave Systems Corp
[2013/02/07 22:02:45 | 000,000,000 | —D | M] – C:\Documents and Settings\Shannon.HHCA\Application Data\Windows Search

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Shannon.HHCA\My Documents\SIXFOUR.TIF:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Shannon.HHCA\My Documents\logo_address.jpg:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Shannon.HHCA\My Documents\logo.jpg:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Shannon.HHCA\My Documents\logo address.jpg:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Shannon.HHCA\My Documents\logo address adobe.jpg:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Shannon.HHCA\My Documents\hhlogo.TIF:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Shannon.HHCA\My Documents\4-BT-4.jpg:Roxio EMC Stream

< End of report >
Post #51
P.S. I never, ever use Mozilla. I have never, ever used Roxio. And I have, historically, used Real (it's my preferred media player), but I haven't used it in probably almost a year.
Post #52
Hi shannon

Ok good job

OTL log is very clean

Try this.

Complete Internet Repair

  • Please download comintrep.exe and save it to your desktop
  • Double click the icon and select Run
  • Click Extract
  • Double click the Complete Internet Repair folder on your desktop
  • Double click the CIntRep.exe icon
  • Place a checkmark next to the following entries:
    • Reset Internet Protocol (TCP/IP)
    • Repair Winsock (Reset Catalog)
    • Renew Internet Connections
    • Flush DNS Resolver Cache
    • Repair Internet Explorer 6.0.2900
    • Clear Windows Update History
    • Repair Windows / Automatic Updates
    • Repair SSL / HTTPS / Cryptography
    • Reset Windows Firewall Configuration
    • Restore the default hosts file
    • Repair Workgroup Computers view
  • Click Go!
  • Ignore any error messages for now
  • Click OK to reboot your computer
Post #53
Apparently I missed your last post and I thought you were ignoring me. :( So I'm an idiot. OK, I'll run complete internet repair now.
Post #54
Two things: (1) Since it was a zip file, I screwed up and didn't save it on my desktop. The program is in my Local Files. The optons after downloading were slightly different from what you told me to expect: "Open" or "Save," not "Run." I clicked "Open." Anyway, the program is installed in my Local folder. OK to proceed with the program located in Local folder rather than Desktop? (2) In going down the list checking the items you instructed me to check, the item you said would read "Repair Internet 6.0.2900" reads "Repair Internet 8.0.6001" in the program. OK to still check that item and proceed? I'm not going to do anything else until I hear from you. And I will check my emails much more closely lest I miss another one of your posts! :) Shannon
Post #55
Hi shannon ;)

(1) Since it was a zip file, I screwed up and didn't save it on my desktop. The program is in my Local Files. The optons after downloading were slightly different from what you told me to expect: "Open" or "Save," not "Run." I clicked "Open." Anyway, the program is installed in my Local folder. OK to proceed with the program located in Local folder rather than Desktop?

No problem

(2) In going down the list checking the items you instructed me to check, the item you said would read "Repair Internet 6.0.2900" reads "Repair Internet 8.0.6001" in the program. OK to still check that item and proceed?

:thumbup: Proceed
Post #58
I guess it's a little faster, but I just clicked on some random stories from msn.com and it took 25 seconds to load the page. I then opened a new browser page and tried again, around 25 seconds.

Could it be too many processes running? Could it be stuff I need to delete from my hard drive? Could it be temporary files (WHEN will someone publish an article about which temporary files and application data it's safe to remove?)?

Oh, and I still have the error message at the bottom of this page:

Webpage error details

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET4.0C; .NET CLR 2.0.50727)
Timestamp: Thu, 13 Jun 2013 04:03:30 UTC


Message: Object required
Line: 77190285
Char: 1
Code: 0
URI: http://forums.whatthetech.com/index.php?sh…26135&st=45

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI