Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. 
Join 
This topic is locked
Assuming you have now returned HJT.exe to this position: C:\HJT|HijackThis.exe, I will proceed. This is important because if a mistake should be made we will then have the backups needed to correct it.
Some of the suggestions here: http://pcpitstop.inv...howtopic=105143 are good ones. Have you tried these? One of the first things I think about are drivers. This goes back to your first post:
You can open your Task Manager (RIGHT click the Taskbar and choose Task Manager) then choose the Applications tab to see what processes are running all at that time. The very next time you believe their is an issue, look to see what is running, post that list for me. Now let's look at this:Here is the log from my husbands computer. He is having trouble with the hour glass always running and sometimes the computer says there is a program running, but not that we can see.
http://www.cyberwalk...g00/310800.html This may be your problem and should be ruled out during troubleshooting. If a program that has an outdated driver is running it can cause problems like you are experiencing. Google has lots more information if you wish to look:
http://www.google.co... update drivers
Logfile of HijackThis v1.99.1 Scan saved at 5:36:51 PM, on 11/30/2005
This is what I see in this log:
1) C:\DOCUME~1\DOUGHA~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe This is unsafe as backups will be lost. You should navigate to that TEMP folder and delete everything in it.
2) ewido security suite: We download the trial version on 11/12/2005. Unless you purchased this product, the trial expired on 11/26/2005 and there is no longer any reason for it to be using your resources of which is uses a lot. You should disable it in service and make sure it is NOT running. You can still use the scanners and free updates and start that manually when needed.
3) fyi only: O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet: http://castlecops.co...plist-2564.html
4) O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe http://castlecops.co...plist-3552.html Unless someone will do this manually, leave it on auto, it is a security risk.
5) O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe: http://castlecops.co...plist-1037.html
6) O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe": http://www.liutiliti...ibrary/mnyexpr/ Do you use this? Many folks load it day after day and have no idea it is there. If you use it, consider if you need it to run everytime you boot, if you don't use it, consider uninstalling the program.
7) O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) <<< this is a dead line left from the uninstall of RealPlayer. It is just clutter but can be remove with HJT if you wish.
8) O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
Not needed unless you purchased the program.
This is all I can do for your HJT log, there is no evidence of any malware in it. Your ewido log shows three cookies, in case I have not given you information for controlling cookies, here it is:
http://www.mvps.org/...002/cookies.htm
http://www.microsoft...acy/config.mspx
If you have evidence that makes you believe this is in some way malware related, please provide that information.
Thanks...pskelley
