Desktop HJT new log 031106

Dopii Topic Starter

Post #1March 12, 2006, 11:48 AM UTC

Here is the new HJT log for my desktop since i posted last.
The computer has really gotten slow loading web pages. Takes a really

really long time.
Thanks for your help.

Logfile of HijackThis v1.99.1
Scan saved at 5:32:53 AM, on 03/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AWS\WeatherBug\Weather.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\system32\wwSecure.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Downloaded Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/search/ie6.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Yahoo!
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: CDpoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Program Files\CDpoker\casino.exe
O9 - Extra 'Tools' menuitem: CDpoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Program Files\CDpoker\casino.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.yahoo.com
O16 - DPF: Yahoo! Chess - http://download.games.yahoo.com/games/clients/y/ct1_x.cab
O16 - DPF: Yahoo! Dominoes - http://download.games.yahoo.com/games/clients/y/dot4_x.cab
O16 - DPF: Yahoo! Poker - http://download.games.yahoo.com/games/clients/y/pt0_x.cab
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {405BBF5B-2FD8-4614-AC51-D8566F635B94} (SafeWallet Class) - http://idsm.citadelprocessing.com/SafeComm…s/WalletCab.CAB
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.nick.com/common/groove/gx/GrooveAX25.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/ac…ta/SymAData.dll
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/ac…/ActiveData.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-32.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/aio/eng/check/qdiagh.cab?312
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Intel® NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: Washer AutoComplete (wwSecSvc) - Webroot Software, Inc. - C:\WINDOWS\system32\wwSecure.exe

LDTate

Post #2March 17, 2006, 8:32 PM UTC last edited March 17, 2006, 8:33 PM UTC

Hello Dopii, welcome to the forum

I don't see a Anti-Virus program or Firewall on your PC.

Click the link and Save, Install, Update and run a full scan.
http://free.grisoft.com/softw/70free/setup…ree_375a691.exe

Empty Recycle Bin

Reboot and "copy/paste" a new log file into this thread.
Also please describe how your computer behaves at the moment

Dopii

Post #3March 19, 2006, 12:39 PM UTC

I did have AVG free on this computer just before I did this HJT log. When I installed it again, ran it, it found several virus', and I tried to clean them. After deleting a few of them, and attempting to install Norton System Works 2006 on my desktop. it went all weird.
It has no applications apllied to 99% of my programs, I can not run anything, can not start a network connection, can't re-install windows, can't restore, it is just plain suspended in nothingness.
I suspect a nasty virus, since I have chatted with Dell hardware support, ran an express test and it passed.
I'm stuck between a rock and a hard place, because I really need this computer for my busniness.
HELP ME PLEASE!

Thanks,
Chuck

LDTate

Post #4March 19, 2006, 1:14 PM UTC last edited March 19, 2006, 1:15 PM UTC

Un-install Norton System Works 2006 for now. Having 2 AV running at the same time can cause all types of problems. Do you have your Windows CD? Can you post a new HJT log?

Dopii

Post #5March 19, 2006, 1:26 PM UTC

I had already uninstalled AVG before attempting to install Norton. I am aware of that discrepancy. I'm afraid that I might have deleted a .dll file or something.
I have the original CDs, but I can not run any applications.
I get the following message:
"This file does not have a program associated with it for perfoming this action. Create an association in the Folder Options control panel."

I can't get to the control panel either, It only allows me to create a desktop copy on it.

Thanks for the quick response too.
Any help is much appreciated. I consider myself an advanced use, but do stupid things every once in a while. I have always installed my own hardware and software. I am learning all the time, especially when it comes to spyware and virus'.

ChuckII

LDTate

Post #6March 19, 2006, 1:38 PM UTC

See if any of these will help restoring the File Association
http://www.dougknox.com/xp/file_assoc.htm

Dopii

Post #7March 19, 2006, 1:47 PM UTC

Same message.

LDTate

Post #8March 19, 2006, 1:48 PM UTC

You can use windows sfc (system file checker) You'd need your XP CD to make this work.
Click Start> Run> type sfc /scannow Note the space.
(Note that there is a space between sfc and /scannow)

Dopii

Post #9March 19, 2006, 1:51 PM UTC

Same message

LDTate

Post #10March 19, 2006, 1:55 PM UTC

Did you restore the files Association for EXE COM BAT INF TXT

Dopii

Post #11March 19, 2006, 1:55 PM UTC

I've got the Windows XP CD in the computer too. I can't even perform any functions from the CD either. I click the buttons, and nothing happens. It's like it forgot how to function period. You know like amnesia.

LDTate

Post #12March 19, 2006, 1:56 PM UTC

Did you restore the files Association for EXE COM BAT INF TXT

Dopii

Post #13March 19, 2006, 2:04 PM UTC last edited March 19, 2006, 2:06 PM UTC

Unable to do any of that. I keep getting the same message for all of them.
I need to go to Church, will you be on in about three hours?
My email is dopii (AT)houston.rr.com <–Edited
Or if you want to use an IM program, I can install them again for this.

LDTate

Post #14March 19, 2006, 2:07 PM UTC

I'll be on for a another hour, then back later today.

Dopii

Post #15March 19, 2006, 2:10 PM UTC

I get the following message now when i follow the instructions on the web page. Cannot import F:\Exe restore\xp_inf_assoc.reg: Not all data was successfully written to the registry. Some Keys are open by the system or other processes.

✨ Ask AI

Ask AI