What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Sloooooooooow!

1 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Frustrating!!

This computer is about a year old and has been chugging along famously until a couple of days ago when it slowed to a crawl. Everything seems to function OK if you have enough patience, but slow, slow, slow!

Have run latest AdAware and SpyBot and neither find problems. Ewido ran OK and the log file is attached along with the logfile from HiJackThis. Maybe someone can help me find the problem. Lord knows, I don’t want to reinstall with all the stuff I’ve got on this machine.

Thanks for being there! A great service!!

Win XP Home Edition
Dell Dimension 8400
Lotsa ram, lotsa disk space.
Defragged.
Norton Antivirus.
Have Internet Explorer 6.0 but I usually use FireFox 1.5

Can you guys see anything here that might explain a slowdown?

John Gapp in Redmond, Oregon
**********************************************

Logfile of HijackThis v1.99.1
Scan saved at 5:28:03 PM, on 8/28/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Mozy\mozybackup.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
C:\Program Files\TrippLite\PowerAlert\engine\pa.exe
C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\WFXSVC.EXE
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\WinFax\WFXMOD32.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
C:\Program Files\TrippLite\PowerAlert\console\pastatus.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\WINDOWS\system32\wfxsnt40.exe
C:\PROGRA~1\WinFax\WFXSWTCH.exe
C:\Program Files\Logitech\MediaLife\MediaLifeService.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\PROGRA~1\DELLSU~1\DSAgnt.exe
C:\Program Files\PC Magazine Utilities\Startup Cop Pro\StartupCopPro.exe
C:\Program Files\ScanSoft\PaperPort\PPWebCap.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\InterMute\SpySubtract\SpySub.exe
C:\Program Files\Mozy\mozystat.exe
C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktopOE.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\John Gapp\Desktop\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://bfc.myway.com/search/de_srchlft.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: URLSearchHook Class - {37D2CDBF-2AF4-44AA-8113-BD0D2DA3C2B8} - C:\Program Files\JUSearch\SearchEnh1.dll
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll
O3 - Toolbar: JunoBar - {5854FAC4-5BF0-47DD-B5A9-A5EA8CFF3CF4} - C:\Program Files\Juno\toolbar.dll
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [PAStatus] "C:\Program Files\TrippLite\PowerAlert\console\pastatus.exe"
O4 - HKLM\..\Run: [PALogView] "C:\Program Files\TrippLite\PowerAlert\console\logview.exe" /s
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [IntelMeM] "C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe"
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [CTSysVol] "C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe" /r
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [WinFaxAppPortStarter] wfxsnt40.exe
O4 - HKLM\..\Run: [WFXSwtch] C:\PROGRA~1\WinFax\WFXSWTCH.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SetDefPrt] "C:\Program Files\Brother\Brmfl05c\BrStDvPt.exe"
O4 - HKLM\..\Run: [ControlCenter2.0] "C:\Program Files\Brother\ControlCenter2\brctrcen.exe" /autorun
O4 - HKLM\..\Run: [MediaLifeService] "C:\Program Files\Logitech\MediaLife\MediaLifeService.exe"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [TClockEx] "C:\Program Files\TClockEx\TCLOCKEX.EXE"
O4 - HKCU\..\Run: [DellSupport] "C:\PROGRA~1\DELLSU~1\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [Norton SystemWorks] "C:\Program Files\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
O4 - HKCU\..\Run: [StartupCop Pro Startup Launcher] "C:\Program Files\PC Magazine Utilities\Startup Cop Pro\StartupCopPro.exe" /startup
O4 - HKCU\..\Run: [PPWebCap] "C:\Program Files\ScanSoft\PaperPort\PPWebCap.exe"
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - Startup: Mozy Status.lnk = C:\Program Files\Mozy\mozystat.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check(2).lnk = C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\E_SRCV02.EXE
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: SpySubtract.lnk = C:\Program Files\InterMute\SpySubtract\SpySub.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://download.windowsupdate.com
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://www.pcpitstop.com/internet/pcpConnCheck.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1120830435171
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1121545194296
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as…rl/SymAData.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: bw+0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {ADBF8089-5833-4757-B3B6-718D21333C06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\SYSTEM32\ati2sgag.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: MozyBackup - Unknown owner - C:\Program Files\Mozy\mozybackup.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: PowerAlert Agent - Unknown owner - C:\Program Files\TrippLite\PowerAlert\engine/pa.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: WinFax PRO (wfxsvc) - Symantec Corporation - C:\WINDOWS\system32\WFXSVC.EXE

*************************************************************
ewido anti-spyware - Scan Report
———————————————————

+ Created at: 5:14:18 PM 8/28/2006

+ Scan result:



:mozilla.27:C:\RECYCLER\NPROTECT\00003881.MOZ -> TrackingCookie.2o7 : No action taken.
:mozilla.28:C:\RECYCLER\NPROTECT\00002817.MOZ -> TrackingCookie.2o7 : No action taken.
:mozilla.28:C:\RECYCLER\NPROTECT\00003881.MOZ -> TrackingCookie.2o7 : No action taken.
:mozilla.29:C:\RECYCLER\NPROTECT\00002817.MOZ -> TrackingCookie.2o7 : No action taken.
:mozilla.29:C:\RECYCLER\NPROTECT\00003881.MOZ -> TrackingCookie.2o7 : No action taken.
:mozilla.30:C:\RECYCLER\NPROTECT\00002817.MOZ -> TrackingCookie.2o7 : No action taken.
:mozilla.30:C:\RECYCLER\NPROTECT\00003881.MOZ -> TrackingCookie.2o7 : No action taken.
:mozilla.31:C:\RECYCLER\NPROTECT\00002817.MOZ -> TrackingCookie.2o7 : No action taken.
:mozilla.109:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.111:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.126:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.128:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.47:D:\Genie Backup II July 29, 2006@02.38.12 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Atdmt : No action taken.
:mozilla.47:D:\Genie Backup II July 29, 2006@02.38.12 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Atdmt : No action taken.
:mozilla.49:C:\RECYCLER\NPROTECT\00003881.MOZ -> TrackingCookie.Atdmt : No action taken.
:mozilla.53:C:\RECYCLER\NPROTECT\00002817.MOZ -> TrackingCookie.Atdmt : No action taken.
:mozilla.41:C:\RECYCLER\NPROTECT\00002817.MOZ -> TrackingCookie.Coremetrics : No action taken.
:mozilla.46:C:\RECYCLER\NPROTECT\00003881.MOZ -> TrackingCookie.Coremetrics : No action taken.
:mozilla.49:C:\RECYCLER\NPROTECT\00002817.MOZ -> TrackingCookie.Coremetrics : No action taken.
:mozilla.8:C:\RECYCLER\NPROTECT\00003881.MOZ -> TrackingCookie.Coremetrics : No action taken.
:mozilla.104:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.109:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.140:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.144:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.154:D:\Genie Backup II August 23, 2006@03.50.12 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.154:D:\Genie Backup II August 23, 2006@03.50.12 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.155:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.156:D:\Genie Backup II August 23, 2006@03.50.12 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.156:D:\Genie Backup II August 23, 2006@03.50.12 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.159:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.164:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.176:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.26:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.42:C:\RECYCLER\NPROTECT\00003881.MOZ -> TrackingCookie.Googleadservices : No action taken.
:mozilla.45:C:\RECYCLER\NPROTECT\00002817.MOZ -> TrackingCookie.Googleadservices : No action taken.
:mozilla.46:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.47:D:\Genie Backup II August 09, 2006@03.50.12 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.47:D:\Genie Backup II August 09, 2006@03.50.12 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.48:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.68:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.74:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.75:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.75:D:\Genie Backup II July 29, 2006@02.38.12 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.75:D:\Genie Backup II July 29, 2006@02.38.12 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.76:D:\Genie Backup.0 July 17, 2006@04.28.26 PM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.76:D:\Genie Backup.0 July 17, 2006@04.28.26 PM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.82:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.87:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.87:D:\Genie Backup II July 29, 2006@02.38.12 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.87:D:\Genie Backup II July 29, 2006@02.38.12 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.93:D:\Genie Backup.0 July 17, 2006@04.28.26 PM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.93:D:\Genie Backup.0 July 17, 2006@04.28.26 PM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.96:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.97:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.166:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.168:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.177:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.178:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.180:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.189:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.65:D:\Genie Backup II July 29, 2006@02.38.12 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.65:D:\Genie Backup II July 29, 2006@02.38.12 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.67:D:\Genie Backup II July 29, 2006@02.38.12 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.67:D:\Genie Backup II July 29, 2006@02.38.12 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.68:D:\Genie Backup II July 29, 2006@02.38.12 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.68:D:\Genie Backup II July 29, 2006@02.38.12 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.84:D:\Genie Backup II July 29, 2006@02.38.12 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.84:D:\Genie Backup II July 29, 2006@02.38.12 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.100:D:\Genie Backup.0 July 17, 2006@04.28.26 PM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.100:D:\Genie Backup.0 July 17, 2006@04.28.26 PM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.31:D:\Genie Backup II August 16, 2006@03.50.11 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.31:D:\Genie Backup II August 16, 2006@03.50.11 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.43:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.44:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.45:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.65:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.66:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.67:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.98:D:\Genie Backup II August 23, 2006@03.50.12 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.98:D:\Genie Backup II August 23, 2006@03.50.12 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.54:D:\Genie Backup II August 23, 2006@03.50.12 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.54:D:\Genie Backup II August 23, 2006@03.50.12 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.55:D:\Genie Backup II August 23, 2006@03.50.12 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.55:D:\Genie Backup II August 23, 2006@03.50.12 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.56:D:\Genie Backup II August 23, 2006@03.50.12 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.56:D:\Genie Backup II August 23, 2006@03.50.12 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.57:D:\Genie Backup II August 23, 2006@03.50.12 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.57:D:\Genie Backup II August 23, 2006@03.50.12 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.114:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.115:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.116:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.117:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.92:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.93:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.94:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.95:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.105:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Tracking101 : No action taken.
:mozilla.106:D:\Genie Backup II August 05, 2006@02.38.17 AM\App\Mozilla FireFox Profiles\AFolder\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Tracking101 : No action taken.
:mozilla.83:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Tracking101 : No action taken.
:mozilla.84:D:\Genie Backup II August 05, 2006@02.38.17 AM\C\Documents and Settings\John Gapp\Application Data\Mozilla\Firefox\Profiles\8mb9zgyd.default\cookies.txt -> TrackingCookie.Tracking101 : No action taken.


::Report end

JJGapp in Redmond, Oregon
Post #2
Hi jjgapp:

Please print, or copy and paste this text into a Notepad file and place it on your desktop, to review as you work. Please proceed with this fix in the order provided below. Please read this carefully, before beginning.

Hope you have not reinstalled your OS. By the way, did you do a CHKDSK, just before the DEFRAG ? Defrag likes a clean disk on which to do its work. Otherwise, some things could remain undone.

As you can see from the Ewido report, it did nothing except report. To fix the things Ewido finds, it must be set up to run differently. See below.

Ad-Aware SE needs special setup and running instructions also. Heres a link.
Install and how to use Ad-aware SE
http://www.bleepingcomputer.com/forums/ind…showtutorial=48

After using Ad-Aware SE, always reboot to allow it to finish.



The first question would naturally be, have you installed anything knowingly, just before the slowdown ? If so, that is the first suspect.
Possibly Norton/Symantec, which is known to be a heavy user of resources.

Go to Start -> Settings -> Control Panel -> Add/Remove Programs. If found remove the program(s).
SearchNugget Toolbar
MyWaySA

Disable SpySweeper:
You have SpySweeper installed. While this is a great program, we need to temporarily disable (not uninstall) the program because it might stop our fix.
  • Open it click >Options over to the left then >program options>Uncheck "load at windows startup"
  • Over to the left click "shields" and uncheck all there.
  • Uncheck" home page shield".
  • Uncheck ''automatically restore default without notification".
After all of the fixes are complete it is very important that you enable SpySweeper again.

Disable Ewido:
Please disable Ewido, as it may interfere with the fix.
To disable Ewido:
From the system tray:
  • Right-click the system tray icon and uncheck real time protection.
    or From within Ewido -
  • Under 'Your security status', if the real time protection is active, deactivate it by clicking 'real time protection' until the status says 'inactive'.
Once your log is clean you can re-enable Ewido.

Please set your system to show all files; please see here if you're unsure how to do this.

Close all windows and browsers, leaving only HijackThis running.

Place a check beside each of these entries listed below, if still present.

R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)

Click on Fix Checked when finished and exit HijackThis.

Reboot into Safe Mode: see here if you are not sure how to do this.

Using Windows Explorer, locate the following files/folders shown DARK and delete them, if still present:

C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll

Exit Explorer, enable hidden files and reboot.

Next:

Please use the following links to run two, or more of these online Virus Scanners and let them fix whatever they find.

If you are using any of the browsers listed just below, the following online Virus scanning site is compatable.
When using Trend Micro, be sure and put a check in the box by "Auto Clean" before you do the scan. If it finds anything that it cannot clean have it delete it or make a note of the file location, so you can delete it yourself.
http://be.trendmicro-europe.com/consumer/h…call_launch.php
If you are using any of these browsers:
Microsoft Internet Explorer
Netscape (6+)
Mozilla (1+)
Firefox (all)
Opera (7.5+)

Internet Explorer users can also use the following links.

When using Trend Micro, be sure and put a check in the box by "Auto Clean" before you do the scan. If it finds anything that it cannot clean have it delete it or make a note of the file location, so you can delete it yourself.
TrendMicro HouseCall
http://www.kaspersky.com/virusscanner
http://www.kaspersky.co.uk/news.html?id=146100010
Bitdefender and let it delete everything it finds.
eTrust AntiVirus Web Scanner
Panda ActiveScan
Note any thing that can't be fixed.

Please reboot when finished.

Next:

First, lets do a bit of cleaning, to make the Ewido report managable.

Clean your Cache and Cookies in IE:
  • Close all instances of Outlook Express and Internet Explorer
  • Go to Control Panel > Internet Options > General tab
  • Click the "Delete Cookies" button
  • Next to it, Click the "Delete Files" button
  • When prompted, place a check in: "Delete all offline content", click OK
Clean your Cache and Cookies in Firefox (In case you also have Firefox installed):
  • Go to Tools > Options.
  • Click Privacy in the menu on the left side of the Options window.
  • Click the Clear button located to the right of each option (History, Cookies, Cache).
  • Click OK to close the Options window
    Alternatively, you can clear all information stored while browsing by clicking Clear All.
    A confirmation dialog box will be shown before clearing the information.
Clean other Temporary files + Recycle bin
  • Go to start > run and type: cleanmgr and click ok.
  • Let it scan your system for files to remove.
  • Make sure Temporary Files, Temporary Internet Files, and Recycle Bin are the only things checked.
  • Press OK to remove them.

    Please Note: This is a new version of Ewido Anti-Malware. It has a new set of setup and running instructions. Please delete any other versions and use the setup and usage directions shown below.

    Download ewido anti-spyware from HERE and save that file to your desktop.
    This is a 30 day trial of the program
    • Once you have downloaded ewido anti-spyware, locate the icon on the desktop and double-click it to launch the set up program.
    • Once the setup is complete you will need run ewido and update the definition files.
    • On the main screen select the icon "Update" then select the "Update now" link.
    • Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
    • Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
    • Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
    • Under "Reports"
    • Select "Automatically generate report after every scan"
    • Un-Select "Only if threats were found"
    Close ewido anti-spyware, Do Not run a scan at this time.

    Reboot your computer into SafeMode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight SafeMode then hit enter.
    IMPORTANT: Do not open any other windows or programs while ewido is scanning, it may interfere with the scanning proccess:
    • Lauch ewido-anti-spyware by double-clicking the icon on your desktop.
    • Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
    • ewido will now begin the scanning process, be patient this may take a little time.
      Once the scan is complete do the following:
    • If you have any infections you will prompted, then select "Apply all actions"
    • Next select the "Reports" icon at the top.
    • Select the "Save report as" button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important). I suggest saving it to your desktop.
    Close ewido and reboot your system back into Normal Mode.

    Please run Hijack This again. Scan and copy the log, then post it into this topic, along with the Ewido report.

    Please advise if any problems remain.

    Please use the [external image: Posted Image] button to reply.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI