What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Internet become relatively slow and so is the computer

2 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Logfile of HijackThis v1.99.1 Scan saved at 下午 09:12:25, on 2006/12/4 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\Documents and Settings\Administrator.LINUX-LMX20JI5L\桌面\HijackThis.exe C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\System32\ctfmon.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\system32\sysresrv.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Administrator.LINUX-LMX20JI5L\桌面\HijackThis.exe C:\Program Files\MSN Messenger\msnmsgr.exe O1 - Hosts: 61.141.31.11 www.kzdh.com O1 - Hosts: 61.141.31.11 www.7255.com O1 - Hosts: 61.141.31.11 www.7322.com O1 - Hosts: 61.141.31.11 www.7939.com O1 - Hosts: 61.141.31.11 www.piaoxue.com O1 - Hosts: 61.141.31.11 www.feixu.net O1 - Hosts: 61.141.31.11 www.6781.com O1 - Hosts: 61.141.31.11 www.7b.com.cn O1 - Hosts: 61.141.31.11 7b.com.cn O1 - Hosts: 61.141.31.11 www.918188.com O1 - Hosts: 61.141.31.11 hao.allxue.com O1 - Hosts: 61.141.31.11 good.allxue.com O1 - Hosts: 61.141.31.11 baby.allxue.com O1 - Hosts: 61.141.31.11 www.allxue.com O1 - Hosts: 61.141.31.11 about.lank.la O1 - Hosts: 61.141.31.11 www.x114x.com O1 - Hosts: 61.141.31.11 www.37ss.com O1 - Hosts: 61.141.31.11 www.7k.cc O1 - Hosts: 61.141.31.11 www.73ss.com O1 - Hosts: 61.141.31.11 www.hao123.com O1 - Hosts: 61.141.31.11 www.81915.com O1 - Hosts: 61.141.31.11 222.88.90.22 O1 - Hosts: 61.141.31.11 www.9991.com O1 - Hosts: 61.141.31.11 www.my123.com O1 - Hosts: 61.141.31.11 www.haokan123.com O1 - Hosts: 61.141.31.11 www.5566.net O1 - Hosts: 61.141.31.11 www.gjj.cc O1 - Hosts: 61.141.31.11 www.2345.com O1 - Hosts: 61.141.31.11 www.123wa.com O1 - Hosts: 61.141.31.11 www.ku886.com O1 - Hosts: 61.141.31.11 www.5icrack.com O1 - Hosts: 61.141.31.11 www.jjol.cn O1 - Hosts: 61.141.31.11 www.xinhai168.com O1 - Hosts: 61.141.31.11 ooooos.com O1 - Hosts: 61.141.31.11 www.ooooos.com O1 - Hosts: 61.141.31.11 www.8757.com O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe O23 - Service: System Recover Service (SysreSrv) - Unknown owner - s (file missing) Thank you for you guys help
Post #2
Hi Welcome to Tom Coyote's! I'm Angelfire and it'll be my pleasure to assist you in your problem. Reasearching Hijackthis logs could take sometime so please, be patient while I research a fix for you. Also, I have to let experts check my fixes first before bringing them to you.
Post #3
You may want to save this instructions in notepad or print them since you'll work offline.

*Hijackthis needs to be in its own folder:

a.) While in your Desktop, right click in the background > Go to New > click Folder > Name the Folder HJT

b.) After creating the folder, find your Hijackthis.exe (it looks like a detonator with some dynamites). Then, drag and drop that file to the new folder you created.

*It is possible that some of the entries are hiding from us, so please rename Hijackthis.exe to something like angelfire777.exe

____________________________

*Download The Hoster by FunkyToad
Unzip the program and run it.
  • Click "Restore Original Hosts", click "OK"
  • Exit the program.
*Download this file - combofix.exe and save it to your desktop.

Open my computer > double click C:\ > cut and paste the combofix.exe that you just downloaded to C:\

Boot into safe mode by tapping the F8 key just before Windows starts to load.

Double click combofix.exe.

When finished, it shall produce a log for you. Save it and post that log in your next reply.

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

In your next post, please include
  • new hijackthis log
  • combofix log
Post #5
This topic is being closed due to lack of response, if you need this topic reopened, please request this by sending an email to us at the following link:
(Click for address)

Include your post user name and detail why you need it reopened with a valid link to your post.
Any bad links or emails that are not from the original poster will be deleted without response.
Any emails without the subject "Reopen" will be deleted without being looked at.

If this is not your thread please start a New Topic.

Kim

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI