Computer Keeps Freezing, Sometimes Crashing

Hello and welcome Try this: To uninstall Internet Explorer 7 to return to Internet Explorer 6 on Windows XP Click "Start," and then click "Control Panel." Click "Add or Remove Programs." Check "Show Updates" at the top of the dialog box. Scroll down the list and highlight the version of Internet Explorer 7 that you are running, and then click "Change/Remove."

Try this: To uninstall Internet Explorer 7 to return to Internet Explorer 6 on Windows XP ***************** I have considered this option, but I am also curious to know if anyone knows whether IE7 has been causing problems such as that which I described. It seems to me that it's just as reasonable that IE7 is NOT the problem here. While IE is not my favorite browser in the world, I must add that I do have IE7 installed on another computer at home and am experiencing no problems with it at all. Before I leap backwards to IE6, I'd like to receive a little more feedback re: the HijackThis logfile I posted and recommendations for what to and NOT to remove. Assuming I do get some recommendations in that area, I think I'd like to try those first. ONE MORE THING I SHOULD HAVE MENTIONED: I believe (but am not absolutely certain) that BEFORE the upgrade to IE7 the computer in question that is freezing up constantly was also not able to perform complete scans of AdAware and HouseCall. These programs would freeze at a certain point and then go no further. The computer itself was NOT freezing when these programs stopped running, just these scan programs themselves were freezing in their tracks. This behaviour made me suspicious that there may be a trojan horse or some other deeply embedded gremlin causing all this mischief. PROBLEM IS, what does one do when the very programs that are supposed to root out such problems can't perform their functions? Again, thanks in advance to all for your assistance.

There are a number of things that can cause the issues you're having.

For IE 7 users.
Microsoft released a patch for Internet Explorer 7 (IE7) that will boost the brand-new browser's performance on some Web sites.

Patch:


Slow Computer.
http://users.telenet.be/bluepatchy/miekiem…owcomputer.html


Do you have your windows CD?


I suggest you do this:


Please do not delete anything unless instructed to.


Run hijackthis. Hit None of the above, Click Do a System Scan Only. Put a Check in the box on the left side on these:

O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)

Optional Resource hogs that don't need to run at startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5746\GoogleToolbarNotifier.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15026/CTSUEng.cab
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/housecal…ivex/hcImpl.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15028/CTPID.

Close ALL windows and browsers except HijackThis and click "Fix checked"




Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

(If you use FireFox or the Opera browser
To keep saved passwords, click No at the prompt.)

It's normal after running ATF cleaner that the PC will be slower to boot the first time or two.


Reboot and "copy/paste" a new HijackThis log file into this thread.

Also please describe how your computer behaves at the moment.

It's possible there are corrupt system files and / or hardware problems.

You can use windows sfc (system file checker) You'd need your XP CD to make this work.
Click Start> Run> type sfc /scannow Note the space.
(Note that there is a space between sfc and /scannow)

It's possible there are corrupt system files and / or hardware problems.

You can use windows sfc (system file checker) You'd need your XP CD to make this work.
Click Start> Run> type sfc /scannow Note the space.
(Note that there is a space between sfc and /scannow)

Okay, here's what happened…in the middle of this process, the computer froze.

The general sense I have now is that there is something nasty going on that is (either by design or coincidence) making sure that ANY attempt to completely run a cleaning or diagnostic program will be stopped from completing its task.

I'm going to attempt this scannow one last time while in SAFE MODE and see if I don't have any luck. Although at this point, I'm not holding my breath.

Any thoughts?

Sounds like you could be having a hardware issue. Have you checked the cooling fans and power supply fan to make sure they are working and free of dirt / dust balls? It could be a overheating issue.

Lets try this
Start> All Programs> Accessories> System Tools> Disk Defragmenter

Any update?

Here's what I can tell you:

I defragged the drive and the friggin' thing is still freezin' and a crashin'.

I checked the innards of the machine and dusted and vacuumed, accordingly.

The fan appears to be working fine.

If there is a power supply problem, I don't know how I can test that. I'd need a professional shop to do that, yes?

I'm still of the conviction that there is some kinda virus or trojan that is bollixing up the works and preventing me from completing ANY thorough system scan for such infections or any other problems.

Of course, I'd love it if someone would post a reply and say that there is a/are known virus(es) and/or trojan(s) that cause this sort of thing to happen. Then, perhaps, I could try to download those files that would try to clean those specific problems out of the computer.

Otherwise, I suspect I am looking at a full system reinstall. If you (or anyone else) cannot help with any of what I have written above, is this the conclusion you would draw? If so, where can I find the best set of instructions regarding how to do this properly? I will need to back up everything before I proceed, yes?

OR…is there a way to reinstall the operating system WITHOUT the need to back up all other files?

OR, OR, OR…are there some critical system files that are those most commonly corrupted, which I can try to copy from the original disk to see if they don't attack the problem?

What do you (or others lurking) think?

Almost ready to throw up my hands in disgust (or, maybe just throw up),
but, once again, thankful for all the thoughtful time and attention…

Download AVG Anti-Spyware from HERE and save that file to your
desktop.
This is a 30 day trial of the program

• Once you have downloaded AVG Anti-Spyware, locate the icon on the desktop
  and double-click it to launch the set up program.
• Once the setup is complete you will need run ewido and update the definition
  files.
• On the main screen select the icon "Update" then select the "
  Update now" link.
  • Next select the "Start Update" button, the update will start and a
    progress bar will show the updates being installed.
• Once the update has completed select the "Scanner" icon at the top of
  the screen, then select the "Settings" tab.
• Once in the Settings screen click on "Recommended actions" and then
  select " "Quarantine" .".
• Under "Reports"
  • Select "Automatically generate report after every scan"
  • Un-Select "Only if threats were found"

Close AVG Anti-Spyware, Do Not run a scan just yet, we will shortly.

• Reboot your computer into SafeMode. You can do this by restarting
  your computer and continually tapping the F8 key until a menu appears.
  
  Use your up arrow key to highlight SafeMode then hit enter.
  IMPORTANT: Do not open any other windows or
  programs while AVG Anti-Spyware is scanning, it may interfere with the scanning proccess:
• Lauch AVG Anti-Spyware by double-clicking the icon on your desktop.
• Select the "Scanner" icon at the top and then the "Scan" tab
  then click on "Complete System Scan".
• ewido will now begin the scanning process, be patient this may take a little
  time.
  Once the scan is complete do the following:
• If you have any infections you will prompted, then select "Apply all
  actions"
• Next select the "Reports" icon at the top.
• Select the "Save report as" button in the lower left hand of the
  screen and save it to a text file on your system (make sure to remember where
  you saved that file, this is important).
• Close AVG Anti-Spyware and reboot your system back into Normal Mode and post the
  results of the AVG Anti-Spyware report scan along with a new HijackThis log.

Please use the [external image: Posted Image] Button below to reply.

We've been using AVG for a long time.

However, I tried running it in safe mode and, sure enough, halfway through the process, the computer froze.

Once again, I cannot run any disinfection scans all the way through.

* Download Combofix to your desktop.
Doubleclick combo.exe
Follow the prompts.
Don't click on the window while the fix is running, because that will cause your system to hang.

When finished, it should produce a log, combofix.txt.
Post this log in your next reply together with a new hijackthislog.

Please use the [external image: Posted Image] Button below to reply.

Okay, I downloaded the program and… (I'll bet you'll never guess ;-) … that's right… the computer crashed. I tried rebooting in safe mode, but the computer won't run the program in that mode. So, I tried again…this time in debugging mode. I actually got a log (see below) but, when I first tried to access it…yep, the computer froze. Anyway, here it is: "L£cia Helena Ribas" - 07-01-15 13:45:11 Service Pack 2 ComboFix 07-01-15 - Running from: "C:\Documents and Settings\L£cia Helena Ribas\Desktop" (((((((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) C:\DOCUME~1\LCIAHE~1\Application Data\Install.dat ((((((((((((((((((((((((((((((( Files Created from 2006-12-15 to 2007-01-15 )))))))))))))))))))))))))))))))))) 2007-01-13 17:54 d——– C:\DOCUME~1\ADMINI~1\Application Data\AVG7 2007-01-11 02:28 d——– C:\WINDOWS\system32\Kaspersky Lab 2007-01-08 22:01 d——– C:\DOCUME~1\LCIAHE~1\.housecall6.6 2007-01-07 18:54 d——– C:\WINDOWS\ie7updates 2007-01-04 07:13 d——– C:\DOCUME~1\ALLUSE~1\Application Data\Adobe 2007-01-03 15:33 d——– C:\DOCUME~1\LCIAHE~1\Application Data\Google 2007-01-03 15:24 d——– C:\Program Files\Google 2007-01-03 15:24 d——– C:\DOCUME~1\ALLUSE~1\Application Data\Google 2007-01-03 15:09 d——– C:\Temp 2007-01-01 13:29 d——– C:\fixwareout 2006-12-21 18:24 d——– C:\WINDOWS\WBEM 2006-12-21 18:24 d——– C:\WINDOWS\system32\en-US 2006-12-21 18:23 d–h-c— C:\WINDOWS\ie7 2006-12-21 18:21 121,856 ——— C:\WINDOWS\system32\xmllite.dll 2006-12-21 18:21 d——– C:\WINDOWS\network diagnostic 2006-12-18 21:25 d——– C:\Program Files\Yahoo! (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-01-15 01:03 ——– d——– C:\Program Files\emule 2007-01-04 07:14 ——– d——– C:\Program Files\Common Files\adobe 2007-01-02 15:45 ——– d——– C:\Program Files\ccleaner 2006-12-19 01:56 ——– d——– C:\Program Files\creative 2006-12-19 01:55 ——– d——– C:\Program Files\java 2006-12-19 01:52 ——– d–h—– C:\Program Files\installshield installation information 2006-12-19 01:52 ——– d——– C:\Program Files\cyberlink dvd solution 2006-12-18 22:13 ——– d——– C:\DOCUME~1\LCIAHE~1\Application Data\creative 2006-12-15 21:20 ——– d——– C:\DOCUME~1\LCIAHE~1\Application Data\adobeum 2006-12-14 03:08 ——– d——– C:\Program Files\burrrn 2006-12-13 15:47 ——– d——– C:\Program Files\mp3 my mp3 2.0 2006-12-12 18:18 ——– d——– C:\Program Files\nch swift sound 2006-12-12 18:13 ——– d——– C:\DOCUME~1\LCIAHE~1\Application Data\nch swift sound 2006-12-06 17:22 ——– d——– C:\Program Files\windows media connect 2 2006-11-29 12:56 ——– d——– C:\DOCUME~1\LCIAHE~1\Application Data\macromedia 2006-11-19 08:30 ——– d——– C:\Program Files\virtual dub 2006-11-17 01:18 ——– d——– C:\Program Files\Common Files\xing shared 2006-11-17 01:18 ——– d——– C:\Program Files\Common Files\real 2006-11-08 12:08 383488 –a—— C:\WINDOWS\system32\ieapfltr.dll 2006-11-08 03:06 679424 –a—— C:\WINDOWS\system32\inetcomm.dll 2006-11-07 21:03 6049280 ——— C:\WINDOWS\system32\ieframe.dll 2006-11-07 21:03 50688 ——— C:\WINDOWS\system32\msfeedsbs.dll 2006-11-07 21:03 458752 ——— C:\WINDOWS\system32\msfeeds.dll 2006-11-07 21:03 413696 –a—— C:\WINDOWS\system32\vbscript.dll 2006-11-07 21:03 231424 –a—— C:\WINDOWS\system32\webcheck.dll 2006-11-07 21:03 180736 ——— C:\WINDOWS\system32\ieui.dll 2006-11-07 21:03 156160 –a—— C:\WINDOWS\system32\msls31.dll 2006-11-07 03:27 382976 –a—— C:\WINDOWS\system32\iedkcs32.dll 2006-11-07 03:27 229376 –a—— C:\WINDOWS\system32\ieaksie.dll 2006-11-07 03:26 71680 –a—— C:\WINDOWS\system32\admparse.dll 2006-11-07 03:26 55296 –a—— C:\WINDOWS\system32\iesetup.dll 2006-11-07 03:26 54784 –a—— C:\WINDOWS\system32\ie4uinit.exe 2006-11-07 03:26 43008 –a—— C:\WINDOWS\system32\iernonce.dll 2006-11-07 03:26 152064 –a—— C:\WINDOWS\system32\ieakeng.dll 2006-11-07 03:26 13312 –a—— C:\WINDOWS\system32\ieudinit.exe 2006-11-07 03:26 123904 –a—— C:\WINDOWS\system32\advpack.dll 2006-11-07 03:25 161792 –a—— C:\WINDOWS\system32\ieakui.dll 2006-10-19 11:56 713216 –a—— C:\WINDOWS\system32\sxs.dll 2006-10-18 21:58 8704 –a—— C:\WINDOWS\system32\wdfmgr.exe 2006-10-18 21:58 8704 –a—— C:\WINDOWS\system32\uwdf.exe 2006-10-18 21:47 99840 –a—— C:\WINDOWS\system32\wmpshell.dll 2006-10-18 21:47 991744 –a—— C:\WINDOWS\system32\drmv2clt.dll 2006-10-18 21:47 937984 –a—— C:\WINDOWS\system32\wmnetmgr.dll 2006-10-18 21:47 8231936 –a—— C:\WINDOWS\system32\wmploc.dll 2006-10-18 21:47 767488 ——— C:\WINDOWS\system32\wmvsencd.dll 2006-10-18 21:47 757248 –a—— C:\WINDOWS\system32\wmadmod.dll 2006-10-18 21:47 7168 –a—— C:\WINDOWS\system32\asferror.dll 2006-10-18 21:47 656896 ——— C:\WINDOWS\system32\wmvxencd.dll 2006-10-18 21:47 63488 –a—— C:\WINDOWS\system32\wpdmtpus.dll 2006-10-18 21:47 629760 –a—— C:\WINDOWS\system32\wpd_ci.dll 2006-10-18 21:47 613376 ——— C:\WINDOWS\system32\wmpmde.dll 2006-10-18 21:47 603648 –a—— C:\WINDOWS\system32\wmspdmod.dll 2006-10-18 21:47 542720 –a—— C:\WINDOWS\system32\blackbox.dll 2006-10-18 21:47 535040 ——— C:\WINDOWS\system32\wmdrmsdk.dll 2006-10-18 21:47 429056 –a—— C:\WINDOWS\system32\wmdrmdev.dll 2006-10-18 21:47 414208 –a—— C:\WINDOWS\system32\msscp.dll 2006-10-18 21:47 4096 –a—— C:\WINDOWS\system32\wmvdmoe2.dll 2006-10-18 21:47 4096 –a—— C:\WINDOWS\system32\wmvdmod.dll 2006-10-18 21:47 4096 –a—— C:\WINDOWS\system32\wmvadve.dll 2006-10-18 21:47 4096 –a—— C:\WINDOWS\system32\wmvadvd.dll 2006-10-18 21:47 4096 –a—— C:\WINDOWS\system32\wmsdmoe2.dll 2006-10-18 21:47 4096 –a—— C:\WINDOWS\system32\wmsdmod.dll 2006-10-18 21:47 4096 –a—— C:\WINDOWS\system32\wdfapi.dll 2006-10-18 21:47 4096 –a—— C:\WINDOWS\system32\mpg4dmod.dll 2006-10-18 21:47 4096 ——— C:\WINDOWS\system32\mp4sdmod.dll 2006-10-18 21:47 4096 ——— C:\WINDOWS\system32\mp43dmod.dll 2006-10-18 21:47 38400 ——— C:\WINDOWS\system32\wpdshextres.dll 2006-10-18 21:47 37376 –a—— C:\WINDOWS\system32\wmdmps.dll 2006-10-18 21:47 35840 –a—— C:\WINDOWS\system32\wpdconns.dll 2006-10-18 21:47 356352 –a—— C:\WINDOWS\system32\wpdsp.dll 2006-10-18 21:47 348672 –a—— C:\WINDOWS\system32\wmdrmnet.dll 2006-10-18 21:47 33792 –a—— C:\WINDOWS\system32\wmdmlog.dll 2006-10-18 21:47 321536 –a—— C:\WINDOWS\system32\mswmdm.dll 2006-10-18 21:47 317440 ——— C:\WINDOWS\system32\mp4sdecd.dll 2006-10-18 21:47 314880 –a—— C:\WINDOWS\system32\wmpdxm.dll 2006-10-18 21:47 295936 ——— C:\WINDOWS\system32\wmpeffects.dll 2006-10-18 21:47 284160 ——— C:\WINDOWS\system32\portabledeviceapi.dll 2006-10-18 21:47 276992 –a—— C:\WINDOWS\system32\audiodev.dll 2006-10-18 21:47 27136 –a—— C:\WINDOWS\system32\mspmsnsv.dll 2006-10-18 21:47 2603008 ——— C:\WINDOWS\system32\wpdshext.dll 2006-10-18 21:47 259072 ——— C:\WINDOWS\system32\mpg4decd.dll 2006-10-18 21:47 259072 ——— C:\WINDOWS\system32\mp43decd.dll 2006-10-18 21:47 2450944 –a—— C:\WINDOWS\system32\wmvcore.dll 2006-10-18 21:47 242688 –a—— C:\WINDOWS\system32\wmpasf.dll 2006-10-18 21:47 229376 –a—— C:\WINDOWS\system32\cewmdm.dll 2006-10-18 21:47 227328 –a—— C:\WINDOWS\system32\wmerror.dll 2006-10-18 21:47 222208 –a—— C:\WINDOWS\system32\wmasf.dll 2006-10-18 21:47 212992 ——— C:\WINDOWS\system32\mfplat.dll 2006-10-18 21:47 211456 –a—— C:\WINDOWS\system32\qasf.dll 2006-10-18 21:47 204288 –a—— C:\WINDOWS\system32\wmpsrcwp.dll 2006-10-18 21:47 199168 ——— C:\WINDOWS\system32\portabledevicewmdrm.dll 2006-10-18 21:47 179712 –a—— C:\WINDOWS\system32\msnetobj.dll 2006-10-18 21:47 175616 –a—— C:\WINDOWS\system32\mspmsp.dll 2006-10-18 21:47 166912 ——— C:\WINDOWS\system32\portabledevicetypes.dll 2006-10-18 21:47 1661440 –a—— C:\WINDOWS\system32\wmpencen.dll 2006-10-18 21:47 1574912 ——— C:\WINDOWS\system32\wmvencod.dll 2006-10-18 21:47 157184 –a—— C:\WINDOWS\system32\wmidx.dll 2006-10-18 21:47 154624 –a—— C:\WINDOWS\system32\wpdmtp.dll 2006-10-18 21:47 1543680 ——— C:\WINDOWS\system32\wmvdecod.dll 2006-10-18 21:47 1382912 ——— C:\WINDOWS\system32\wmvsdecd.dll 2006-10-18 21:47 133632 ——— C:\WINDOWS\system32\wpdshserviceobj.dll 2006-10-18 21:47 1329152 –a—— C:\WINDOWS\system32\wmspdmoe.dll 2006-10-18 21:47 132096 ——— C:\WINDOWS\system32\portabledevicewiacompat.dll 2006-10-18 21:47 130048 ——— C:\WINDOWS\system32\wmpps.dll 2006-10-18 21:47 11264 –a—— C:\WINDOWS\system32\laprxy.dll 2006-10-18 21:47 1117696 –a—— C:\WINDOWS\system32\wmadmoe.dll 2006-10-18 21:47 101888 ——— C:\WINDOWS\system32\portabledeviceclassextension.dll 2006-10-18 20:03 100864 –a—— C:\WINDOWS\system32\logagent.exe 2006-10-18 20:00 249856 ——— C:\WINDOWS\system32\drmupgds.exe 2006-10-18 20:00 17408 ——— C:\WINDOWS\system32\wpdshextautoplay.exe 2006-10-17 12:06 78336 –a—— C:\WINDOWS\system32\ieencode.dll 2006-10-17 12:05 40960 –a—— C:\WINDOWS\system32\licmgr10.dll 2006-10-17 12:05 206336 ——— C:\WINDOWS\system32\winfxdocobj.exe 2006-10-17 12:05 105984 –a—— C:\WINDOWS\system32\url.dll 2006-10-17 12:04 101376 –a—— C:\WINDOWS\system32\occache.dll 2006-10-17 12:03 17408 –a—— C:\WINDOWS\system32\corpol.dll 2006-10-17 11:58 61952 ——— C:\WINDOWS\system32\icardie.dll 2006-10-17 11:58 12288 ——— C:\WINDOWS\system32\msfeedssync.exe 2006-10-17 11:57 36352 –a—— C:\WINDOWS\system32\imgutil.dll 2006-10-17 11:57 266752 ——— C:\WINDOWS\system32\iertutil.dll 2006-10-17 11:56 45568 –a—— C:\WINDOWS\system32\mshta.exe 2006-10-17 11:28 48128 –a—— C:\WINDOWS\system32\mshtmler.dll (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgcc.exe /STARTUP" "VTTimer"="VTTimer.exe" "Cmaudio"="RunDll32 cmicnfg.cpl,CMICtrlWnd" "Zone Labs Client"="\"C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe\"" "TkBellExe"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] "Installed"="1" "NoChange"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] "Installed"="1" [HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce] "RunNarrator"="Narrator.exe" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\runonce] "RunNarrator"="Narrator.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk] "path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\Adobe Reader Speed Launch.lnk" "backup"="C:\\WINDOWS\\pss\\Adobe Reader Speed Launch.lnkCommon Startup" "location"="Common Startup" "command"="C:\\PROGRA~1\\Adobe\\ACROBA~1.0\\Reader\\READER~1.EXE " "item"="Adobe Reader Speed Launch" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk] "path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\Microsoft Office.lnk" "backup"="C:\\WINDOWS\\pss\\Microsoft Office.lnkCommon Startup" "location"="Common Startup" "command"="C:\\PROGRA~1\\MICROS~2\\Office10\\OSA.EXE -b -l" "item"="Microsoft Office" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cmaudio] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="RunDll32 cmicnfg" "hkey"="HKLM" "command"="RunDll32 cmicnfg.cpl,CMICtrlWnd" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Creative Detector] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="CTDetect" "hkey"="HKCU" "command"="\"C:\\Program Files\\Creative\\MediaSource\\Detector\\CTDetect.exe\" /R" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="ctfmon" "hkey"="HKCU" "command"="C:\\WINDOWS\\system32\\ctfmon.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="iTunesHelper" "hkey"="HKLM" "command"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\"" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="MsnMsgr" "hkey"="HKCU" "command"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="NeroCheck" "hkey"="HKLM" "command"="C:\\WINDOWS\\system32\\NeroCheck.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCTVOICE] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="pctspk" "hkey"="HKLM" "command"="pctspk.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="qttask" "hkey"="HKLM" "command"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="jusched" "hkey"="HKLM" "command"="C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="realsched" "hkey"="HKLM" "command"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UserFaultCheck] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="dumprep 0 -u" "hkey"="HKLM" "command"="%systemroot%\\system32\\dumprep 0 -u" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload] "UPnPMonitor"="{e57ce738-33e8-4c51-8354-bb4de9d215d1}" "WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}" [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "ALUAlert"="C:\\Program Files\\Symantec\\LiveUpdate\\ALUNotify.exe" "AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "ALUAlert"="C:\\Program Files\\Symantec\\LiveUpdate\\ALUNotify.exe" "AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "DisableTaskMgr"=dword:00000000 [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 HTTPFilter REG_MULTI_SZ HTTPFilter\0\0 DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0 p2psvc REG_MULTI_SZ p2psvc\0p2pimsvc\0p2pgasvc\0PNRPSvc\0\0 WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0 Contents of the 'Scheduled Tasks' folder C:\WINDOWS\tasks\AppleSoftwareUpdate.job Completion time: 07-01-15 13:47:42 ******************************************************************* The next post will have the latest HijackThis log.