jclaye
Topic Starter
Over the last few days (a week or so), my computer has been experiencing strange slowdowns and occasional crashes.
I have run antivirus and anti-spyware programs: NOD32, Ad-Aware, SpyBot, ScanSpyware, and even AVG Antispware 7 (installed this one yesterday). The latter only found one thing, which I was able to eliminate (sorry but can't remember the name off the top of my head), and the former programs have found nothing strange or that shouldn't be there.
I have also run complete chkdsk (including surface tests), and I have defragged twice over the last 4 days.
Anyway, I suspect there might be something wrong - or traces of something that might cause these slowdowns and long crashes (up to 5 minutes or so), so I am posting a HiJack This Log in the hope someone can take a look at it. Thank you so much!! (By the way, my Win XP is in Spanish).
Juan
——-
Logfile of HijackThis v1.99.1
Scan saved at 13:21:58, on 12/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\Sygate\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Archivos de programa\AVG Anti-Spyware\guard.exe
C:\Archivos de programa\Eset\nod32krn.exe
C:\Archivos de programa\PerfectDisk\PDAgent.exe
C:\Archivos de programa\Eset\nod32kui.exe
C:\Archivos de programa\AVG Anti-Spyware\avgas.exe
C:\WINDOWS\SaverStarter.exe
C:\Archivos de programa\YPOPs\YPOPs.exe
C:\Archivos de programa\PerfectDisk\PDEngine.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\NOTEPAD.EXE
D:\Utilitarios\HiJackThis\HijackThis.exe
C:\Archivos de programa\Avant Browser\avant.exe
D:\Archivos de programa\Eudora\Eudora.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - D:\Archivos de programa\SnagIt\SnagItBHO.dll
O2 - BHO: (no name) - {206E52E0-D52E-11D4-AD54-0000E86C26F6} - D:\ARCHIV~1\FRESHD~1\fdcatch.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Utilitarios\Spybot\SDHelper.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - D:\Archivos de programa\SnagIt\SnagItIEAddin.dll
O3 - Toolbar: FreshDownload Bar - {ED0E8CA5-42FB-4B18-997B-769E0408E79D} - D:\ARCHIV~1\FRESHD~1\fdiebar.dll
O4 - HKLM\..\Run: [nod32kui] "C:\Archivos de programa\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [SmcService] C:\ARCHIV~1\Sygate\smc.exe -startgui
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Archivos de programa\AVG Anti-Spyware\avgas.exe" /minimized
O4 - Startup: SaverStarter.lnk = C:\WINDOWS\SaverStarter.exe
O4 - Startup: YPOPs.lnk = ?
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://D:\ARCHIV~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\bin\npjpi150_05.dll
O9 - Extra button: FreshDownload - {AEC5132C-77D2-4E95-91D7-410AE6ED5747} - D:\Archivos de programa\FreshDownload\fd.exe
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Archivos de programa\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Archivos de programa\ICQLite\ICQLite.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\ARCHIV~1\YAHOOM~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\ARCHIV~1\YAHOOM~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1160000450074
O17 - HKLM\System\CCS\Services\Tcpip\..\{A3F97F5D-37CE-4085-81B8-E6591FFA9563}: NameServer = 200.40.220.245 200.40.30.245
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\MSNMES~1\MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Archivos de programa\Common\Acronis\Schedule2\schedul2.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Archivos de programa\AVG Anti-Spyware\guard.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Archivos de programa\Common\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Archivos de programa\Eset\nod32krn.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Archivos de programa\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Archivos de programa\PerfectDisk\PDEngine.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Archivos de programa\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - D:\Utilitarios\SiSoftware Sandra Pro Business\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - D:\Utilitarios\SiSoftware Sandra Pro Business\RpcSandraSrv.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Archivos de programa\Sygate\smc.exe
O23 - Service: Speed Disk service - Symantec Corporation - D:\ARCHIV~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: DirectX Service (Wicap) - Unknown owner - C:\WINDOWS\system32\directx.exe (file missing)
I have run antivirus and anti-spyware programs: NOD32, Ad-Aware, SpyBot, ScanSpyware, and even AVG Antispware 7 (installed this one yesterday). The latter only found one thing, which I was able to eliminate (sorry but can't remember the name off the top of my head), and the former programs have found nothing strange or that shouldn't be there.
I have also run complete chkdsk (including surface tests), and I have defragged twice over the last 4 days.
Anyway, I suspect there might be something wrong - or traces of something that might cause these slowdowns and long crashes (up to 5 minutes or so), so I am posting a HiJack This Log in the hope someone can take a look at it. Thank you so much!! (By the way, my Win XP is in Spanish).
Juan
——-
Logfile of HijackThis v1.99.1
Scan saved at 13:21:58, on 12/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\Sygate\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Archivos de programa\AVG Anti-Spyware\guard.exe
C:\Archivos de programa\Eset\nod32krn.exe
C:\Archivos de programa\PerfectDisk\PDAgent.exe
C:\Archivos de programa\Eset\nod32kui.exe
C:\Archivos de programa\AVG Anti-Spyware\avgas.exe
C:\WINDOWS\SaverStarter.exe
C:\Archivos de programa\YPOPs\YPOPs.exe
C:\Archivos de programa\PerfectDisk\PDEngine.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\NOTEPAD.EXE
D:\Utilitarios\HiJackThis\HijackThis.exe
C:\Archivos de programa\Avant Browser\avant.exe
D:\Archivos de programa\Eudora\Eudora.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - D:\Archivos de programa\SnagIt\SnagItBHO.dll
O2 - BHO: (no name) - {206E52E0-D52E-11D4-AD54-0000E86C26F6} - D:\ARCHIV~1\FRESHD~1\fdcatch.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Utilitarios\Spybot\SDHelper.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - D:\Archivos de programa\SnagIt\SnagItIEAddin.dll
O3 - Toolbar: FreshDownload Bar - {ED0E8CA5-42FB-4B18-997B-769E0408E79D} - D:\ARCHIV~1\FRESHD~1\fdiebar.dll
O4 - HKLM\..\Run: [nod32kui] "C:\Archivos de programa\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [SmcService] C:\ARCHIV~1\Sygate\smc.exe -startgui
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Archivos de programa\AVG Anti-Spyware\avgas.exe" /minimized
O4 - Startup: SaverStarter.lnk = C:\WINDOWS\SaverStarter.exe
O4 - Startup: YPOPs.lnk = ?
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://D:\ARCHIV~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\bin\npjpi150_05.dll
O9 - Extra button: FreshDownload - {AEC5132C-77D2-4E95-91D7-410AE6ED5747} - D:\Archivos de programa\FreshDownload\fd.exe
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Archivos de programa\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Archivos de programa\ICQLite\ICQLite.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\ARCHIV~1\YAHOOM~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\ARCHIV~1\YAHOOM~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1160000450074
O17 - HKLM\System\CCS\Services\Tcpip\..\{A3F97F5D-37CE-4085-81B8-E6591FFA9563}: NameServer = 200.40.220.245 200.40.30.245
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\MSNMES~1\MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Archivos de programa\Common\Acronis\Schedule2\schedul2.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Archivos de programa\AVG Anti-Spyware\guard.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Archivos de programa\Common\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Archivos de programa\Eset\nod32krn.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Archivos de programa\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Archivos de programa\PerfectDisk\PDEngine.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Archivos de programa\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - D:\Utilitarios\SiSoftware Sandra Pro Business\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - D:\Utilitarios\SiSoftware Sandra Pro Business\RpcSandraSrv.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Archivos de programa\Sygate\smc.exe
O23 - Service: Speed Disk service - Symantec Corporation - D:\ARCHIV~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: DirectX Service (Wicap) - Unknown owner - C:\WINDOWS\system32\directx.exe (file missing)