Logfile of HijackThis v1.99.1
waterdog1111
Welcome to
Tom Coyote . Sorry about the delay in responding but we are as most times just overwhelmed with logs.
Nothing bad on your log, what issues are you having to make you think its a Virus or Malware?
No problem. I understand.
I recently download an update for McAfee and now my PC seems slower (web pages don't load as quickly).
Also, now when I shut-down the PC an "End Task" window pops up that there is a program named "sw" that needs to be stopped. I hadn't seen this message prior to the McAfee update.
Thanks for your time.
It's possible that you got a bad update from Mcafee, you might want to call there support and see if it is indeed a problem.
Here is there tech support forum, you may want to post in there and ask.
http://forums.mcafeehelp.com/
It would help if next time you shut down if you would write down the entire name of the program that won't shutdown.
We can try cleaning you up a bit and see if it helps.
Download and Install
CCleaner
If you don't want the Yahoo Toolbar, be sure to uncheck it during installation
* Click on
Run Cleaner
Tutorial for CCleaner
If you have not done this at all or not recently it may help.
Go to
Start> All Programs> Assessories > System Tools> Disk Defragmenter.
This is the Windows Disk Defragger, run this maybe once or twice a month to help speed up your system. The first time you run it, it may take awhile.
Your HJT log is a little old, post a new log and lets see if anything has changed since your original post.
I will run a disk de-frag tonight. Thanks for the reminder.
I will also d/l and run the program you suggested.
The name of the program that won't shutdown is "sw". Just that, "sw", nothing more.
waterdog1111
That SW Shutdown error could possible related to Adobe Reader.
Open HJT Then open the Misc Tools section click on Generate a Startup List Log, Don't check the 2 boxes just yet. Post the log into this thread
Let me see a new HJT log also
Done and done. Start-Up Log is first, followed by new HJT log.
waterdog1111,
Still nothing earth shattering in each of those logs.
We need to disable the
Tea Timer in
Spybot Search and Destroy as to not interfere with the fix.
Open Spybot and go to Mode> Advanced Mode> Tools> Resident and take the checkmark out of Tea Timer
Open
HijackThis > Do a System Scan Only, close your browser and all open windows, the only program or window you should have open is
HijackThis , check the following entries and click on
Fix Checked.
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
Your Java is out of date and leaving your system vulnerable. Go to your Add-Remove Programs in the Control Panel and uninstall any previous versions of Java (J2SE Runtime Environment) It should have an icon next to it: [external image: Posted Image] Remove. Reboot your system. Then go to the Sun Microsystems Java Runtime Environment (JRE) 5.0 Update 11 <–This is what you need to download and install.If you chose the online installation, it will prompt you to run the program. If you chose the offline installation, you will be prompted to save the file and you can run it from wherever you saved it. Then after install you can verify your installation here Sun Java Verify I like to to do the offline installation and save the setup file in case I may need it in the future
Run this free online virus scanner from
TrendMicro
Please run
Trend Micro House Call Click Scan now. It's free! Read and put a Check next to Yes I accept the terms of use. Click the Launching HouseCall>> button. Under "Browser plug-in" Installing and using Housecall kernel, click the Starting HouseCall>> button. You may receive a prompt to install the ActiveX, click install. If you are taken back to the main page, click Launching HouseCall>> button again. Under Scan complete computer for malware, grayware, and vulnerabilities click the Next>> button. Please be patient while it installs, updates, and scans your system. Once the scan is complete, it will take you to the summary page. Under Cleanup options, choose clean all detected infections automatically. Click the Clean now>> button. If anything was found you may be prompted to run the scan again, you can just close the browser window. When the scan is finished, please restart your computer.
You have windows configured to use
Selective Startup , this may hide entries from showing up on your HJT log.
Go to Start> Run and type in
msconfig , check
Normal Startup Apply>> OK
Reboot and post a new HJT log along with the log from Housecall.
Hi again…
waterdog1111
Your log looks fine
Outside of the shutdown program ( which may be windows related ) do you have any other issues that you think may be virus related.
Ken…
No. No other problems. I sincerely appreciate your time and great advice.
Thanks!!!
Malware Complaints
Are you mad ? I mean really mad, seething mad, so mad your ready to spit, mad that you have taken your hard earned dollars to buy a computer only to have some Miscredents, Dirt Bags and Cyber Criminals install a malicious program on your computer without your knowledge or consent. You can post your complaint at the above site. If you live in the U.S.A. you can also report your grievance to your State Attorney Generals Office and the Federal Trade Commission's Bureau of Consumer Protection.
How did I get infected in the first place ? Read these links and find out how to prevent getting infected again.
Tutorial for System Restore Tom Coyote TonyKlein CastleCops Grinler BleepingComputer Geeks To Go Dslreports Here are some free programs to install, don't leave home without them Spybot Search and Destroy 1.4 Check for Updates/ Immunize and run a Full System Scan on a regular basis. Ad-Aware SE Personal 1.06 Check for Updates and run a Full System Scan on a regular basis. Spyware Blaster Spyware Guard Win Patrol IE-Spyad Firefox 2.0 Zone Alarm Zone Labs , I wouldn't access the internet without it.
Thanks for stopping by
Tom Coyote , I'm glad I was able to help you.
Glad we could be of assistance.
This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.
Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.
Coyote's Installed programs for prevention:
http://forums.tomcoyote.org/index.php?showtopic=31418
The help you receive here is free. If you wish to show your appreciation, then you may donate
Visit the CoyoteStore
http://TomCoyote.org/coyotestore.php
Outside of the shutdown program ( which may be windows related ) do you have any other issues that you think may be virus related.