Jump to content


Photo

Slow PC, please review my hijackthis log


  • This topic is locked This topic is locked
10 replies to this topic

#1 chuckycheese

chuckycheese

    Member

  • Full Member
  • Pip
  • 5 posts

Posted 05 September 2005 - 05:29 PM

I was recently given a new pc by a friend. The pc is a Pentium II 333 MHZ, with a 128 RAM. It runs WinXP. I realize that my computer is probably too slow to run WinXP, but short of uninstalling XP and installing an older version of WIN, are there any programs that I can delete to speed up the PC? Is Norton Internet Security Professional the main culprit for slowing down the PC?

Thanks very much.

My log:

Logfile of HijackThis v1.99.1
Scan saved at 4:02:32 PM, on 9/5/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\windows\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\windows\system32\WFXSNT40.EXE
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr_.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFREE.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\Blah\Desktop\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = ,
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS10
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapp...//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapp...rch/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapp...://my.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapp...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Verizon Online
N3 - Netscape 7: user_pref("browser.startup.homepage", ""); (C:\Documents and Settings\Blah\Application Data\Mozilla\Profiles\default\yb2bh0rr.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Blah\Application Data\Mozilla\Profiles\default\yb2bh0rr.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WinFaxAppPortStarter] WFXSNT40.EXE
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr_.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security Professional\UrlLstCk.exe
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [NeroCheck] C:\windows\system32\NeroCheck.exe
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFREE.EXE"
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: &iSearch The Web - res://C:\WINDOWS\System32\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O16 - DPF: Yahoo! Dominoes - http://download.game...ts/y/dot2_x.cab
O16 - DPF: Yahoo! Poker - http://download.game...nts/y/pt3_x.cab
O16 - DPF: {1C78AB3F-A857-482E-80C0-3A1E5238A565} - file://C:\install.cab
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1124905691880
O17 - HKLM\System\CCS\Services\Tcpip\..\{AB53D263-D6A3-402A-B261-746E9999FFD3}: NameServer = 4.2.2.2,207.217.120.84
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - Unknown owner - C:\Program Files\F-Secure Internet Security\fswsclds.exe (file missing)
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: WinFax PRO (wfxsvc) - Unknown owner - C:\WINDOWS\System32\WFXSVC.EXE (file missing)

#2 aczechgurl

aczechgurl

    Forum Deity

  • Retired Staff
  • PipPipPipPipPip
  • 5,577 posts

Posted 09 September 2005 - 10:18 PM

Hi chuckycheese,

Welcome to the forum :wave:

I apologize for the delay getting to your log, the helpers here are all volunteers and we have been very busy here lately.

There are a few pieces of malware on your computer that should be removed. I will also list some optional removals for you.

[*]Run HijackThis, Choose "Do a system scan only" and checkmark the box next to the following entries:R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = ,
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapp...//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapp...rch/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapp...://my.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapp...//www.yahoo.com
O8 - Extra context menu item: &iSearch The Web - res://C:\WINDOWS\System32\toolbar.dll/SEARCH.HTML
O16 - DPF: {1C78AB3F-A857-482E-80C0-3A1E5238A565} - file://C:\install.cab
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -

[*]Optionals:O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
The the two items are related to a program called DAP or Download Accelerator Plus which is a download mananger for resuming downloads, amongst other features. It is believed by many to allow other malware in you may want to consider other safer alteratives mentioned in this article.
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)The above item is related to a program called Weatherbug which provides current outdoor temperature in the System Tray, and weather alerts. While this item is not spyware it is ad-sponsored and delivers pop-ups and ads to your computer. You may want to consider uninstalling it via Start->Control Panel->Add/Remove Programs and try a ad- free alternative like WeatherPulse.
O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - Unknown owner - C:\Program Files\F-Secure Internet Security\fswsclds.exe (file missing)This item is related to F-Secure Antivirus it does not look like you are using this anymore. If not, you might want to check this item.
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEApplication which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog, and some users claim there's no difference with or without it but it usually isn't required - Note: if you make use of the Microsoft Office Shortcut Bar outside an office program this application will need to be enabled for it to show.
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr_.exeViewpoint_Manager - automatic updates for ViewPoint products such as ViewPoint Media Player (as bundled with AOL, AOL Instant Messenger, Compuserve, etc). Can be run manually via Start -> Settings -> Control Panel by enabling auto-updates temporarily, re-booting and then disabling again
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quietYahoo! Messenger allows you to send instant messages. Not necessary to run at startup Available via Start -> Programs
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeSystem Tray access to Apple's "Quick Time" viewer from version 5 onwards
[/list][*]Close all other windows and browsers, including this one, then click "Fix Checked".

If you decided to check DAP(Download Accelerator Plus) or Weatherbug they should be uninstalled via Start->Control Panel->Add\Remove Programs.

[*]Please reboot and post a fresh HijackThis log.

The pc is a Pentium II 333 MHZ, with a 128 RAMů..Is Norton Internet Security Professional the main culprit for slowing down the PC?


If fixing the above malware and some of the optionals does not help you might want to consider additional ram. 128mb is a little light for XP(especially with Norton), 256mb would be much better. Norton is definitely a resource hog. If you decide to uninstall it I can recommend some free alternatives that should be lighter on resources.

Aczechgurl




Please consider Supporting SWI's fight against Malware.

Member of ASAP (Alliance of Security Analysis Professionals)

Fight back Malware Complaints

#3 chuckycheese

chuckycheese

    Member

  • Full Member
  • Pip
  • 5 posts

Posted 11 September 2005 - 04:50 PM

Thanks very much aczechgurl! I fully appreciate the work of all the kind volunteers who help out computer novices like myself. :)

Could you please suggest alternatives to Norton?

I would like to be able to run Cooledit and RealPlayer smoothly on my computer simultaneously, which currently is not possible.

Thanks again!

#4 aczechgurl

aczechgurl

    Forum Deity

  • Retired Staff
  • PipPipPipPipPip
  • 5,577 posts

Posted 11 September 2005 - 06:38 PM

AVG makes an excellent free antivirus client, as do AntiVir or avast!.

Aczechgurl




Please consider Supporting SWI's fight against Malware.

Member of ASAP (Alliance of Security Analysis Professionals)

Fight back Malware Complaints

#5 chuckycheese

chuckycheese

    Member

  • Full Member
  • Pip
  • 5 posts

Posted 13 September 2005 - 03:00 PM

Sorry to bother you again.

The Weatherbug program isn't allowing me to uninstall it. WeatherBug was not listed in the "Add/Remove Program" list in the Control Panel. I searched the computer and located where the WeatherBug folder was. There was an uninstallation file in the folder so I clicked it, but it gives me an error message to the effect that "Unwise.exe was not found." The Unwise.exe file in fact is in the same folder that the uninstallation file (called "Remove.exe") is in.

What can I do to remove the program?

Thank you.

#6 aczechgurl

aczechgurl

    Forum Deity

  • Retired Staff
  • PipPipPipPipPip
  • 5,577 posts

Posted 14 September 2005 - 07:33 PM

No problem chuckycheese.

I was wanting to see a fresh HijackThis log anyway to make sure you are clean now.

Since weatherbug is gone from add/remove control panel and you have checked the last remaining item in HijackThis. I would say it is pretty well uninstalled, the only other thing I would do is delete the following folder:C:\Program Files\AWS
Please post a fresh HijackThis log.

Aczechgurl




Please consider Supporting SWI's fight against Malware.

Member of ASAP (Alliance of Security Analysis Professionals)

Fight back Malware Complaints

#7 chuckycheese

chuckycheese

    Member

  • Full Member
  • Pip
  • 5 posts

Posted 15 September 2005 - 08:24 PM

Latest hijackthis log:

Thank you!

---------

Logfile of HijackThis v1.99.1
Scan saved at 10:22:55 PM, on 9/15/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\windows\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\SAVScan.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\windows\system32\WFXSNT40.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFREE.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Blah\Desktop\Hijackthis\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS10
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Verizon Online
N3 - Netscape 7: user_pref("browser.startup.homepage", ""); (C:\Documents and Settings\Blah\Application Data\Mozilla\Profiles\default\yb2bh0rr.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Blah\Application Data\Mozilla\Profiles\default\yb2bh0rr.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [WinFaxAppPortStarter] WFXSNT40.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security Professional\UrlLstCk.exe
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [NeroCheck] C:\windows\system32\NeroCheck.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFREE.EXE"
O16 - DPF: Yahoo! Dominoes - http://download.game...ts/y/dot2_x.cab
O16 - DPF: Yahoo! Poker - http://download.game...nts/y/pt3_x.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1124905691880
O17 - HKLM\System\CCS\Services\Tcpip\..\{5A33D5DB-CF1B-4A9E-BC49-E88D375645F7}: NameServer = 216.194.28.33 216.194.28.69
O17 - HKLM\System\CCS\Services\Tcpip\..\{AB53D263-D6A3-402A-B261-746E9999FFD3}: NameServer = 4.2.2.2,207.217.120.84
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - Unknown owner - C:\Program Files\F-Secure Internet Security\fswsclds.exe (file missing)
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security Professional\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: WinFax PRO (wfxsvc) - Unknown owner - C:\WINDOWS\System32\WFXSVC.EXE (file missing)

#8 aczechgurl

aczechgurl

    Forum Deity

  • Retired Staff
  • PipPipPipPipPip
  • 5,577 posts

Posted 16 September 2005 - 05:06 PM

Your log looks clean now :D

How is it running?

Aczechgurl




Please consider Supporting SWI's fight against Malware.

Member of ASAP (Alliance of Security Analysis Professionals)

Fight back Malware Complaints

#9 chuckycheese

chuckycheese

    Member

  • Full Member
  • Pip
  • 5 posts

Posted 20 September 2005 - 06:53 PM

Adequately fast now.

Turns out the computer misrouted the power source for the soundcard which affected the performance as well.

The PC change turned out to be causing me so many headaches.

Thank you so much!

#10 aczechgurl

aczechgurl

    Forum Deity

  • Retired Staff
  • PipPipPipPipPip
  • 5,577 posts

Posted 20 September 2005 - 07:53 PM

Your welcome Chucky Cheese.

Glad your computer is running better.

[*]I have included a number of recommendations for how to protect your computer in order to prevent future malware infections:
  • Please download all "critical updates" for Windows and Explorer.
    • These updates patch many of the security holes through which attackers can gain access to your computer. I can not stress enough how important it is.
  • I know you have a Anti-virus program make sure it stays updated and run it regularly.
  • If you end up uninstalling norton and need a free firewall I suggest kerio or zonealarm.
  • In order to protect yourself against spyware, you should consider installing and running the following free programs:
    • Ad-Aware SE
      A tutorial on using Ad-Aware to remove spyware from your computer may be found here.
    • Spybot-Search & Destroy
      A tutorial on using Spybot to remove spyware from your computer may be found here.
    • SpywareBlaster
      A tutorial on using SpywareBlaster to prevent spyware from ever installing on your computer may be found here.
  • Please also read Tony Klein's excellent article: How I got Infected in the First Place
Hopefully this should take care of your problems! Good luck. :D

Aczechgurl




Please consider Supporting SWI's fight against Malware.

Member of ASAP (Alliance of Security Analysis Professionals)

Fight back Malware Complaints

#11 aczechgurl

aczechgurl

    Forum Deity

  • Retired Staff
  • PipPipPipPipPip
  • 5,577 posts

Posted 12 October 2005 - 05:42 PM

Since this issue appears resolved ... this Topic is closed.

If you need this topic reopened, please request this by sending the moderating team
an email with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.

Aczechgurl




Please consider Supporting SWI's fight against Malware.

Member of ASAP (Alliance of Security Analysis Professionals)

Fight back Malware Complaints




Member of UNITE
Support SpywareInfo Forum - click the button