Home / Software / Computer viruses and spyware / HELP my computer running windows is running really slow...
0 Members and 3 Guests are viewing this topic. « previous next »
Pages: 1 2 3 [4]  All - (Bottom) Print
Author Topic: HELP my computer running windows is running really slow...  (Read 13545 times)
Sean0514
Topic Starter
Beginner



Posts: 52


« Reply #45 on: July 09, 2008, 11:52:58 AM »

i dont know which programs i can delete i dont want to mess up my computer....so is a pic of my add/remove programs...

[recovering disk space -- attachment deleted by admin]
IP logged
evilfantasy
Malware Removal Specialist
Moderator
Genius



Thanked: 462
Posts: 11,769

Experience: Beginner
OS: Windows 7


Calm like a bomb

evilfantasy's blog
« Reply #46 on: July 09, 2008, 02:48:51 PM »

Open Hijackthis and select Do a system scan only.

Place a check mark next to the following entries: (if there)

O2 - BHO: (no name) - {A8FB8EB3-183B-4598-924D-86F0E5E37085} - (no file)
O9 - Extra button: Mojicon Dispenser - {3B3628FF-E084-47ef-8797-FA36FC2571EA} - C:\Program Files\Mojicon\Mojicon\mojiwin.exe (file missing)
O20 - Winlogon Notify: RelevantKnowledge - C:\Program Files\RelevantKnowledge\rlls.dll (file missing)


Important: Close all windows except for Hijackthis and then click Fix checked.

Exit Hijackthis and run CCleaner.

----------

Download Dr.Web CureIt! & save it to your desktop.
  • Double-click on cureit.exe to start the program. An "Express Scan of your PC" notice will appear.
  • Under "Start the Express Scan Now", Click "OK" to start. This is a short scan that will scan the files currently running in memory and when something is found, click the Yes button when it asks you if you want to cure it.
  • Once the short scan has finished, Click Options > Change settings
  • Choose the "Scan tab" and UNcheck "Heuristic analysis"
  • Back at the main window, click "Custom Scan", then "Select drives" (a red dot will show which drives have been chosen).
  • Then click the "Start/Stop Scanning" button (green arrow on the right) and the scan will start.
  • When done, a message will be displayed at the bottom advising if any viruses were found.
  • Click "Yes to all" if it asks if you want to cure/move the file.
  • When the scan has finished, look if you can see the icon next to the files found. If so, click it, then click the next icon right below and select "Move incurable".
    (This will move it to the C:\Documents and Settings\userprofile\DoctorWeb\Quarantine folder if it can't be cured)
  • Next, in the Dr.Web CureIt menu on top, click file and choose save report list.
  • Save the DrWeb.csv report to your desktop.
  • Exit Dr.Web Cureit when done.
  • Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.
You can use Notepad to open the DrWeb.cvs report by right clicking it and selecting Open with > Notepad

----------

Create An Uninstall List
  • Start HijackThis
  • Click on the Open the Misc Tools section
  • Click on the Open Uninstall Manager button.
  • Click on the Save list button and specify where you would like to save this file and click Save.
    • When you press Save button a notepad will open with the contents of that file.
  • Copy and paste that list in your reply.
.
----------

Now run a new Hijackthis scan and post the log.

----------

Next post add
Dr. Web log
Uninstall List
New Hijackthis log
IP logged

Sean0514
Topic Starter
Beginner



Posts: 52


« Reply #47 on: July 10, 2008, 04:44:38 PM »

here r those tests

[recovering disk space -- attachment deleted by admin]
IP logged
evilfantasy
Malware Removal Specialist
Moderator
Genius



Thanked: 462
Posts: 11,769

Experience: Beginner
OS: Windows 7


Calm like a bomb

evilfantasy's blog
« Reply #48 on: July 10, 2008, 05:01:27 PM »

Go to add/remove programs and uninstall:

Java(TM) 6 Update 5
Java(TM) 6 Update 6
Viewpoint Media Player

Do you know what these relate to in add/remove programs?

146180
181949

----------

Download Combofix by sUBs from one of the below links.

Important! Combofix.exe MUST be saved to and ran from the Desktop.
  • Close any open Web browsers. (Firefox, Internet Explorer, etc) before starting Combofix.
  • Important! Temporarily disable your antivirus, script blocking and any antispyware real time protection before performing a scan.
    • Click this link to see a list of security programs that should be disabled and how to disable them.
    • If yours is not listed and you don't know how to disable it, please ask.
  • Warning: Combofix disconnects your computer from the internet. The connection is automatically restored before Combofix completes its run.
  • Double click combofix.exe & follow the prompts.
    • Choose Yes to accept the Disclaimers.
  • When finished, it will produce a log for you.
  • Post that log in your next reply.
Warning: Do not mouseclick Combofix's window while it is running. That may cause it to stall
  • If Combofix runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your computer.
  • Important: Remember to re-enable your antivirus and antispyware before reconnecting to the Internet.
If needed, see this Combofix tutorial with screenshots that will detail more thoroughly the downloading and running of Combofix.

----------

Next post add
Combofix log
IP logged

Sean0514
Topic Starter
Beginner



Posts: 52


« Reply #49 on: July 10, 2008, 07:25:25 PM »

146180
181949
i dont know what these are

Java(TM) 6 Update 5
and it wont let me delete this. an error message says: error applying transforms. verify that the specified transform paths are valid.


[recovering disk space -- attachment deleted by admin]
IP logged
evilfantasy
Malware Removal Specialist
Moderator
Genius



Thanked: 462
Posts: 11,769

Experience: Beginner
OS: Windows 7


Calm like a bomb

evilfantasy's blog
« Reply #50 on: July 10, 2008, 07:35:00 PM »

Download JavaRa

  • Unzip the file and open the JavaRa.exe
  • Click Remove Older Versions
  • JavaRa will search for and remove any outdated version of Java and remove any that are found.
  • Exit JavaRa.
  • Delete the JavaRa .zip .exe and .html files from the Desktop.
.
----------

Thats only a partial CF log.

Go to Start > Run then type c:\combofix.txt and click OK.

Copy and paste the entire log back here.
IP logged

Sean0514
Topic Starter
Beginner



Posts: 52


« Reply #51 on: July 10, 2008, 08:10:45 PM »

it said it could not find that file.......combofix messes with my computer... it froze at the log writing stage...i let it sit for 20 min...so i closed it it....should i run it again..it says dont run any programs during log stage but i have AIM start when i turn my compurter on.....didi that make it freeze...or was i just impatient...and should i run it again?

here is the javara log...

[recovering disk space -- attachment deleted by admin]
IP logged
evilfantasy
Malware Removal Specialist
Moderator
Genius



Thanked: 462
Posts: 11,769

Experience: Beginner
OS: Windows 7


Calm like a bomb

evilfantasy's blog
« Reply #52 on: July 10, 2008, 08:18:39 PM »

Lets do this instead.

Uninstall Combofix.

Go to Start > Run and type combofix /u then click OK.
Note the space between combofix and /u

----------

Download ATF Cleaner by Atribune and save it to your Desktop.
Alternate Download link

Windows Vista users: ATF-Cleaner must be Run as an Administrator

Double click ATF-Cleaner.exe to run the program.
Check the boxes to the left of:

  • Windows Temp
  • Current User Temp
  • All Users Temp
  • Temporary Internet Files
  • Prefetch
  • Java Cache
  • Recycle bin
The rest are optional - if you want it to remove everything check Select All
Now click Empty Selected
When you get the Done Cleaning message, click OK

Firefox
users click Firefox on the menu bar

Click on Select All, then click Empty
        Note: If you want to keep your saved Passwords click No on the prompt.

Opera users click Opera on the menu bar

Click on Select All, then click Empty
        Note: If you want to keep your saved Passwords click No on the prompt

Important: Restart the computer before continuing.

----------

Use the Kaspersky Online Scanner

You must use Internet Explorer.

This scan can take some time to complete so please be patient.

  • Click Accept.
  • Answer Yes, when prompted to install an ActiveX component.
  • The program will then begin downloading the latest definition files.
  • Once the files have been downloaded click on NEXT
  • Locate the Scan Settings button & configure to:
    • Scan using the following Anti-Virus database:
      • Extended
    • Scan Options:
      • Scan Archives[
      • Scan Mail Bases
      • Click OK & have it scan My Computer
      When the scan is done, in the Scan is complete window (below), any infection is displayed.
      There is no option to clean/disinfect, however, we need to analyze the information on the report.

      To obtain the report:
      Click on: Save Report As...



      • Next, in the Save as prompt, Save in area, select: Desktop.
      • In the File name area, use KScan, or something similar.
      • In Save as type: click the drop arrow and select: Text file [*.txt]
      • Then, click: Save


      Copy and paste the Kaspersky Online Scanner Report in your next reply.

      After Kaspersky is done run a new Hijackthis scan and post that log also.[/list]
      IP logged

      Sean0514
      Topic Starter
      Beginner



      Posts: 52


      « Reply #53 on: July 10, 2008, 08:54:17 PM »

      i will do this test tonite and post the log tomorrow... but my clock is stuck in 24-hour mode and my date is in the year/month/day mode how do i fix them
      IP logged
      evilfantasy
      Malware Removal Specialist
      Moderator
      Genius



      Thanked: 462
      Posts: 11,769

      Experience: Beginner
      OS: Windows 7


      Calm like a bomb

      evilfantasy's blog
      « Reply #54 on: July 10, 2008, 09:28:37 PM »

      Thats an indication that Combofix didn't complete it's procedure. I don't know why it wouldn't complete unless the messenger did somehow interfere with it. Be sure to uninstall combofix.

      To change military time to standard time

      Go to Start > Control Panel > Regional and Language Options
      Click the Customize button
      Select the Time tab
      In the Time Format area use the down arrow to select: h:mm:ss tt
      Click Apply
      Click OK
      Click Apply
      Click OK

      Restart the computer.

      IP logged

      jenevie duro
      Starter



      Posts: 3


      « Reply #55 on: August 25, 2008, 08:40:23 PM »

      would you please help me to learn more about computer,,,,,,, :P :P
      IP logged
      jenevie duro
      Starter



      Posts: 3


      « Reply #56 on: August 25, 2008, 08:43:01 PM »

      I want to study more about computer,, i think you may help me..........
      IP logged
      evilfantasy
      Malware Removal Specialist
      Moderator
      Genius



      Thanked: 462
      Posts: 11,769

      Experience: Beginner
      OS: Windows 7


      Calm like a bomb

      evilfantasy's blog
      « Reply #57 on: August 25, 2008, 08:48:53 PM »

      Hello jenevie duro. Welcome to CH.

      What exactly are you trying to learn, and if I may ask what is your native language?
      IP logged

      evilfantasy
      Malware Removal Specialist
      Moderator
      Genius



      Thanked: 462
      Posts: 11,769

      Experience: Beginner
      OS: Windows 7


      Calm like a bomb

      evilfantasy's blog
      « Reply #58 on: August 25, 2008, 08:50:40 PM »

      Continued here. http://www.computerhope.com/forum/index.php/topic,64604.new.html#new

      Closed.

      Sean0514 if you need this topic reopened then please send me a PM.
      IP logged

      Pages: 1 2 3 [4]  All - (Top) Print 
      Home / Software / Computer viruses and spyware / HELP my computer running windows is running really slow... « previous next »
       


      Login with username, password and session length

      Old Forum Search | Forum Rules
      Copyright © 2010 Computer Hope ® All rights reserved.
      Powered by SMF 2.0 RC3 | SMF © 2006–2010, Simple Machines LLC
      Page created in 5.123 seconds with 20 queries.