Hello everyone at Computer Hope Forum,
Mad-Friend here. I hope you can help me please. I have read through and followed all the advice on the Read This Before Asking For Help. I have spent several days since my last post trying to sort out my PC: which is a 6 year old Medion Windows XP Intel.
The problem seemed to begin after I installed Avast. It didn't properly download and let in a virus.
I tried re-installing it. The same problem occured. I then tried Kaspersky. It installed with same fault: Neither anti-virus scanned the web and emails for viruses and a 2nd virus got in.
I now have AVG back and it works.
Several programmes seem to be corrupted, not working. They appear empty.
Photos has several cog-like icons instead of photos.
Incredimail keeps opening new mail when I click on view email.
Mouse has to be clicked several times before it works. It is fairly new and worked fine before.
PC is incredibly slow when browsing.
Problems accessing online Tesco mail service.
I accidentally uninstalled Media Flash when deleting old programmes and don't know how to get it back. Your help would be greatly valued.
I ran Disk Cleanup.
Disk Defragment.
CClean.
Malwarebytes.
Kaspersky.
Then later AVG, but only after I had uninstalled Kaspersky.
I didn't run them in safe mode, as I don't know what that is, or how to use it.
These are the logs from them.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:02:54, on 09/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Tesconet\Tesconet.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?linkid=677R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.tesco.netR1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant =
http://www.crawler.com/search/ie.aspx?tb_id=60327R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch =
http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by WHSmithnet
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_1.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [EPSON Stylus C84 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C84 Series" /O6 "USB001" /M "Stylus C84"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: Money Viewer - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.tesco.net
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?linkid=39204O16 - DPF: {4E544C53-6967-6E02-BBAD-233AD71832A8} (NTLSignup1 Class) -
https://tesco.autoregister.net/tesco/NTLSignup.cabO16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://groups.msn.com/controls/PhotoUC/MsnPUpld.cabO16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1151075279500O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://acs.pandasoftware.com/activescan/as5free/asinst.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) -
http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cabO16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) -
http://chat.msn.com/bin/msnchat45.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{130E35C2-9F50-49DC-9AC2-B670A46D45A8}: NameServer = 194.168.4.100 194.168.8.100
O17 - HKLM\System\CS1\Services\Tcpip\..\{130E35C2-9F50-49DC-9AC2-B670A46D45A8}: NameServer = 194.168.4.100 194.168.8.100
O20 - AppInit_DLLs:
??P,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
--
End of file - 7387 bytes
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
12/07/2008 15:15:34 Task completed
12/07/2008 15:14:08 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
11/07/2008 17:15:28 Task completed
11/07/2008 17:15:27 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
11/07/2008 17:14:01 Task completed
11/07/2008 17:13:59 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 19:29:34 Task completed
09/07/2008 19:29:34 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 14:41:35 Task completed
09/07/2008 13:40:38 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:37:46 Task completed
09/07/2008 10:35:59 Detected:
http://www.viruslist.com/en/advisories/23138 c:\program files\adobe\acrobat 5.0\reader\acrord32.exe
09/07/2008 10:35:24 Detected:
http://www.viruslist.com/en/advisories/28083 c:\Documents and Settings\trish\Local Settings\Temp\MFPL7014.DLL
09/07/2008 10:33:35 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:10:13 Task completed
09/07/2008 10:10:13 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:10:05 Task completed
09/07/2008 10:10:05 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:09:21 Task completed
09/07/2008 10:09:21 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:09:09 Task completed
09/07/2008 10:09:08 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:08:05 Task completed
09/07/2008 10:08:05 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:07:46 Task completed
09/07/2008 10:07:45 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:07:41 Task completed
09/07/2008 10:07:40 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:07:19 Task completed
09/07/2008 10:07:18 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:07:04 Task completed
09/07/2008 10:07:04 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:06:59 Task completed
09/07/2008 10:06:59 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:06:49 Task completed
09/07/2008 10:06:49 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:06:42 Task completed
09/07/2008 10:06:42 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:06:35 Task completed
09/07/2008 10:06:35 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:06:27 Task completed
09/07/2008 10:06:27 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:06:20 Task completed
09/07/2008 10:06:20 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:06:16 Task completed
09/07/2008 10:06:16 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:06:07 Task completed
09/07/2008 10:06:07 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:05:56 Task completed
09/07/2008 10:05:56 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:05:37 Task completed
09/07/2008 10:05:36 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:05:24 Task completed
09/07/2008 10:05:24 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:05:14 Task completed
09/07/2008 10:05:14 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:05:05 Task completed
09/07/2008 10:05:05 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:04:58 Task completed
09/07/2008 10:04:58 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:04:16 Task completed
09/07/2008 10:04:16 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:04:00 Task completed
09/07/2008 10:04:00 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 10:03:43 Task completed
09/07/2008 10:03:43 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 09:55:58 Task completed
09/07/2008 09:23:07 Detected:
http://www.viruslist.com/en/advisories/23138 c:\program files\adobe\acrobat 5.0\reader\acrord32.exe
09/07/2008 09:21:05 Detected:
http://www.viruslist.com/en/advisories/28083 c:\Documents and Settings\trish\Local Settings\Temp\MFPL7014.DLL
09/07/2008 09:05:02 Detected:
http://www.viruslist.com/en/advisories/23138 c:\program files\adobe\acrobat 5.0\reader\acrord32.exe
09/07/2008 09:02:28 Task started
Quick Scan: completed 12/07/2008 15:15:34 (events: 73, objects: , time: 00:00:00)
09/07/2008 08:24:31 Task completed
09/07/2008 08:19:32 Task started
Malwarebytes' Anti-Malware 1.20
Database version: 944
Windows 5.1.2600 Service Pack 2
13:17:51 13/07/2008
mbam-log-7-13-2008 (13-17-50).txt
Scan type: Full Scan (A:\|C:\|D:\|E:\|F:\|G:\|)
Objects scanned: 90740
Time elapsed: 28 minute(s), 33 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
If you need additional information please ask me.
I hope you can help me sort this mess out.
Thankyou. Yours sincerely, Trish. Mad-Friend.