Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: HELP my computer running windows is running really slow...  (Read 29883 times)

0 Members and 1 Guest are viewing this topic.

evilfantasy

  • Malware Removal Specialist
  • Moderator


  • Genius
  • Calm like a bomb
  • Thanked: 489
  • Experience: Familiar
  • OS: Windows 10
Re: HELP my computer running windows is running really slow...
« Reply #15 on: July 06, 2008, 06:58:46 PM »

Is CA a trial or is it paid for?

What did you do to get rid of the virus you spoke of?




Sean0514

    Topic Starter


    Beginner

    Re: HELP my computer running windows is running really slow...
    « Reply #16 on: July 06, 2008, 07:03:53 PM »
    it is paid for it came with time warner my isp. i got rid of WinSpywareProtect. i accedently downloaded it back when i did not have CA but i got CA and got rid of WinSpywareProtect.now my cpu is slow as balls.  >:(

    evilfantasy

    • Malware Removal Specialist
    • Moderator


    • Genius
    • Calm like a bomb
    • Thanked: 489
    • Experience: Familiar
    • OS: Windows 10
    Re: HELP my computer running windows is running really slow...
    « Reply #17 on: July 06, 2008, 07:06:01 PM »
    Post a log from MBAM please.

    Download Malwarebytes' Anti-Malware from here or here

    Double Click mbam-setup.exe to install the application.
    • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    • If an update is found, it will download and install the latest version.
    • Once the program has loaded, select "Perform Quick Scan", then click Scan.
    • The scan may take some time to finish,so please be patient.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Make sure that everything is checked, and click Remove Selected.
    • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
    • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
    • Copy&Paste the entire report in your next reply.
    Extra Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.

    Sean0514

      Topic Starter


      Beginner

      Re: HELP my computer running windows is running really slow...
      « Reply #18 on: July 06, 2008, 07:49:56 PM »
      Malwarebytes' Anti-Malware 1.19
      Database version: 899
      Windows 5.1.2600 Service Pack 3

      9:47:28 PM 7/6/2008
      mbam-log-7-6-2008 (21-46-23).txt

      Scan type: Quick Scan
      Objects scanned: 42628
      Time elapsed: 27 minute(s), 29 second(s)

      Memory Processes Infected: 0
      Memory Modules Infected: 0
      Registry Keys Infected: 2
      Registry Values Infected: 0
      Registry Data Items Infected: 0
      Folders Infected: 6
      Files Infected: 4

      Memory Processes Infected:
      (No malicious items detected)

      Memory Modules Infected:
      (No malicious items detected)

      Registry Keys Infected:
      HKEY_CLASSES_ROOT\labelcommand.labelcommand (Trojan.BHO) -> No action taken.
      HKEY_CLASSES_ROOT\labelcommand.labelcommand.1 (Trojan.BHO) -> No action taken.

      Registry Values Infected:
      (No malicious items detected)

      Registry Data Items Infected:
      (No malicious items detected)

      Folders Infected:
      C:\Documents and Settings\All Users\Application Data\ADSL Software Ltd (Rogue.Multiple) -> No action taken.
      C:\Documents and Settings\All Users\Application Data\ADSL Software Ltd\WinSpywareProtect (Rogue.Multiple) -> No action taken.
      C:\Documents and Settings\All Users\Application Data\ADSL Software Ltd\WinSpywareProtect\BASE (Rogue.Multiple) -> No action taken.
      C:\Documents and Settings\All Users\Application Data\ADSL Software Ltd\WinSpywareProtect\DELETED (Rogue.Multiple) -> No action taken.
      C:\Documents and Settings\All Users\Application Data\ADSL Software Ltd\WinSpywareProtect\LOG (Rogue.Multiple) -> No action taken.
      C:\Documents and Settings\All Users\Application Data\ADSL Software Ltd\WinSpywareProtect\SAVED (Rogue.Multiple) -> No action taken.

      Files Infected:
      C:\Documents and Settings\All Users\Application Data\ADSL Software Ltd\WinSpywareProtect\Winspywareprotect.exe (Rogue.Multiple) -> No action taken.
      C:\Documents and Settings\All Users\Application Data\ADSL Software Ltd\WinSpywareProtect\LOG\20080702150346251.log (Rogue.Multiple) -> No action taken.
      C:\Documents and Settings\All Users\Application Data\ADSL Software Ltd\WinSpywareProtect\LOG\20080702154424812.log (Rogue.Multiple) -> No action taken.
      C:\Documents and Settings\All Users\Application Data\ADSL Software Ltd\WinSpywareProtect\LOG\20080702163754703.log (Rogue.Multiple) -> No action taken.

      evilfantasy

      • Malware Removal Specialist
      • Moderator


      • Genius
      • Calm like a bomb
      • Thanked: 489
      • Experience: Familiar
      • OS: Windows 10
      Re: HELP my computer running windows is running really slow...
      « Reply #19 on: July 06, 2008, 08:01:27 PM »
      Everything says No action taken. Did you remove them after you copied the log?

      Download Deckard's System Scanner (DSS) to your Desktop.
      Note: You must be logged onto an account with administrator privileges.
      Vista users Right click DSS and Run as Administrator.


      • Close all applications and windows.
      • Double-click on dss.exe to run it, and follow the prompts.
      • When the scan is complete, two text files will open.
        • main.txt <- this one will be maximized
        • extra.txt <- this one will be minimized
      • Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt and extra.txt in your reply.

      Sean0514

        Topic Starter


        Beginner

        Re: HELP my computer running windows is running really slow...
        « Reply #20 on: July 06, 2008, 08:29:46 PM »
        main
        Deckard's System Scanner v20071014.68
        Run by Owner on 2008-07-06 22:04:10
        Computer is in Normal Mode.
        --------------------------------------------------------------------------------

        -- System Restore --------------------------------------------------------------

        Successfully created a Deckard's System Scanner Restore Point.


        -- Last 5 Restore Point(s) --
        23: 2008-07-07 02:04:40 UTC - RP389 - Deckard's System Scanner Restore Point
        22: 2008-07-06 23:14:24 UTC - RP388 - Removed Windows Defender
        21: 2008-07-05 18:34:54 UTC - RP387 - Removed Risk II
        20: 2008-07-05 18:30:31 UTC - RP386 - Removed Power Tab Editor 1.7
        19: 2008-07-05 18:29:41 UTC - RP385 - Configured The Sims Deluxe Edition


        -- First Restore Point --
        1: 2008-06-29 07:00:35 UTC - RP367 - BricoPack Automatic Restore Point


        Backed up registry hives.
        Performed disk cleanup.

        Total Physical Memory: 510 MiB (512 MiB recommended).
        System Drive C: has 2.54 GiB (less than 15%) free.


        -- HijackThis (run as Owner.exe) -----------------------------------------------

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 10:07:59 PM, on 7/6/2008
        Platform: Windows XP SP3 (WinNT 5.01.2600)
        MSIE: Internet Explorer v7.00 (7.00.6000.16674)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
        C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
        C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
        C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
        C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
        C:\WINDOWS\system32\LxrSII1s.exe
        C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
        C:\WINDOWS\System32\tcpsvcs.exe
        C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
        C:\Program Files\Viewpoint\Common\ViewpointService.exe
        C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfsem.exe
        C:\windows\system\hpsysdrv.exe
        C:\HP\KBD\KBD.EXE
        C:\WINDOWS\system32\dla\tfswctrl.exe
        C:\WINDOWS\system32\igfxtray.exe
        C:\WINDOWS\system32\hkcmd.exe
        C:\WINDOWS\LTMSG.exe
        C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
        C:\Program Files\QuickTime\qttask.exe
        C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe
        C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-5.1.18.0\QOELoader.exe
        C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe
        C:\Documents and Settings\Owner\Local Settings\Application Data\Lexar Media\LxrAutorun.exe
        C:\Program Files\Windows Media Player\WMPNSCFG.exe
        C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
        C:\Program Files\Common Files\AOL\Loader\aolload.exe
        C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAPPActiveProtection.exe
        C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\explorer.exe
        C:\Program Files\AIM6\aolsoftware.exe
        C:\Program Files\AIM6\aolsoftware.exe
        C:\Program Files\Internet Explorer\IEXPLORE.EXE
        C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\Q0DKPS5N\dss[1].exe
        C:\PROGRA~1\TRENDM~1\HIJACK~1\Owner.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us6.hpwis.com/
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us6.hpwis.com/
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://home.peoplepc.com/search
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us6.hpwis.com/
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
        O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
        O2 - BHO: (no name) - {A8FB8EB3-183B-4598-924D-86F0E5E37085} - (no file)
        O3 - Toolbar: hp toolkit - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\HP\EXPLOREBAR\HPTOOLKT.DLL
        O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
        O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
        O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
        O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
        O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
        O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
        O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
        O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
        O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
        O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7
        O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
        O4 - HKLM\..\Run: [Windows Media Connect 2] "C:\Program Files\Windows Media Connect 2\WMCCFG.exe" /StartQuiet
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [cctray] "C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe"
        O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-5.1.18.0\QOELoader.exe"
        O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe"
        O4 - HKLM\..\Run: [cafwc] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\cafw.exe -cl
        O4 - HKLM\..\Run: [capfasem] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe
        O4 - HKLM\..\Run: [capfupgrade] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfupgrade.exe
        O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
        O4 - HKCU\..\Run: [LxrAutorun] C:\Documents and Settings\Owner\Local Settings\Application Data\Lexar Media\LxrAutorun.exe
        O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
        O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
        O4 - .DEFAULT User Startup: AutoPlay.exe (User 'Default user')
        O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
        O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
        O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
        O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
        O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
        O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1214675863734
        O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1214675775171
        O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
        O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab
        O23 - Service: AOL Connectivity Service (AOL ACS) - Unknown owner - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe (file missing)
        O23 - Service: CaCCProvSP - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
        O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
        O23 - Service: Lexar Secure II (LxrSII1s) - Unknown owner - C:\WINDOWS\SYSTEM32\LxrSII1s.exe
        O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
        O23 - Service: PPCtlPriv - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe
        O23 - Service: HIPS Event Manager (UmxAgent) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
        O23 - Service: HIPS Configuration Interpreter (UmxCfg) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
        O23 - Service: HIPS Firewall Helper (UmxFwHlp) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
        O23 - Service: HIPS Policy Manager (UmxPol) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
        O23 - Service: VET Message Service (VETMSGNT) - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
        O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

        --
        End of file - 9983 bytes

        -- File Associations -----------------------------------------------------------

        .cpl - cplfile - shell\cplopen\command - rundll32.exe shell32.dll,Control_RunDLL "%1",%*
        .cpl - cplfile - shell\runas\command - rundll32.exe shell32.dll,Control_RunDLLAsUser "%1",%*
        .reg - regfile - shell\open\command - regedit.exe "%1" %*
        .scr - scrfile - shell\open\command - "%1" %*


        -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

        R0 drvmcdb - c:\windows\system32\drivers\drvmcdb.sys <Not Verified; VERITAS Software, Inc.; >
        R1 sscdbhk5 - c:\windows\system32\drivers\sscdbhk5.sys <Not Verified; VERITAS Software, Inc.; >
        R1 ssrtln - c:\windows\system32\drivers\ssrtln.sys <Not Verified; VERITAS Software, Inc.; >
        R2 ASCTRM - c:\windows\system32\drivers\asctrm.sys <Not Verified; Windows (R) 2000 DDK provider; Windows (R) 2000 DDK driver>
        R2 drvnddm - c:\windows\system32\drivers\drvnddm.sys <Not Verified; VERITAS Software, Inc.; >
        R2 LxrSII1d (Secure II Driver) - c:\windows\system32\drivers\lxrsii1d.sys
        R2 tfsnboio - c:\windows\system32\dla\tfsnboio.sys <Not Verified; VERITAS Software, Inc.; >
        R2 tfsncofs - c:\windows\system32\dla\tfsncofs.sys <Not Verified; VERITAS Software, Inc.; >
        R2 tfsndrct - c:\windows\system32\dla\tfsndrct.sys <Not Verified; VERITAS Software, Inc.; >
        R2 tfsndres - c:\windows\system32\dla\tfsndres.sys <Not Verified; VERITAS Software, Inc.; >
        R2 tfsnifs - c:\windows\system32\dla\tfsnifs.sys <Not Verified; VERITAS Software, Inc.; >
        R2 tfsnopio - c:\windows\system32\dla\tfsnopio.sys <Not Verified; VERITAS Software, Inc.; >
        R2 tfsnpool - c:\windows\system32\dla\tfsnpool.sys <Not Verified; VERITAS Software, Inc.; >
        R2 tfsnudf - c:\windows\system32\dla\tfsnudf.sys <Not Verified; VERITAS Software, Inc.; >
        R2 tfsnudfa - c:\windows\system32\dla\tfsnudfa.sys <Not Verified; VERITAS Software, Inc.; >
        R3 pfc (Padus ASPI Shell) - c:\windows\system32\drivers\pfc.sys <Not Verified; Padus, Inc.; Padus(R) ASPI Shell>

        S3 StMp3Rec (Player Recovery Device Control Driver) - c:\windows\system32\drivers\stmp3rec.sys <Not Verified; Generic; Generic MP3 Player>


        -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

        R2 LxrSII1s (Lexar Secure II) - lxrsii1s.exe
        R2 Viewpoint Manager Service - "c:\program files\viewpoint\common\viewpointservice.exe" <Not Verified; Viewpoint Corporation; Viewpoint Manager>

        S2 AOL ACS (AOL Connectivity Service) - "c:\program files\common files\aol\acs\aolacsd.exe" (file missing)



        Sean0514

          Topic Starter


          Beginner

          Re: HELP my computer running windows is running really slow...
          « Reply #21 on: July 06, 2008, 08:30:12 PM »
          -- Device Manager: Disabled ----------------------------------------------------

          No disabled devices found.


          -- Scheduled Tasks -------------------------------------------------------------

          2008-07-02 20:29:35       456 --a------ C:\WINDOWS\Tasks\CAAntiSpywareScan_Daily as Owner at 5 00 AM.job


          -- Files created between 2008-06-06 and 2008-07-06 -----------------------------

          2008-07-06 22:04:03         0 d-------- C:\WINDOWS\CAVTemp
          2008-07-06 21:09:30         0 d-------- C:\Documents and Settings\Owner\Application Data\Malwarebytes
          2008-07-06 21:09:11         0 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
          2008-07-06 21:09:09         0 d-------- C:\Program Files\Malwarebytes' Anti-Malware
          2008-07-06 20:30:54         0 d-------- C:\Program Files\Trend Micro
          2008-07-06 17:21:31         0 dr-h----- C:\Documents and Settings\Owner\Recent
          2008-07-06 16:22:20         0 d-------- C:\Program Files\CCleaner
          2008-07-05 14:13:01         0 d-------- C:\Documents and Settings\NetworkService\My Documents
          2008-07-02 21:22:08         0 d-------- C:\Documents and Settings\Owner\Application Data\LimeWire
          2008-07-02 21:17:12         0 d-------- C:\Program Files\LimeWire
          2008-07-02 19:21:36         0 d-------- C:\Program Files\Common Files\Scanner
          2008-07-02 19:21:02         0 d-------- C:\Documents and Settings\All Users\Application Data\CA
          2008-07-02 19:20:59         0 d-------- C:\Program Files\CA
          2008-07-02 18:25:28         0 d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
          2008-07-02 18:24:01         0 d-------- C:\Program Files\Common Files\Download Manager
          2008-07-02 15:37:36         0 d-------- C:\Documents and Settings\Owner\Application Data\FrostWire
          2008-07-02 15:37:15         0 d-------- C:\Program Files\FrostWire
          2008-07-02 15:03:53         0 d-------- C:\Program Files\LabelCommand
          2008-07-01 22:49:11      7680 --a------ C:\WINDOWS\system32\ff_vfw.dll
          2008-07-01 22:49:10     60273 --a------ C:\WINDOWS\system32\pthreadGC2.dll <Not Verified; Open Source Software community project; >
          2008-07-01 22:49:09         0 d-------- C:\Program Files\ffdshow
          2008-07-01 22:46:45         0 d-------- C:\Program Files\TVersity
          2008-07-01 21:22:41   7602176 --a------ C:\Documents and Settings\Owner\ntuser.dat
          2008-06-30 00:09:29         0 d-------- C:\Documents and Settings\Owner\Application Data\acccore
          2008-06-30 00:06:59         0 d-------- C:\Documents and Settings\All Users\Application Data\acccore
          2008-06-30 00:06:28         0 d-------- C:\Documents and Settings\All Users\Application Data\AOL OCP
          2008-06-30 00:05:23         0 d-------- C:\Program Files\AIM6
          2008-06-29 03:14:36         0 d-------- C:\Program Files\Thoosje Sidebar V2.3
          2008-06-29 02:59:23         0 d-------- C:\WINDOWS\BricoPacks
          2008-06-28 21:44:14         0 d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
          2008-06-28 21:09:56         0 d-------- C:\WINDOWS\Prefetch
          2008-06-28 20:01:37         0 d-------- C:\WINDOWS\system32\scripting
          2008-06-28 20:01:30         0 d-------- C:\WINDOWS\l2schemas
          2008-06-28 20:01:29         0 d-------- C:\WINDOWS\system32\en
          2008-06-28 19:49:45         0 d-------- C:\WINDOWS\network diagnostic
          2008-06-28 13:59:47         0 d-------- C:\WINDOWS\system32\SoftwareDistribution


          -- Find3M Report ---------------------------------------------------------------

          2008-07-05 14:35:19         0 d-------- C:\Program Files\Common Files\InstallShield
          2008-07-02 18:24:01         0 d-------- C:\Program Files\Common Files
          2008-06-30 00:07:12         0 d-------- C:\Program Files\Viewpoint
          2008-06-30 00:06:01         0 d-------- C:\Program Files\Common Files\AOL
          2008-06-29 11:57:07         0 d-------- C:\Program Files\Windows Media Connect 2
          2008-06-29 11:39:30         0 d-------- C:\Program Files\Movie Maker
          2008-06-29 11:39:23         0 d--h----- C:\Program Files\InstallShield Installation Information
          2008-06-28 20:02:16         0 d-------- C:\Program Files\Messenger
          2008-06-28 19:54:18         0 d-------- C:\Program Files\Windows NT
          2008-06-28 13:44:36         0 d-------- C:\Program Files\Java
          2008-06-25 10:32:25         0 d-------- C:\Documents and Settings\Owner\Application Data\Adobe


          -- Registry Dump ---------------------------------------------------------------

          *Note* empty entries & legit default entries are not shown


          [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A8FB8EB3-183B-4598-924D-86F0E5E37085}]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [05/07/1998 07:04 PM]
          "NvCplDaemon"="NvQTwk" []
          "nwiz"="nwiz.exe" [05/03/2002 08:06 PM C:\WINDOWS\system32\nwiz.exe]
          "KBD"="C:\HP\KBD\KBD.EXE" [07/07/2001 12:56 AM]
          "StorageGuard"="C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" [05/09/2002 11:01 AM]
          "dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [07/16/2002 11:03 AM]
          "Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [12/19/2001 02:39 AM]
          "IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [11/02/2004 09:03 AM]
          "HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [11/02/2004 08:59 AM]
          "PS2"="C:\WINDOWS\system32\ps2.exe" [06/14/2002 07:39 PM]
          "LTMSG"="LTMSG.exe" [07/14/2003 10:52 AM C:\WINDOWS\ltmsg.exe]
          "AlcxMonitor"="ALCXMNTR.EXE" [09/07/2004 01:47 PM C:\WINDOWS\ALCXMNTR.EXE]
          "Windows Media Connect 2"="C:\Program Files\Windows Media Connect 2\WMCCFG.exe" []
          "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [02/22/2008 04:25 AM]
          "NWEReboot"="" []
          "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [07/10/2006 07:57 PM]
          "cctray"="C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe" [08/16/2007 10:19 PM]
          "QOELOADER"="C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-5.1.18.0\QOELoader.exe" [07/02/2008 07:22 PM]
          "CAVRID"="C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe" [08/20/2007 01:36 PM]
          "cafwc"="C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\cafw.exe" [07/02/2008 07:25 PM]
          "capfasem"="C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe" [07/02/2008 07:25 PM]
          "@"="" []
          "capfupgrade"="C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfupgrade.exe" [07/02/2008 07:25 PM]

          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" []
          "LxrAutorun"="C:\Documents and Settings\Owner\Local Settings\Application Data\Lexar Media\LxrAutorun.exe" [11/09/2006 12:00 PM]
          "Aim6"="C:\Program Files\AIM6\aim6.exe" [06/19/2008 01:51 PM]
          "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [10/18/2006 09:05 PM]

          [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\dimsntfy]
          C:\WINDOWS\System32\dimsntfy.dll

          [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\PFW]
          UmxWnp.Dll 05/18/2007 01:30 PM 79368 C:\WINDOWS\system32\UmxWNP.dll

          [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
          SecurityProviders   msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]
          @="Service"

          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
          @="Volume shadow copy"

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
          path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
          backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Kodak EasyShare software.lnk]
          path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Kodak EasyShare software.lnk
          backup=C:\WINDOWS\pss\Kodak EasyShare software.lnkCommon Startup

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^KODAK Software Updater.lnk]
          path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\KODAK Software Updater.lnk
          backup=C:\WINDOWS\pss\KODAK Software Updater.lnkCommon Startup

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOL Fast Start]
          "C:\Program Files\America Online 9.0\AOL.EXE" -b

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOLDialer]
          C:\Program Files\Common Files\AOL\ACS\AOLDial.exe

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HostManager]
          C:\Program Files\Common Files\AOL\1158980299\ee\AOLSoftware.exe

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
          "C:\Program Files\iTunes\iTunesHelper.exe"

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
          "C:\Program Files\Messenger\msmsgs.exe" /background

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
          C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
          "C:\Program Files\QuickTime\qttask.exe" -atboottime

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
          C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]
          "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet

          [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
          p2psvc   p2psvc p2pimsvc p2pgasvc PNRPSvc
          eapsvcs   eaphost
          dot3svc   dot3svc

          HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
          napagent
          hkmsvc


          [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8dcacce8-c22c-11dc-9cf9-00402b3edfbd}]
          AutoRun\command- G:\setupSNK.exe




          -- End of Deckard's System Scanner: finished at 2008-07-06 22:25:24 ------------

          Sean0514

            Topic Starter


            Beginner

            Re: HELP my computer running windows is running really slow...
            « Reply #22 on: July 06, 2008, 08:30:57 PM »
            extra
            Deckard's System Scanner v20071014.68
            Extra logfile - please post this as an attachment with your post.
            --------------------------------------------------------------------------------

            -- System Information ----------------------------------------------------------

            Microsoft Windows XP Home Edition (build 2600) SP 3.0
            Architecture: X86; Language: English

            CPU 0: Intel(R) Celeron(R) CPU 1.80GHz
            Percentage of Memory in Use: 68%
            Physical Memory (total/avail): 509.98 MiB / 161.31 MiB
            Pagefile Memory (total/avail): 1246.22 MiB / 779.21 MiB
            Virtual Memory (total/avail): 2047.88 MiB / 1829.46 MiB

            A: is Removable (No Media)
            C: is Fixed (NTFS) - 50.86 GiB total, 2.54 GiB free.
            D: is Fixed (FAT32) - 5.02 GiB total, 1.18 GiB free.
            F: is CDROM (UDF)

            \\.\PHYSICALDRIVE0 - ST360020A - 55.9 GiB - 2 partitions
              \PARTITION0 - Unknown - 5.03 GiB - D:
              \PARTITION1 (bootable) - Installable File System - 50.86 GiB - C:



            -- Security Center -------------------------------------------------------------

            AUOptions is scheduled to auto-install.


            -- Environment Variables -------------------------------------------------------

            ALLUSERSPROFILE=C:\Documents and Settings\All Users
            APPDATA=C:\Documents and Settings\Owner\Application Data
            CLASSPATH=C:\Program Files\QuickTime\QTSystem\QTJava.zip
            CLIENTNAME=Console
            CommonProgramFiles=C:\Program Files\Common Files
            COMPUTERNAME=SEANS
            ComSpec=C:\WINDOWS\system32\cmd.exe
            FP_NO_HOST_CHECK=NO
            HOMEDRIVE=C:
            HOMEPATH=\Documents and Settings\Owner
            LOGONSERVER=\\SEANS
            NUMBER_OF_PROCESSORS=1
            OS=Windows_NT
            Path=C:\Program Files\Internet Explorer;;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;c:\Python22;C:\Program files\PC-Doctor for Windows XP\WINDSAPI;C:\Program Files\QuickTime\QTSystem\
            PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
            PROCESSOR_ARCHITECTURE=x86
            PROCESSOR_IDENTIFIER=x86 Family 15 Model 1 Stepping 3, GenuineIntel
            PROCESSOR_LEVEL=15
            PROCESSOR_REVISION=0103
            ProgramFiles=C:\Program Files
            PROMPT=$P$G
            QTJAVA=C:\Program Files\QuickTime\QTSystem\QTJava.zip
            SESSIONNAME=Console
            SystemDrive=C:
            SystemRoot=C:\WINDOWS
            TEMP=C:\DOCUME~1\Owner\LOCALS~1\Temp
            TMP=C:\DOCUME~1\Owner\LOCALS~1\Temp
            USERDOMAIN=SEANS
            USERNAME=Owner
            USERPROFILE=C:\Documents and Settings\Owner
            windir=C:\WINDOWS


            -- User Profiles ---------------------------------------------------------------

            Owner (admin)


            -- Add/Remove Programs ---------------------------------------------------------

             --> C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu
             --> C:\WINDOWS\System32\\MSIEXEC.EXE /x {09DA4F91-2A09-4232-AB8C-6BC740096DE3}
             --> c:\WINDOWS\System32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
             --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
            Adobe Flash Player 9 ActiveX --> C:\WINDOWS\system32\Macromed\Flash\UninstFl.exe -q
            Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
            Adobe Reader 7.0.8 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70800000002}
            AIM 6 --> C:\Program Files\AIM6\uninst.exe
            CA Internet Security Suite --> "C:\Program Files\CA\CA Internet Security Suite\caunst.exe" /u
            Camera Driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D1B3874F-3057-11D6-B2EA-0050BA18806B}\Setup.exe"
            CCleaner (remove only) --> "C:\Program Files\CCleaner\uninst.exe"
            Detto IntelliMover Demo --> MsiExec.exe /X{E62C706B-1352-4DCA-B4D4-81C24750B70F}
            DLA --> MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
            ffdshow [rev 1723] [2007-12-24] --> "C:\Program Files\ffdshow\unins000.exe"
            Guitar Pro 5.0 --> "C:\Program Files\Guitar Pro 5\unins000.exe"
            HijackThis 2.0.2 --> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
            Hotfix for Windows Media Format SDK (KB902344) --> "C:\WINDOWS\$NtUninstallKB902344$\spuninst\spuninst.exe"
            HP Instant Support --> C:\PROGRA~1\HPINST~1\UNWISE.EXE C:\PROGRA~1\HPINST~1\INSTALL.LOG
            HP Memories Disc --> MsiExec.exe /X{FF384BDE-429B-45AD-A0C6-E593393D9D1C}
            hp toolkit --> c:\Windows\HPTK\unhptkit.exe
            Inactive HP Printer Drivers (Remove only) --> RunDll32 hpuninst.dll,InstallHinfSection UninstDefault 132 prntunin.inf
            Intel(R) Extreme Graphics Driver --> RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx PCI\VEN_8086&DEV_2562
            iPod for Windows 2005-11-17 --> C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{8338BA06-E527-491B-9400-F51708FEE695} /l1033
            iTunes --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{872653C6-5DDC-488B-B7C2-CF9E4D9335E5} /l1033
            J2SE Runtime Environment 5.0 Update 7 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150070}
            Java(TM) 6 Update 5 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
            KBD --> C:\HP\KBD\KBD.EXE uninstalled
            Kublox --> "C:\Program Files\WildTangent\DDC\ActiveMenu\DDCActiveMenu.exe" -UninstallItem {F7A4D9BE-D989-45B9-BB49-2C0EA34B9991}
            Lernout & Hauspie TruVoice American English TTS Engine --> RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\tv_enua.inf, Uninstall
            LimeWire PRO 4.18.2 --> "C:\Program Files\LimeWire\uninstall.exe"
            LiveReg (Symantec Corporation) --> C:\Program Files\Common Files\Symantec Shared\LiveReg\VcSetup.exe /REMOVE
            Malwarebytes' Anti-Malware --> "C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
            Microsoft Base Smart Card Cryptographic Service Provider Package --> "C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"
            Microsoft Compression Client Pack 1.0 for Windows XP --> "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
            Microsoft Office Professional Edition 2003 --> MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9}
            Microsoft User-Mode Driver Framework Feature Pack 1.0 --> "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
            NVIDIA Windows 2000/XP Display Drivers --> rundll32.exe C:\WINDOWS\System32\nvinstnt.dll,NvUninstallNT4 nvhp.inf
            PC-Doctor for Windows --> C:\WINDOWS\UNWISE.EXE C:\PROGRA~1\PC-DOC~1\INSTALL.LOG
            PigPen --> "C:\Program Files\WildTangent\DDC\ActiveMenu\DDCActiveMenu.exe" -UninstallItem {B279B0DA-6F60-4FBD-9847-0C9AB79A3674}
            PS2 --> C:\WINDOWS\system32\ps2.exe uninstall
            Python 2.2 combined Win32 extensions --> C:\Python22\Lib\SITE-P~1\UNWISE~1.EXE C:\Python22\Lib\SITE-P~1\w32inst.log
            Python 2.2.1 --> C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG
            QuickTime --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{3868A8EE-5051-4DB0-8DF6-4F4B8A98D083} /l1033
            RealPlayer Basic --> C:\Program Files\Common Files\Real\Update\\rnuninst.exe RealNetworks|RealPlayer|6.0
            RecordNow Update Manager --> MsiExec.exe /I{09DA4F91-2A09-4232-AB8C-6BC740096DE3}
            Security Update for CAPICOM (KB931906) --> MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
            Security Update for CAPICOM (KB931906) --> MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
            Security Update for Step By Step Interactive Training (KB898458) --> "C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
            Spybot - Search & Destroy 1.4 --> "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
            Viewpoint Media Player --> C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
            Windows Media Format 11 runtime --> "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
            Windows Media Format SDK Hotfix - KB891122 --> "C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.exe"
            Windows XP Service Pack 3 --> "C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"


            -- Application Event Log -------------------------------------------------------

            Event Record #/Type6807 / Success
            Event Submitted/Written: 07/06/2008 04:27:07 PM
            Event ID/Source: 88 / UmxAgent
            Event Description:
            explorer.exe started

            Event Record #/Type6806 / Success
            Event Submitted/Written: 07/06/2008 04:27:07 PM
            Event ID/Source: 88 / UmxAgent
            Event Description:
            explorer.exe started

            Event Record #/Type6805 / Success
            Event Submitted/Written: 07/06/2008 04:27:07 PM
            Event ID/Source: 88 / UmxAgent
            Event Description:
            explorer.exe started

            Event Record #/Type6804 / Success
            Event Submitted/Written: 07/06/2008 04:27:07 PM
            Event ID/Source: 88 / UmxAgent
            Event Description:
            Shell is started at session 0

            Event Record #/Type6803 / Success
            Event Submitted/Written: 07/06/2008 04:27:07 PM
            Event ID/Source: 88 / UmxAgent
            Event Description:
            explorer.exe started



            -- Security Event Log ----------------------------------------------------------

            No Errors/Warnings found.


            -- System Event Log ------------------------------------------------------------

            Event Record #/Type36922 / Warning
            Event Submitted/Written: 07/06/2008 09:59:48 PM
            Event ID/Source: 8004 / MRxSmb
            Event Description:
            A request has been submitted to promote the computer to backup when it is already a
            master browser.

            Event Record #/Type36921 / Warning
            Event Submitted/Written: 07/06/2008 09:59:18 PM
            Event ID/Source: 8004 / MRxSmb
            Event Description:
            A request has been submitted to promote the computer to backup when it is already a
            master browser.

            Event Record #/Type36920 / Warning
            Event Submitted/Written: 07/06/2008 09:55:18 PM
            Event ID/Source: 8004 / MRxSmb
            Event Description:
            A request has been submitted to promote the computer to backup when it is already a
            master browser.

            Event Record #/Type36919 / Error
            Event Submitted/Written: 07/06/2008 09:21:42 PM
            Event ID/Source: 8003 / MRxSmb
            Event Description:
            The master browser has received a server announcement from the computer LIVINGROOM
            that believes that it is the master browser for the domain on transport NetBT_Tcpip_{B7A8107F-30A1-436.
            The master browser is stopping or an election is being forced.

            Event Record #/Type36917 / Error
            Event Submitted/Written: 07/06/2008 07:54:23 PM
            Event ID/Source: 4321 / NetBT
            Event Description:
            The name "MSHOME         :1d" could not be registered on the Interface with IP address 192.168.0.195.
            The machine with the IP address 192.168.0.198 did not allow the name to be claimed by
            this machine.



            -- End of Deckard's System Scanner: finished at 2008-07-06 22:25:24 ------------


            evilfantasy

            • Malware Removal Specialist
            • Moderator


            • Genius
            • Calm like a bomb
            • Thanked: 489
            • Experience: Familiar
            • OS: Windows 10
            Re: HELP my computer running windows is running really slow...
            « Reply #23 on: July 06, 2008, 08:48:24 PM »
            While nice to have, Thoosje Sidebar and Briopacks are a huge resource drain as well. I would suggest uninstalling them to see if it helps.

            You need to finish uninstalling all of Norton/Symantec. Go to add/remove programs and uninstall:

            LiveReg (Symantec Corporation)

            ----------

            Your Java is out of date.

            Older versions have vulnerabilities that malicious sites can use to infect your system.

            Install the new version Sun Java Runtime Environment

            Remove the old version(s)

            • Go to add/remove programs and uninstall:
            • J2SE Runtime Environment 5.0 Update 7
            • Java(TM) 6 Update 5
            • Next Download JavaRa and unzip the file to your Desktop.
            • Open JavaRA.exe and choose Remove Older Versions
            • Once complete exit JavaRA and delete the program.
            • Run CCleaner.
            .
            ----------

            Everything in the MBAM log says No action taken. Did you remove them after you copied the log?

            How is everything now?

            Sean0514

              Topic Starter


              Beginner

              Re: HELP my computer running windows is running really slow...
              « Reply #24 on: July 06, 2008, 09:02:51 PM »
              how do i uninstall Thoosje Sidebar and Briopacks it is not in add/remove programs

              evilfantasy

              • Malware Removal Specialist
              • Moderator


              • Genius
              • Calm like a bomb
              • Thanked: 489
              • Experience: Familiar
              • OS: Windows 10
              Re: HELP my computer running windows is running really slow...
              « Reply #25 on: July 06, 2008, 09:15:50 PM »
              Download Combofix by sUBs from one of the below links.

              Important! Combofix.exe MUST be saved to and ran from the Desktop.
              • Close any open Web browsers. (Firefox, Internet Explorer, etc) before starting Combofix.
              • Important! Temporarily disable your antivirus, script blocking and any antispyware real time protection before performing a scan.
                • Click this link to see a list of security programs that should be disabled and how to disable them.
                • If yours is not listed and you don't know how to disable it, please ask.
              • Warning: Combofix disconnects your computer from the internet. The connection is automatically restored before Combofix completes its run.
              • Double click combofix.exe & follow the prompts.
                • Choose Yes to accept the Disclaimers.
              • When finished, it will produce a log for you.
              • Post that log in your next reply.
              Warning: Do not mouseclick Combofix's window while it is running. That may cause it to stall
              • If Combofix runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your computer.
              • Important: Remember to re-enable your antivirus and antispyware before reconnecting to the Internet.
              If needed, see this Combofix tutorial with screenshots that will detail more thoroughly the downloading and running of Combofix.

              ----------

              Next post add
              Combofix log

              Sean0514

                Topic Starter


                Beginner

                Re: HELP my computer running windows is running really slow...
                « Reply #26 on: July 06, 2008, 09:37:07 PM »
                wait before that dont i uninstall Thoosje Sidebar and Briopacks it is not in add/remove programs. how do i uninstall it

                evilfantasy

                • Malware Removal Specialist
                • Moderator


                • Genius
                • Calm like a bomb
                • Thanked: 489
                • Experience: Familiar
                • OS: Windows 10
                Re: HELP my computer running windows is running really slow...
                « Reply #27 on: July 06, 2008, 09:37:57 PM »
                We're going to use Combofix to uninstall it.

                Sean0514

                  Topic Starter


                  Beginner

                  Re: HELP my computer running windows is running really slow...
                  « Reply #28 on: July 06, 2008, 10:13:46 PM »
                  how do i shut off CA antivirus CA anti-spyware and CA anti spam

                  evilfantasy

                  • Malware Removal Specialist
                  • Moderator


                  • Genius
                  • Calm like a bomb
                  • Thanked: 489
                  • Experience: Familiar
                  • OS: Windows 10
                  Re: HELP my computer running windows is running really slow...
                  « Reply #29 on: July 06, 2008, 10:17:48 PM »
                  Don't worry about the AV unless it stops Combofix from running, then let me know.

                  CA Personal Firewall
                  Navigate to the system tray on the bottom right hand corner and look for the CA sign.

                      * Right click it-> hover (mouse-over) over CA Personal Firewall menue option. A sub-menu will popup.
                      * Please chose "Disable CA Personal Firewall"
                      * Unfortunately the system tray icon does not change, so if you want to double-check whether or not you successfully disabled the Firewall, do the above steps again and look for "Enable CA Personal Firewall." If this is the case, then you successfully disabled the CA Personal Firewall Guard.
                  « Last Edit: July 10, 2008, 07:46:00 PM by evilfantasy »