Forum Home
Press F1
Thread ID: 113361	2010-10-16 03:32:00	very slow speed	goodiesguy (15316)	Press F1

Post ID	Timestamp	Content	User
1145340	2010-10-16 03:32:00	Since Yesterday at around 9pm, my pc is going very slow, the desktop takes forever to load etc, and sometimes, when opening a new tab, firefox stops responding. I have uninstalled things i don't need with revo. I have run Ccleaner, and Reg Cleaner 4.3. I have gone into Msconfig and unticked things that don't need to be in the start up. Windows Task Manager says: CPU usage 1% to around 30%. At present, Firefox, foobar2000 (music player) and Windows Live Messenger are open. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 4:29:19 p.m., on 16/10/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 SP3 (8.00.6001.18702) Boot mode: Normal Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\Ati2evxx.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\Ati2evxx.exe D:\Program Files\Alwil Software\Avast5\AvastSvc.exe D:\WINDOWS\Explorer.EXE D:\WINDOWS\SOUNDMAN.EXE D:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe D:\Program Files\uTorrent\uTorrent.exe D:\Program Files\Windows Live\Messenger\msnmsgr.exe D:\Program Files\Messenger\msmsgs.exe D:\Program Files\UltraMon\UltraMon.exe D:\WINDOWS\system32\spoolsv.exe D:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\wuauclt.exe D:\Program Files\Windows Live\Contacts\wlcomm.exe D:\Program Files\Mozilla Firefox\firefox.exe D:\Program Files\foobar2000\foobar2000.exe D:\Program Files\Mozilla Firefox\plugin-container.exe D:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = go.microsoft.com O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - D:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - D:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - D:\Program Files\Windows Live\Toolbar\wltcore.dll O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [avast5] D:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui O4 - HKLM\..\Run: [StartCCC] "D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKCU\..\Run: [uTorrent] "D:\Program Files\uTorrent\uTorrent.exe" O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: UltraMon.lnk = ? O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - D:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - D:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - D:\Documents and Settings\Nathan\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing) O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - platformdl.adobe.com O20 - Winlogon Notify: Antiwpa - D:\WINDOWS\SYSTEM32\antiwpa.dll O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Mail Scanner - AVAST Software - D:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Web Scanner - AVAST Software - D:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- End of file - 5203 bytes	goodiesguy (15316)
1145341	2010-10-16 03:52:00	how is it in safe mode?	SoniKalien (792)
1145342	2010-10-16 03:52:00	O20 - Winlogon Notify: Antiwpa - D:\WINDOWS\SYSTEM32\antiwpa.dll I seem to remember bad results last time this was found in a HJT log...	The Error Guy (14052)
1145343	2010-10-16 03:55:00	Which means we may not be able to help once more and you may have another few days off.	Snorkbox (15764)
1145344	2010-10-16 03:58:00	Thats to bypass activation. Bad result = The last time you posted a log with that entry in it, you were banned for a few days You can tick these then tick fix checked. Close browsers / or use ccleaner and delete the entry from tools / startup O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [StartCCC] "D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKCU\..\Run: [uTorrent] "D:\Program Files\uTorrent\uTorrent.exe" O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')	Speedy Gonzales (78)
1145345	2010-10-16 04:02:00	I got rid of that entry from my computer, so i dont know how it appeared. I am against that bypass activation. i got rid of it. Obviously some traces of it were left behind. I removed the above entries, my pc seems to be going a lot faster. i will keep you posted	goodiesguy (15316)
1145346	2010-10-16 04:17:00	Amazing how entries appear in Logs all by themselves like that is it not?	Snorkbox (15764)
1145347	2010-10-16 04:22:00	You think im lying? I'm not, as soon as i saw i was banned from pressf1, i decided to get rid of that entry to make sure i didn't get in anymore trouble. My pc has been having a few issues lately, and i have had to start it in different modes etc, to troubleshoot, so it very well could of restored to a previous state. All i know, is that i removed it.	goodiesguy (15316)
1145348	2010-10-16 04:31:00	You probably stuffed something up when you used reg cleaner You can tick this entry as well O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - D:\Documents and Settings\Nathan\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)	Speedy Gonzales (78)
1145349	2010-10-16 04:36:00	I got rid of that entry from my computer, so i dont know how it appeared. I am against that bypass activation. i got rid of it. Obviously some traces of it were left behind. I removed the above entries, my pc seems to be going a lot faster. i will keep you posted Well if you are against that bypass activation as you say here then why did you admit to using it earlier? And I personally do not think at this time you have a LEGAL copy of XP Pro running on your PC. Produce a receipt for a copy bought since you were last banned without the use of Photoshop or similar or other devious methods and I will not only apologise publicly but I will also send you an amount to be agreed upon direct to your bank account if you have one. Until you prove otherwise then the ball is in your court. A receipt dated later than the post you made today at 4.32 PM in this thread is not an option BTW.	Snorkbox (15764)
1 2