Forum Home
Press F1
 
Thread ID: 100154 2009-05-28 01:11:00 reallly slow boot NZHawk (4093) Press F1
Post ID Timestamp Content User
777573 2009-05-28 04:19:00 If I were you, I would re-install the O/S as PCTek said due to bloating of the O/S. Make sure you back everything up including pst files or express db file, docs & fav etc.....
I image my PC for a standard build with all my fav programs and settings. My docs, games and media files are all on separate disks.
If I have an issue, i just image in back down........
SolMiester (139)
777574 2009-05-28 05:43:00 You havent ticked everything yet

O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot

O4 - HKLM\..\Policies\Explorer\Run: [winlogon] C:\heap41a\svchost.exe C:\heap41a\std.txt

O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')

Dont forget to delete the C:\heap41a folder, and the folders that were posted before in the temp folder.Use ccleaner
Speedy Gonzales (78)
777575 2009-05-28 06:17:00 I did tick everything but it came back.
I searched for C:\heap41a in all folders hidden & otherwise and it wasn't there to delete, I believe Avast removed it on the boot up scan.
I used CCleaner removed all temp files

I looked at the registry entries and but couldn't find any they/you listed.

Although when I searched the registry for heap41a I did find an entry in
HCU\Software\Microsoft\Windows\ShellNoRoam\MuiCach e --> which contained C:\heap41a\svchost.exe ---- should I remove this entry?

Would another post of HJT log help?
NZHawk (4093)
777576 2009-05-28 06:20:00 If Avast is installed, uninstall AVG. Open my computer, and go to C, if that heap folder, is still there, it'll be in C Speedy Gonzales (78)
777577 2009-05-28 06:24:00 AVG is uninstalled - now

I did look in C: and no heap folder
NZHawk (4093)
777578 2009-05-28 06:28:00 Scan all of c with Avast Speedy Gonzales (78)
777579 2009-05-28 06:32:00 Updated and am thoroughly scanning with Avast as we speak.

Found 2 C:\heap41a files and moved them to safe box or something
NZHawk (4093)
777580 2009-05-28 06:56:00 C:\heap41a\reproduce.txt
C:\heap41a\script.txt
C:\heap41a\std.txt

were all moved to the chest.
would another HJT log be helpful?
NZHawk (4093)
777581 2009-05-28 07:46:00 Theyre probably in the virus chest, when it finishes reboot, run avast (the program itself) from all programs / go to menu / virus chest highlight those files and delete them. Then run trojan remover again and select all options under utilities (if you didn't before) Speedy Gonzales (78)
777582 2009-05-28 08:15:00 Ok I have deleted the files and ran Trojan remover & the utility options again.
But the computer still takes 5 minutes + some to complete the boot.
NZHawk (4093)
1 2 3