Can ya look at this for me howard.

Status
Not open for further replies.

sllewe

Posts: 1,343   +6
Ok so i have a PC i am working on at school that runs very slow. It is a dell optiplec GX270 and is on 2000. It also is running on a Novell Network. Network activites take forever, this includes internet (which does not even work) and accessing network drives etc. I have run a ewido anti malware and CW shredder. Both to very small sucsess. But the online scans are just not going to work.

I looked over this HJT log and did not find anything to to bad, but then agian im not anything as good as you and RBS.
 
Hi Sean.

Your version of HJT is way out of date.

Go HERE and follow the instructions in the order they are given.

Post a fresh HJT log, only after doing the above.

Regards Howard :)
 
I looked at the page before i posted this, and did as much of it as I could. The online scans will not work. (proxy server issues) plus, i can barely get the thing to run on the network as it is.

I download the programs here at my house, and install them via pendrive tomorrow. Then i repost the log.
 
Ok sean.

In the meantime.

Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

Run HJT with no other programmes open and let HJT fix the following(if there).


R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 172.18.110.251:2034 Only fix this if you don`t recognise it or have not set this yourself.

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 172.20.2.220;*.bridges.com;*.testu.com;*.mdk12online.org; *.jostens.com;*.netacad.net;172.20.2.205;*.novelstars.com;*.edoption.com;*.eguidance.com; *.worldbookonline.com; *.k12.carr.org;www.scientificlearning.com;ponser.scilearn.com;bb.ncrel.org; *.schedulestar.com;128.128.98.201;128.128.98.241; 128.128.242.252; 128.128.109.245; 128.128.99.249; <local>
O1 - Hosts: 128.128.115.254 ZENWSIMPORT
O1 - Hosts: 128.128.98.200 ccpssubserv
O1 - Hosts: 128.128.98.201 ccpswebconnect
O1 - Hosts: 128.128.98.21 subserv
O1 - Hosts: 128.128.99.4 carroll01

Click on the fix checked button.

Close HJT.

Reboot into normal mode and turn system restore back on.

Post a fresh, uptodate HJT log, as soon as possible.

Regards Howard :)
 
howard_hopkinso said:
Ok sean.



R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 172.18.110.251:2034 Only fix this if you don`t recognise it or have not set this yourself.

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 172.20.2.220;*.bridges.com;*.testu.com;*.mdk12online.org; *.jostens.com;*.netacad.net;172.20.2.205;*.novelstars.com;*.edoption.com;*.eguidance.com; *.worldbookonline.com; *.k12.carr.org;www.scientificlearning.com;ponser.scilearn.com;bb.ncrel.org; *.schedulestar.com;128.128.98.201;128.128.98.241; 128.128.242.252; 128.128.109.245; 128.128.99.249; <local>
O1 - Hosts: 128.128.115.254 ZENWSIMPORT
O1 - Hosts: 128.128.98.200 ccpssubserv
O1 - Hosts: 128.128.98.201 ccpswebconnect
O1 - Hosts: 128.128.98.21 subserv
O1 - Hosts: 128.128.99.4 carroll01

I do not have the PC at my house, but i can tell you right now, that all of those are needed. CCPS is "carroll county public school system" and the proxy stuff is needed on all machines.

Is that all that looks bad on that log? As mentioned i ran ewido (which is very good most of the times) and it only found a few tracking cookies. I dont understand why this thing is so damn slow! I have 25 of the same exact machines sitting next to it, on the same network, and only this one is slow.
 
Without an uptodate HJT log it`s very difficult to tell what the problem may be.

The problem with the outdated version of HJT is it doesn`t give any info for 023 services. I can`t diagnose what I can`t see lol.

Regards Howard :)
 
howard_hopkinso said:
Without an uptodate HJT log it`s very difficult to tell what the problem may be.

The problem with the outdated version of HJT is it doesn`t give any info for 023 services. I can`t diagnose what I can`t see lol.

Regards Howard :)

ahh i didnt even think of that. I saw it mentioned in one of the posts you showed me, but i assumed the verison i had was the most recent. I will get a new one tomorrow

Thanks for everything
 
Another thing to look at are the physical connections.

Is this PC connected to a switch or hub? If so, can you try a different port on the switch? Can you try a different patch cable? Can you physically swap the machine into another location and does it still give you the same slowness? On a similiar note if you put a different PC into this location does it all of a sudden have this slowness?
 
Yes it is on a switch. It is working off a 3com 10/100/1000 mbs 24 port switch. All the Computers in the school work of these switches (normally installed outside in the hall in the celing) I have replaced the cable. But have not switched the PC out. The fact that it all of a sudden changed, and the fact the students have access to it, led me to howard and the HJT. We see alot of infections, most of which are easy to deal with.
 
Status
Not open for further replies.
Back