TechSpot

Hijack this log after fixes but computer still slow.

By HDAY
Jan 5, 2005
  1. Evening,

    This is my log created after fixing obvious errors like 02's with no name AND no file and all my 016's. However my computer is still running slow and stating that my network connection has ltd or no connectivity to the Internet. This connection connects using 'Globespan USB' which doesn't sound a promising title! Is there something else that I'm missing?

    Thanks in advance newbie :)
     

    Attached Files:

  2. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 8,165

    Go to my post here and follow EXACTLY (especially updating programs....)
    How to remove Begin2Search / Coolwebsearch

    Uninstall anything to do with:
    C:\PROGRA~1\COMMON~1\WinTools\
    C:\PROGRA~1\Toolbar
    C:\Program Files\MSN Apps\MSN Toolbar
    [DownloadAccelerator] C:\PROGRA~1\DAP\

    With the updated HJT let it "fix":
    Clear all your R0,R1,R3,F2

    Then report back with a fresh log.
     
  3. HDAY

    HDAY TS Rookie Topic Starter

    New log as requested

    fyi as requested :giddy:
     
  4. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 8,165

    It is NOT as requested

    Even after my SPECIFIC instruction to UPDATE programs, your are STILL using an old version of HijackThis!
    Logfile of HijackThis v1.97.7
    And you did NOT install everything I asked you.
    This takes the fun out of helping people.

    Boot in safe mode

    Uninstall this rubbish and delete the directory with anything in it:
    O4 - HKCU\..\Run: [Spyware Begone] C:\freescan\freescan.exe -FastScan

    Let HJT "fix" these, if still there:

    C:\Program Files\VoyagerTest\fts.exe
    C:\Program Files\Bcpc\bcpc.exe
    C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-gb\msnappau.exe
    C:\PROGRA~1\DAP\DAP.EXE

    O2 - BHO: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} - C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll (file missing)
    O2 - BHO: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - C:\PROGRA~1\Toolbar\toolbar.dll (file missing)
    O2 - BHO: (no name) - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
    O2 - BHO: (no name) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-gb\msntb.dll
    O3 - Toolbar: (no name) - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - (no file)
    O3 - Toolbar: &Search Toolbar - {339BB23F-A864-48C0-A59F-29EA915965EC} - C:\PROGRA~1\Toolbar\toolbar.dll (file missing)
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-gb\msntb.dll
    O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
    O4 - HKLM\..\Run: [%FP%Friendly fts.exe] "C:\Program Files\VoyagerTest\fts.exe"
    O4 - HKLM\..\Run: [WebCpr0] "C:\Program Files\Web_Cpr\WebCpr0.exe"
    O4 - HKLM\..\Run: [BCPC] "C:\Program Files\Bcpc\bcpc.exe"
    O4 - HKLM\..\Run: [TBPS] C:\PROGRA~1\Toolbar\TBPS.exe
    O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-gb\msnappau.exe"
    O4 - HKLM\..\Run: [DownloadAccelerator] C:\PROGRA~1\DAP\DAP.EXE /STARTUP
    O4 - HKCU\..\Run: [Spyware Begone] C:\freescan\freescan.exe -FastScan
    O4 - Global Startup: FotoStation Easy AutoLaunch.lnk = ?
    O4 - Global Startup: Logitech SetPoint.lnk = ?
    O4 - Global Startup: officejet 6100.lnk = ?
    O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
    O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
    O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - https://mysupport.nai.com/amiuptodate/bin/1,0,0,7/McUpdatePortal.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

    After HJT is finished, delete all the bold files. If the directories are bold as well, delete these directories as well with ALL their contents.
     
  5. HDAY

    HDAY TS Rookie Topic Starter

    apologies

    Am new to all this many apologies I do appreciate this help. Will only get back to you when all of the above has been removed.... :blackeye:
     
  6. HDAY

    HDAY TS Rookie Topic Starter

    try again...

    here is my next log after using 1.99 v. for HT
     
  7. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 8,165

    HDAY

    How thick or blind are you?
    That crap is still there!
    If you know it better, why come here for help?

    Boot in safe mode

    UNINSTALL THE ABOVE CRAP

    Let HJT "Fix":

    O4 - HKLM\..\Run: [Update] C:\WINDOWS\csrss.exe /i
    O4 - HKLM\..\Run: [DI2] "C:\DOCUME~1\Owner\LOCALS~1\Temp\27.exe\27.exe"
    O4 - HKCU\..\Run: [Spyware Begone] C:\freescan\freescan.exe -FastScan <<<--- should be GONE by now


    Then DELETE C:\WINDOWS\csrss.exe <<<<--- only from this location!

    Delete EVERYTHING in here: C:\DOCUME~1\Owner\LOCALS~1\Temp including ANY sub-directories, but NOT Temp itself.
     
  8. HDAY

    HDAY TS Rookie Topic Starter

    Hjt

    realblackstuff

    fyi see attached
     
  9. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 8,165

    Clean, well done.
     
  10. HDAY

    HDAY TS Rookie Topic Starter

    Thanks. The end.
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.