also @ TechSpot: Apple iOS 'Absinthe' jailbreak: 1 million downloads and counting

TechSpot

Hijackthis Log

Discussion in 'Virus and Malware Removal' started by Schulze, Jan 28, 2009.

Thread Status:
Not open for further replies.
Page 1 of 2

  1. Schulze Newcomer, in training

    Im having some problem with my computers performance. Im not sure if it's a virus, i think it may be a hardware problem but ill post the log so i can narrow down the possibilities
    Schulze, Jan 28, 2009
    #1

  2. Bobbye Helper on the Fringe

    Moderator: Please remove the pasted log.
    Bobbye, Jan 28, 2009
    #2

  3. Schulze Newcomer, in training

    i remove the pasted log^^
    Schulze, Jan 28, 2009
    #3

  4. Bobbye Helper on the Fringe

    Thank you> I wasn't sure you'd be able to if I had a reply after your post. We prefer the logs to be attached, and when they are, there is no need to paste them also.

    Please be specific about the problems.

    You do not have an antivirus program running- chances are great that you have malware:

    Please follow the Steps in the Virus/Spyware/ Malware Removal HERE.

    Step 1 will give you AV recommendations. After you install an AV program, run a full system scan.

    The current HijackThis log only has two incomplete entries- that is not enough to determine if you have malware. Follow the 8 Steps, run HijackThis again, AFTER Malwarebytes and SuperAntispyware.

    Attach all three logs.
    Bobbye, Jan 28, 2009
    #4

  5. Schulze Newcomer, in training

    Ok the "problems" are that my CPU seems higher than it should be (40% with firefox,thunderbird and msn running) and when im doing things (mainly using web browser or in the menu's of games and not in the actual playing part) the mouse/keyboard lags for like 1second often, but this doesnt happen always. Today it hasnt really been a problem but last night (when i made post) it was Really bad!

    Im using the latest version of PC Tools' Spyware doctor (anti-vir and Spybot)
    I have tried Ccleaner.


    I will try what you said and get back to you :)

    Thanks for help :)
    Schulze, Jan 28, 2009
    #5

  6. Bobbye Helper on the Fringe

    SpywareDoctor is a high resource user. It does not have an AV program bundled with it.
    Spybot Search & Destroy is a spyware/adware program.
    Bobbye, Jan 28, 2009
    #6

  7. Schulze Newcomer, in training

    hmmm... the title of spyware doctor is "Pc tools Spyware Doctor with antivirus" i can give you screenshot but i doubt that will change much of the problem
    Schulze, Jan 28, 2009
    #7

  8. Schulze Newcomer, in training

    ok i've done what you said and here are the logs.
    Schulze, Jan 28, 2009
    #8

  9. Bobbye Helper on the Fringe

    Well, you are one up on me! Sorry, I didn't realize an AV can be included. However, I did read up on it and will make the following comments:
    1. PC Tools Spyware Doctor w/AV v5.5 is "buggy."
    2. PC Tools Spyware Doctor w/AV v6 has bug worked out, but is not related highly for it's AV coverage.
    In fact, the AV is rated #16 out of 18 AV programs.

    If you can identify the processes that have high CPU usage, you might find they belong to PCTools:
    C:\Program Files\Spyware Doctor\pctsAuxs.exe>> anti-malware program.
    C:\Program Files\Spyware Doctor\pctsSvc.exe>> comment from user:
    Reply to comment:
    Additional comment:
    C:\Program Files\Spyware Doctor\
    Reset Cookies:
    Update Adobe:
    WoWEmuHacker5.exe
    These 2 entries in the HijackThis log can be checked for removal:
    If the performance problem persist:
    Prepare the system for shutdown but don't shut down. Instead, right click on Taskbar> Task Manager> Processes tab> click twice on frame above CPU column to sort.

    the only CPU use you should see now are taskmgr, System and System Idle. There should add up to 100% of the CPU. Any other processes over 1-2 are the problem. Identify them and take off of Startup.
    Bobbye, Jan 29, 2009
    #9

  10. Schulze Newcomer, in training

    ok i've tried all of what you've said, I completely quit out of PCtools spyware doctor but it still didnt seem to help in anyway, i deleted that file through Hijackthis
    but i did find a way temporarily way to stop the problem by disabling the wireless through network connections.

    I use Linksys WMP300N if that helps in any way.


    Also you said to remove
    but i need this to print because the printer in shared between our network through the router, not through another computer.

    Thanks
    Schulze, Jan 29, 2009
    #10

  11. Bobbye Helper on the Fringe

    Well that puts us back to this entry:
    Keyspan USB Server Task: what are you using this for?

    Bobbye, Jan 29, 2009
    #11

  12. Schulze Newcomer, in training

    i just edited my last post for that sorry just after u sent that^^
    Schulze, Jan 29, 2009
    #12

  13. Schulze Newcomer, in training

    i need this to print because the printer in shared between our network through the router, not through another computer. (it's a USB print server)
    Schulze, Jan 29, 2009
    #13

  14. Schulze Newcomer, in training

    What do you mean by prepare for system shutdown? do you mean like shutdown but cancel it before it actually shuts down? cos that confused me soz
    Schulze, Jan 29, 2009
    #14

  15. Bobbye Helper on the Fringe

    When you prepare the system for shutdown, you close all open and active Windows, programs and email. But instead of logging off and shutting down, open the Task Manager and see what is consuming the CPU besides the 3 processes I mentioned.

    Print server okay. The URL shows here: C:\Program Files\Keyspan\USB Server\nhciTask.exe. Sorry, I missed this in your programs.
    Bobbye, Jan 29, 2009
    #15

  16. Schulze Newcomer, in training

    I tried that and the programs that where mainly up where google desktop (which went from 0-10), jqs (0-3), isass.exe (0-3)
    Schulze, Jan 29, 2009
    #16

  17. Schulze Newcomer, in training

    Just one other thing, the only way (so far) to fix it is to turn off the wireless connection for this computer, once i do that everything works perfectly (except for the internet/network of course) im gonna try to reinstall network card and drivers and ill get back to you.

    Thankyou for all your help Bobbye i appreciate it alot
    Schulze, Jan 29, 2009
    #17

  18. Bobbye Helper on the Fringe

    Please verify spelling: Very important!

    isass.exe >>> isass.exe is the main component of the backdoor, which is a variant of OptixPro backdoor. (Trojan)
    or
    lsass.exe>>> Local Security Authentication Server. Mine is running, but does not show any CPU usage.

    jqs is the Java quick Start. It is a Service that began with the Java v6u10 update. You can Disable this Service:
    Start> Run> services.msc> right click on Java Quick Start> Properties> Change Startup type to Disabled> Stop the Service.Java uses this for prefetch. It is an unnecessary use of resources and Java works fine without it.

    google desktop >> advise uncheck on Startup.
    click on start->run->type msconfig->click Selective startup-> Startup tab> uncheck googledesktop ->apply->OK.

    Note: on first reboot after unchecking anything o Startup, you will get a nag message that you can ignore and close after checking 'don't show this message again.' stay in Selective Startup.
    Bobbye, Jan 29, 2009
    #18

  19. Schulze Newcomer, in training


    Yea sorry it is lsass.exe and not isass.exe that I have. Do you have any other ideas on why my system is doing what it's doing? it's somthing to do with the wireless because when i disable that the problem stops.

    Thanks once again
    Schulze, Jan 29, 2009
    #19

  20. Bobbye Helper on the Fringe

    We get that misspelling frequently and we always have to get it verified.

    Yes, the problem is pointing to a bad wireless router! Here's the giveaway:
    Check this problem same n the Linksys Forum. You may be able to apply something done there. If not, use the 'switch to Netgear' suggestion:
    http://forums.linksys.com/linksys/board/message?board.id=Wireless_Adapters&thread.id=9085



    You can try resetting the router if it has that capability. IOf not, think "new."
    Bobbye, Jan 30, 2009
    #20
Page 1 of 2
Thread Status:
Not open for further replies.