TechSpot

Hijackthis Log

By Schulze
Jan 28, 2009
  1. Im having some problem with my computers performance. Im not sure if it's a virus, i think it may be a hardware problem but ill post the log so i can narrow down the possibilities
     
  2. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    Moderator: Please remove the pasted log.
     
  3. Schulze

    Schulze TS Rookie Topic Starter Posts: 18

    i remove the pasted log^^
     
  4. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    Thank you> I wasn't sure you'd be able to if I had a reply after your post. We prefer the logs to be attached, and when they are, there is no need to paste them also.

    Please be specific about the problems.

    You do not have an antivirus program running- chances are great that you have malware:

    Please follow the Steps in the Virus/Spyware/ Malware Removal HERE.

    Step 1 will give you AV recommendations. After you install an AV program, run a full system scan.

    The current HijackThis log only has two incomplete entries- that is not enough to determine if you have malware. Follow the 8 Steps, run HijackThis again, AFTER Malwarebytes and SuperAntispyware.

    Attach all three logs.
     
  5. Schulze

    Schulze TS Rookie Topic Starter Posts: 18

    Ok the "problems" are that my CPU seems higher than it should be (40% with firefox,thunderbird and msn running) and when im doing things (mainly using web browser or in the menu's of games and not in the actual playing part) the mouse/keyboard lags for like 1second often, but this doesnt happen always. Today it hasnt really been a problem but last night (when i made post) it was Really bad!

    Im using the latest version of PC Tools' Spyware doctor (anti-vir and Spybot)
    I have tried Ccleaner.


    I will try what you said and get back to you :)

    Thanks for help :)
     
  6. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    SpywareDoctor is a high resource user. It does not have an AV program bundled with it.
    Spybot Search & Destroy is a spyware/adware program.
     
  7. Schulze

    Schulze TS Rookie Topic Starter Posts: 18

    hmmm... the title of spyware doctor is "Pc tools Spyware Doctor with antivirus" i can give you screenshot but i doubt that will change much of the problem
     
  8. Schulze

    Schulze TS Rookie Topic Starter Posts: 18

    ok i've done what you said and here are the logs.
     
  9. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    Well, you are one up on me! Sorry, I didn't realize an AV can be included. However, I did read up on it and will make the following comments:
    1. PC Tools Spyware Doctor w/AV v5.5 is "buggy."
    2. PC Tools Spyware Doctor w/AV v6 has bug worked out, but is not related highly for it's AV coverage.
    In fact, the AV is rated #16 out of 18 AV programs.

    If you can identify the processes that have high CPU usage, you might find they belong to PCTools:
    C:\Program Files\Spyware Doctor\pctsAuxs.exe>> anti-malware program.
    C:\Program Files\Spyware Doctor\pctsSvc.exe>> comment from user:
    Reply to comment:
    Additional comment:
    C:\Program Files\Spyware Doctor\
    Reset Cookies:
    Update Adobe:
    WoWEmuHacker5.exe
    These 2 entries in the HijackThis log can be checked for removal:
    If the performance problem persist:
    Prepare the system for shutdown but don't shut down. Instead, right click on Taskbar> Task Manager> Processes tab> click twice on frame above CPU column to sort.

    the only CPU use you should see now are taskmgr, System and System Idle. There should add up to 100% of the CPU. Any other processes over 1-2 are the problem. Identify them and take off of Startup.
     
  10. Schulze

    Schulze TS Rookie Topic Starter Posts: 18

    ok i've tried all of what you've said, I completely quit out of PCtools spyware doctor but it still didnt seem to help in anyway, i deleted that file through Hijackthis
    but i did find a way temporarily way to stop the problem by disabling the wireless through network connections.

    I use Linksys WMP300N if that helps in any way.


    Also you said to remove
    but i need this to print because the printer in shared between our network through the router, not through another computer.

    Thanks
     
  11. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    Well that puts us back to this entry:
    Keyspan USB Server Task: what are you using this for?

     
  12. Schulze

    Schulze TS Rookie Topic Starter Posts: 18

    i just edited my last post for that sorry just after u sent that^^
     
  13. Schulze

    Schulze TS Rookie Topic Starter Posts: 18

    i need this to print because the printer in shared between our network through the router, not through another computer. (it's a USB print server)
     
  14. Schulze

    Schulze TS Rookie Topic Starter Posts: 18

    What do you mean by prepare for system shutdown? do you mean like shutdown but cancel it before it actually shuts down? cos that confused me soz
     
  15. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    When you prepare the system for shutdown, you close all open and active Windows, programs and email. But instead of logging off and shutting down, open the Task Manager and see what is consuming the CPU besides the 3 processes I mentioned.

    Print server okay. The URL shows here: C:\Program Files\Keyspan\USB Server\nhciTask.exe. Sorry, I missed this in your programs.
     
  16. Schulze

    Schulze TS Rookie Topic Starter Posts: 18

    I tried that and the programs that where mainly up where google desktop (which went from 0-10), jqs (0-3), isass.exe (0-3)
     
  17. Schulze

    Schulze TS Rookie Topic Starter Posts: 18

    Just one other thing, the only way (so far) to fix it is to turn off the wireless connection for this computer, once i do that everything works perfectly (except for the internet/network of course) im gonna try to reinstall network card and drivers and ill get back to you.

    Thankyou for all your help Bobbye i appreciate it alot
     
  18. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    Please verify spelling: Very important!

    isass.exe >>> isass.exe is the main component of the backdoor, which is a variant of OptixPro backdoor. (Trojan)
    or

    lsass.exe>>> Local Security Authentication Server. Mine is running, but does not show any CPU usage.

    jqs is the Java quick Start. It is a Service that began with the Java v6u10 update. You can Disable this Service:
    Start> Run> services.msc> right click on Java Quick Start> Properties> Change Startup type to Disabled> Stop the Service.Java uses this for prefetch. It is an unnecessary use of resources and Java works fine without it.

    google desktop >> advise uncheck on Startup.
    click on start->run->type msconfig->click Selective startup-> Startup tab> uncheck googledesktop ->apply->OK.

    Note: on first reboot after unchecking anything o Startup, you will get a nag message that you can ignore and close after checking 'don't show this message again.' stay in Selective Startup.
     
  19. Schulze

    Schulze TS Rookie Topic Starter Posts: 18


    Yea sorry it is lsass.exe and not isass.exe that I have. Do you have any other ideas on why my system is doing what it's doing? it's somthing to do with the wireless because when i disable that the problem stops.

    Thanks once again
     
  20. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    We get that misspelling frequently and we always have to get it verified.

    Yes, the problem is pointing to a bad wireless router! Here's the giveaway:
    Check this problem same n the Linksys Forum. You may be able to apply something done there. If not, use the 'switch to Netgear' suggestion:
    http://forums.linksys.com/linksys/board/message?board.id=Wireless_Adapters&thread.id=9085



    You can try resetting the router if it has that capability. IOf not, think "new."
     
  21. Schulze

    Schulze TS Rookie Topic Starter Posts: 18

    You mean adapter right? not router. But anyways my adapter is like brand new and i dont really wanna go get a new one. But i do have like 5 other adapter lying around that i can try, ill look on linksys forums and see what i can find

    Thanks:)
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...