TechSpot

My computer is running very slowly and i am trying to clear off all desruptive files

By jrad
Jun 28, 2006
Topic Status:
Not open for further replies.
  1. Hijack log is attached
  2. paranoid guy

    paranoid guy Newcomer, in training Posts: 459

    Yup, you have a few nasties there, but there are no hjt logs allowed in this forum...
    You need to go here: http://www.techspot.com/vb/topic50981.html
    and follow all the instructions, then post a new hjt log as an attachment.
    Post a new hjt log, only after following all the instructions in that thread.
    You also need to move hjt into its own folder (e.g. c:\HJT)
    btw welcome to techspot :wave:
  3. howard_hopkinso

    howard_hopkinso Newcomer, in training Posts: 25,948   +19

    Hello and welcome to Techspot.

    Follow the instructions exactly in the link provided by paranoid guy.

    Then, post a fresh HJT log into this thread, only after doing the above.

    I have moved this thread to our security and the web forum.

    Regards Howard :wave: :wave:
  4. jrad

    jrad Newcomer, in training Topic Starter

    i think i did what u asked but im not completely sure
  5. howard_hopkinso

    howard_hopkinso Newcomer, in training Posts: 25,948   +19

    Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

    Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

    In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

    Go to add remove programmes in your control panel and uninstall anything to do with(if there).

    RXToolBar
    Spyware Cleaner
    Save
    AWS\WeatherBug
    Viewpoint\Viewpoint Manager

    Close control panel.

    Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

    Click on the processes tab and end process for(if there).

    Save.exe
    SpywareCleaner.Exe
    Weather.exe
    ViewMgr.exe

    Close task manager.

    Run HJT with no other programmes open(except notepad). Have HJT fix the following, by placing a tick in the little box next to(if there).

    R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll

    F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe

    O2 - BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\Program Files\RXToolBar\sfcont.dll (file missing)

    O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe

    O4 - HKLM\..\Run: [SM1BG] C:\WINDOWS\SM1BG.EXE

    O4 - HKCU\..\Run: [Spyware Cleaner] "C:\Program Files\Spyware Cleaner\SpywareCleaner.Exe" /boot

    O4 - HKCU\..\Run: [WhenUSave] "C:\Program Files\Save\Save.exe"

    O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 3.0\resources\en-US\local\search.html

    O8 - Extra context menu item: &Search - http://kl.bar.need2find.com/KL/menusearch.html?p=KL

    O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll

    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe (file missing)

    O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)

    Fix all 016-DPF entries.

    O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\Program Files\RXToolBar\sfcont.dll

    O20 - Winlogon Notify: awtsq - C:\WINDOWS\System32\awtsq.dll (file missing)

    Click on the fix checked button.

    Close HJT.

    Locate and delete the following bold files and/or directories(if there).

    C:\Program Files\RXToolBar
    C:\Program Files\AWS\WeatherBug
    C:\Program Files\Save
    C:\Program Files\Spyware Cleaner
    C:\Program Files\Viewpoint

    Reboot into normal mode and turn system restore back on.

    Post a fresh HJT log.


    Regards Howard :)
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.