Darrell, I got the pasted log in my email feedback. You don't have to run it again and attach this time.
Edit to complete.
Okay Darrel, need tor remove some entries: I'm setting this up in section so you know what they are:
DO NOT click on FIX Checked until all entries have been checked
Remove bad HijackThis entries
• Run HijackThis
• Click on the System Scan Only button
• Put a check beside all of the items listed below (if present):
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch =
http://dnl.crawler.com/support/sa_customize.aspx?TbId=66028
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
http://dnl.crawler.com/support/sa_customize.aspx?TbId=66028
R3 - URLSearchHook: (no name) - ~CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O4 - HKLM\..\RunOnce: [ScrnShot] command /c del C:\WINDOWS\TEMP\~Unscrn.exe
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
Since you're asking us here, you likely don't need the following. Maybe you used the feature at one time, but it's still loading on the system, so check both entries:
C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O20 - Winlogon Notify: GoToAssist - >> remote assist
The following entries are all related to the Logitech QuickCam Check the all. Take the processes off of startup, set the Service to Manual
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
The following entries are for the Lexmark Printer. Check them all. Launch the printer manually if and when you need it:
Lexmark Printer:
C:\WINDOWS\system32\lxcrcoms.exe
O2 - BHO: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O3 - Toolbar: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O16 - DPF: {C52439A0-2693-4E40-B141-9F9AD5257241} (Lexmark eDiagnostics Class) -
https://ediagnostics.lexmark.com/serval.cab
• Close all open windows and browsers/email, etc...
• Click on the
"Fix Checked" button
• When completed, boot into Safe Mode:
Start> Run> services.msc> right click on each of the following> Properties> change Startup type as mentioned:
Change GoToAssist to Disabled
Change LVCOMSer to Manual
Change lxcrcoms.exe to Manual
The following should be UNCHECKED on the Startup menu. Some we discussed previously:
Start> Run> msconfig> enter> Selective Startup> Startup menu> UNCHECK the following>
ALL processes for the Lexmark printer
ALL process for LogiShrd
ALL Crawler entries
ALL QuickCam entries
ALL other processes we discussed previously- EXCEPT the Comodo entries.
Open IE> Tools> Manage add-ons> find and highlight the following:
Lexmark eDiagnostics> Disable
Verify the location of this file:
O20 - AppInit_DLLs: c:\windows\system32\
ntmssvck.dll,>> removable storage manager: verify location using Windows Explorer:>
Right click on Start> Explore> Windows> system 32> If
ntmssvc.exe is listed on the right, okay. If it is NOT, it need to be removed in HijackThis
Boot into Normal Mode when through. NOTE: you will get a nag message that you can ignore and close after checking 'don't show this message again.' Stay in Selective Startup.
Don't get confused: you CHECK an entry in the HijackThis log to remove. You UNCHECK an entry on the Startup menu to start start on boot.
Let me know how this goes. You should experience some speed up. We will then go to the next step.