ctrl+shift+delete not workin

[momok]

Hi,

Your log is clean. However fix the following entry if you do not recognise the domain:
O17 - HKLM\System\CCS\Services\Tcpip\..\{BF861CAB-E76C-4F64-81E3-87AA9FFFF425}: NameServer = 205.188.146.145

May I suggest that you read this thread here on how to speed up your system.


Regards,
Your friendly Momok =)

This thread is for the use of bobby123 only. Please don't post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[bobby123]

Momok I have no idea by what you mean by domain. By the way when I go into my computer, I tried to kinda compress c drive, now its in the colour blue and I don't know if thats having an effect. Can you tell me how to get rid of the blue.

 

[momok]

Hi,

I've checked around and that IP (the 205.188.146.145 number) is linked to AOL. That is normal for you as you are using AOL software.

Could you elaborate on the blue? I am not quite sure what you mean.. (Default colours for XP are blue, no?)


Regards,
Your friendly Momok =)

This thread is for the use of bobby123 only. Please don't post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[bobby123]

What I mean is hard drive is in colour blue, I will put a screen shot up later

 

[howard_hopkinso]

Right click on the drive and select properties. Untick "Compress drive to save disk space" Reboot your system.

Regards Howard

 

[bobby123]

cheers. Its gone of blue.

Need your advice on this.

anyone, my pc is running very poorly

 

[bobby123]

Momok any ideas on my screenshot, looks like c drive is dirty.

 

[momok]

Hi,

I'm not quite sure about chkdsk functions. If you find your system running slowly, it is most likely either due to:

a) malware infection

b) unnecessary services/processes running

c) a buggy update that causes svchost.exe to take up 99% of resources

I can help you on the above, if you wish.


Regards,
Your friendly momok =)

This thread is for the use of bobby123 only. Please don't post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[bobby123]

yes please momok I am lost on what do I think theres malware still, I did rootkit avg thing and it found nothing. Plus yesterday avg antispyware kept giving me tons of messages saying theres viruses.

 

[momok]

Hi,

Please run your AVG scan and quarantine any infections. Save a log of the report and attach it in your next reply.

Please also post fresh HijackThis and Combofix logs as attachments into this thread.


Regards,
Your friendly momok =)

This thread is for the use of bobby123 only. Please don't post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[bobby123]

I already have done that before though. All I want to know is what that screeshot shows and why is my hard drive deleting entries.

 

[momok]

Hi,

Is that your system running by itself? If so, all the more I would need to see the logs as obviously something is automating that.

If you had run chckdsk yourself, like I said earlier, it is out of the scope of my knowledge and I will not be able to help you on that.

Do post your logs if it is the former.


Regards,
Your friendly momok =)

This thread is for the use of bobby123 only. Please don't post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[bobby123]

My PC IS INFECTED AND I CANT GET ACESS!!!!!

I have got a log file which has got rid of trojan but theres still loads of files I cant get access to. I cant seem to be able to put the log file as its too big. What shall I do?


File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337939.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337940.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337941.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337942.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337943.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337944.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337945.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337946.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337947.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337948.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337949.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337950.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337951.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337952.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337953.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337954.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337955.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337956.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337957.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337958.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337959.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337960.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337961.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337962.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337963.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337964.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337965.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337966.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337967.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337968.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337969.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337970.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337971.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337972.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337973.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337974.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337975.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337976.exe Error 0xC0000022 {Access Denied}
File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP625\A0337

 

[howard_hopkinso]

Threads merged.

All those files are in your system rerstore points and that`s why you can`t access them.

Turn off system restore.(XP/ME only) See how HERE.

Now, turn system restore back on. This will have deleted all your old restore points and any nasties that are in them. It will also have created a new, clean restore point.

Regards Howard

This thread is for the use of bobby123 only. Please don't post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[bobby123]

Thank god you re on howard. Did the system restore. Still got this crap problem though.

 

[howard_hopkinso]

Open Mycomputer and right click on your hard drive, select properties/tools. Under Error checking click the Check now button. Tick the box that says "Automatically fix file system errors", also tick the box that says "Scan for and attempt recovery of bad sectors" Click the start button, you will receive a message saying the the volume is in use, would you like to schedule a checkdisk to run the next time your start your computer? Click yes/ok etc.

Restart your computer and Checkdisk should run automatically. Please be patient as this can take quite some time depending on the size of your hard drive.

See if that helps.

Regards Howard

This thread is for the use of bobby123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[bobby123]

you are a legend. A god of lancashire.

 

[howard_hopkinso]

I wouldn`t go quite that far lol. Besides, I don`t know if it`s going to solve your problem or not yet.

Regards Howard

This thread is for the use of bobby123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[bobby123]

haha well it is your birthday so a bit of banter is never bad. Anyway I will tell you how its gone, I need to sort this out and get back to revision. This virus nonense has killed my pc for ages now.

Done all the c drive stuff now howard. It said the volume is clean at the end. Doing the defragment now. Is there anything more I need to do. System is still slightly slow.

 

[howard_hopkinso]

Once you`ve finished the defrag, post fresh HJT, Combofix and AVG Antispyware logs. We`ll then check to see if your system is clean.

Regards Howard

This thread is for the use of bobby123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[bobby123]

I think svnhocst is using up a lot of memory. I got rid of it as you told me to firstly but its obviously still here man. What shall I do?

 

[howard_hopkinso]

The svchost.exe file I had you delete was a trojan. The rest of your svchost.exe files are legit and are needed to run your system. It`s quite normal to have multiple instances of svchost.exe running on your system.

From your sreenshot, it appears that only 2% of your cpu is being used. This is absolutely nothing to worry about and is in fact rather good. However, 67 processes is a lot and is probably the reason your system is slow. You should go and read this thread HERE and see if it helps to speed up your system.

You can do a search of your system for svchost.exe any occurrence you find in C:\windows\system32 or C:\windows\prefetch are perfectly legit.

Once I`ve seen your logfiles, I should be able to tell you if your system is clean or not.

Regards Howard

This thread is for the use of bobby123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[bobby123]

How do I know which processes are useless?

 

[howard_hopkinso]

Once you`ve posted the logfiles I requested. I`ll try and help you to stop any unnecessary stuff from running on startup. In the meantime, you should uninstall anything you don`t want or need from add remove programmes in your control panel.

The more things you have running, the slower your system will be.

So, to recap, this is what you should do.

Finish the defrag, then go and read this thread HERE. Then, uninstall any programmes you don`t want or need.

Finally, post fresh HJT, Combofix and AVG Antispyware logs.

Regards Howard

This thread is for the use of bobby123 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[bobby123]

Done all the scans phew been some work fixing this pc. Anyway can you tell me what to do next.

done scans