HJT 1.99 log file of parents comp. Any help?

[znikotine]

Parents comps hijack this file. they are pretty superstitious any problems?

 

[Vigilante]

You are clean dude. But it doesn't seem like that is the whole log. Did you take anything out?

Anyway, most people get their networking info from DHCP, so static name servers are not usually needed:

O17 - HKLM\System\CCS\Services\Tcpip\..\{0835B0FF-2FEF-46F3-9BBC-7D69003C33D8}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{0835B0FF-2FEF-46F3-9BBC-7D69003C33D8}: NameServer = 192.168.1.1

However, this shouldn't cause any issues unless you are having problems going to any web sites.

So then, what is your problem? If any?

 

[Peddant]

Is their computer doing anything to justify their suspicions.Popups,slow browsing,page redirects etc ?

 

[znikotine]

Yhes it runs slow , it changes the browser text size norton pops up and says sime kinda trojan is on the comp and i have to click ok like four times. they also believe fire fox is horrible so its hard to work with em

 

[Vigilante]

Does norton give you any details as to the name or path of the trojan? Like the actual virus name, or filename or what folder it's in? That would be helpful. If you can write that down, then go into Safe Mode and delete it.

As for running slow, open up task manager (ctrl-alt-del) and click the Processes tab. Then click the "CPU" column header to sort by CPU usage. You probably have to click it twice to get high-cpu using progs on top. "System Idle Process" should be taking in the 90 percentile for most of the time. Watch the top of this list and see what programs are using the most CPU.
Then click the Performance tab. Watch the CPU usage graph. Does it hover pretty low? Or is it at the top?
This should help find out if any programs are using up to much CPU. If so, try ending task on the bad process to see if it goes back to normal.

Next I would run an online scan from housecall.trendmicro.com or www.bitdefender.com. See if they find anything. And then run updated scan with adaware and spybot.

good luck

 

[znikotine]

ll try ith thanks for all the help