Spyware Warrior

walkerr · Posted: Wed Sep 08, 2004 9:53 am Post subject: whats wrong with my computer

Hey,
my computer has just been running really funny lately. It will not burn a cd anymore...despite me trying with several different burner programs. It often gets locked up trying to open things and says that it can't find a dll file or that its had an error and has to close. Overall, its running much slower than it used to. I have plenty of memory and hard drive space so i don't know believe thats the problem. I've ran adaware and it finds a few random things every now and then but nothing i thought was major. What can i do? do i have a virus?

TeMerc · Posted: Wed Sep 08, 2004 10:26 am Post subject:

Hi walker, welcome to the forums. As you ahve AdAware, I suggest you DL Spybot v 1.3
DL, check for updates and quarantine all that's found.

If, you have already run AdAware & Spybot Search & Destroy, with updated definitions, and are still having problems, next, we move onto HiJackThis v:1.98.2

DL, and follow these instructions, exactly, for proper HJT installation. Please place HJT into ITS OWN FOLDER.
You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HJT. (C:\HJT\HijackThis.exe)Move HijackThis.exe into this folder. When you run HijackThis from C:\HJT folder and have it "Fixed checked" it will create a backup file of modifications to use if restore is necessary which is easily accessible.
Run the program, and press Scan. You will notice the Scan button will turn into a "Save Log" button. Save the log and Post that log into this topic. DO NOT DELETE or modify anything yet, as some of it is needed to keep your system in good shape.

Someone will be along to look at your log soon as possible, we appreciate your patience. Remember, we are ALL VOLUNTEERS, those of us who help. And we do the best we can to answer posts as soon as we can.
_________________

Ultimate Countermeasures Page
Calendar Of Updates
Malware Advisor Blog

walkerr · Posted: Wed Sep 08, 2004 11:47 am Post subject:

Here is the hi jack this log:

Logfile of HijackThis v1.97.7
Scan saved at 3:46:45 PM, on 9/8/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\crypserv.exe
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\WINDOWS\System32\NWTRAY.EXE
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.clemson.edu/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: hp toolkit - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\HP\EXPLOREBAR\HPTOOLKT.DLL
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [NWTRAY] NWTRAY.EXE
O4 - HKLM\..\Run: [mmtask] C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: AIM (HKLM)
O12 - Plugin for .mp3: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll
O12 - Plugin for .mp4: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll
O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20030530/qtinstall.info.apple.com/bonnie/us/win/QuickTimeInstaller.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

TeMerc · Posted: Wed Sep 08, 2004 9:28 pm Post subject:

Hi walker,welcome to the forums. Well I don't see anything in your log indicating malware at all.

What sort of error we're you getting? If you can write it down or copy it, that would be helpful.
_________________

Ultimate Countermeasures Page
Calendar Of Updates
Malware Advisor Blog

walkerr · Posted: Thu Sep 09, 2004 4:50 am Post subject:

Its not that i am getting a specific error message every time. When it won't burn a cd it says its a buffer underun error. But I've also noticed that it won't delete a program from add/remove programs..it locks up in the process. Also, I usually leave my computer on at night and sometimes lately when i get up in the morning it will be really hot..like it ran hard all night. And I have just noticed that speed and performance overall have slowed down..so i just wondered if you had any ideas.
thanks

Walker

TeMerc · Posted: Thu Sep 09, 2004 7:14 am Post subject:

Whatever the problem is its not related to malware, I'll move this post to the 'General Software' board, maybe you can find help there.
_________________

Ultimate Countermeasures Page
Calendar Of Updates
Malware Advisor Blog

wawadave · Posted: Thu Sep 09, 2004 8:03 am Post subject:

hello
try these!
a² Free is also a good malware cleaner and can be downloaded from: http://www.emsisoft.com/en/software/download/?

Then update your virus scanner and scan your system again or use one of these free on-line scanners (note some spyware has been known to disable PC based AV scanners):
http://housecall.trendmicro.com or http://www.pandasoftware.com/activescan/com/activescan_principal.htm.
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd