Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Very Slow Gateway Laptop


  • Please log in to reply
4 replies to this topic

#1 traveler25

traveler25

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:San Antonio, TX
  • Local time:01:58 PM

Posted 08 December 2005 - 11:53 AM

Hello

I am working on a friends laptop. It is very slow, she is running windows XP. When you go to shutdown or restart the same files keep popping up as not responding and you have to end task for each one. If you bring up the Task Manager here you will also see the same files with a status of not responding. She has Microsoft Antispyware installed but it does not respond when you double click on it. The following is a list of files that are listed as not responding.
gcasServ.exe msxolk.exe mmf_ic.exe kltamx.exe rtcses.exe mksmcl.exe msxolk.exe mmf_ic.exe kltamx.exe rtcses.exe mksmcl.exe hh.exe hh.exe cloudsim.exe cloudsim.exe
I don't know if you all look at hijack this logs here on this forum any help would be greatly appreciated.
Thanks Marcos

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,051 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:01:58 PM

Posted 08 December 2005 - 01:27 PM

Yes the HJT team staff does an excellent job here. But first I suggest you read and follow all instructions in the pinned topic titled "Preparation Guide For Use Before Posting A Hijackthis Log" found here.

When you have done that, post a log here for assistance by the experts.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 traveler25

traveler25
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:San Antonio, TX
  • Local time:01:58 PM

Posted 08 December 2005 - 11:10 PM

Hello everybody!

Okay, I tried installing Hijack but the PC wouldn't let me. Tried installing other software but no go, i.e. norton system works, maxmem, bazooka.
Also any software that required a reboot would not go through. Other files that came up as not responding were cookrsrc.exe and rpctime.exe. Programs that I pulled of the startup menu and placed thier icons on the desktop were mywebsearch email plugin and kleenvalue. Finally I was able to install Trend Micro's AntiSpyware 3.0 This did not require a reboot and I was able to run it. WOWSA it found 839 objects, 239 just in the registry. Deleted them and rebooted. Then the laptop did not turn back on, Oh No!
But alas I forgot I still had a floppy inserted that I copied the TM AS log onto.
So I pulled it out and rebooted again. System came up and the Microsoft Antispyware was working, so was the Computer Associates EZ ARMOR that comes with SBC DSL, so much for those antispyware programs, but will run both now that they are able to work. Also the Trend Micro program caught some programs that were trying to reinstall in the startup again, but I denied these applications, hopefully they are not needed by XP. The files that tried to reinstall are listed as follows, have no idea what they are.
Registry (HKU): C:\Winnt\system32\ineasv.exe
" " " " " \ineasv.exe again
" " " " " \rtcses.exe
" " " " " \mmf_ic.exe
" " " " " \ineasr.exe for the 3rd time
and under the I.E. Plugins that was trying to reinstall was this one
C:\Program Files\E2G\IeBHOs.dll
to which I instructed Trend Micro to also deny.
After I run Microsoft AntiSpyware and Computer Associates EZ Armor I will try to run Hijack This and post the results here later on. Again any help would be greatly appreciated.
P.S. I forgot to mention on the original post that the HardDrive light was conitnually on.
Also another program that was not responding that I had to keep clicking on "End Program" about 3 or 4 times was "cloudsim.exe"
Thanks Marcos

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,051 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:01:58 PM

Posted 09 December 2005 - 06:17 AM

IeBHOs.dll is Spyware.e2give

There is no info on these so they are most likely all malware related.
ineasv.exe
rtcses.exe
mmf_ic.exe
ineasr.exe

Try to Download and scan with Ewido Security Suite v3.5
Ewido Install and Scan Instructions for normal and safe mode.

If you are trying to download and install an .exe version of Hijackthis, then try using a zipped version from here: http://www.merijn.org/downloads.html
Scroll down to "Official downloads"
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:02:58 PM

Posted 09 December 2005 - 09:45 AM

Run the security programs in Safe Mode - sometimes this "kludge" will work if the virus writers weren't very smart! :thumbsup:

Also, if you're able to get online, try a couple of these free, online scans:
http://housecall.trendmicro.com/ - *For Internet Explorer*
http://uk.trendmicro-europe.com/consumer/h...call_launch.php - *For Firefox*
http://www.kaspersky.com/scanforvirus
http://safety.live.com/site/en-US/default.htm
http://security.symantec.com/sscv6/default...id=ie&venid=sym
http://www.bitdefender.com/scan8/ie.html
http://www.pandasoftware.com/products/activescan.htm
http://onlinescan.avast.com/
http://support.f-secure.com/ols/start.html
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

Trojan scans:
http://scan.sygatetech.com/pretrojanscan.html
http://www.windowsecurity.com/trojanscan/trojanscan.asp

Sometimes, with viruses (?virii?) the cure is more damaging than the infection. That's because the hackers designed it to cripple your system if you tried to remove it (thinking that you'd give up and let their crap run).

Still, what one person has done, another person can figure it out and counter.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users