Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

HJT Log Need Help. -Kemistry-


  • This topic is locked This topic is locked
15 replies to this topic

#1 -Kemistry-

-Kemistry-

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:08:32 AM

Posted 10 January 2005 - 01:45 PM

hi my system has been slowing down since 01/01/05 i dont know why or what is causing this problem programmes have been taking a longer time to open than usual i ran a virus check with Norton also ran Ad-Aware and Spy Bot S&D and got rid of a few items but my pc still remains the same with the main problem i didnt not need to use the 1.98.2 version of HJT
here is my log below ANY help would be greatly appreciated thanks in advanced.
regards -Kemistry-


Logfile of HijackThis v1.99.0
Scan saved at 2:30:33 PM, on 1/10/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
E:\Program Files\Common Files\Symantec Shared\ccApp.exe
E:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
E:\Program Files\Creative\ShareDLL\CtNotify.exe
E:\Program Files\Norton Personal Firewall\IAMAPP.EXE
E:\Program Files\MSN Messenger\msnmsgr.exe
E:\Program Files\Creative\ShareDLL\MediaDet.Exe
E:\WINDOWS\System32\CTSvcCDA.exe
E:\Program Files\Norton AntiVirus\navapsvc.exe
E:\Program Files\Norton Personal Firewall\NISUM.EXE
E:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
E:\WINDOWS\System32\tcpsvcs.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\Norton Personal Firewall\NISSERV.EXE
E:\Program Files\Norton Personal Firewall\SymProxySvc.exe
E:\Program Files\Internet Explorer\iexplore.exe
E:\Program Files\Internet Explorer\iexplore.exe
E:\Program Files\Digital Asphyxia\Y!TunnelPro V1.3 Build 264\YTunnelPro.exe
F:\FUCINY~1\MESSEN~1\ypager.exe
E:\WINDOWS\explorer.exe
E:\hijackthis\HijackThis.exe
E:\Program Files\Messenger\msmsgs.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.com/old
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - F:\SPYBOT~2\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - E:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "E:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "E:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] E:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [NeroCheck] E:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMS] E:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] E:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] E:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [Disc Detector] E:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [iamapp] E:\Program Files\Norton Personal Firewall\IAMAPP.EXE
O4 - HKLM\..\RunServices: [Windows Registry Scan] timeupdate.exe
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] E:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKCU\..\Run: [msnmsgr] "E:\Program Files\MSN Messenger\msnmsgr.exe" /background
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - F:\AIM95\aim.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\FUCINY~1\MESSEN~1\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\FUCINY~1\MESSEN~1\YPAGER.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: E:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: GraphicalChat Application - http://www.onchat.com/ChatWorld/chat-signed-ie.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha...t/c381/chat.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pote_x.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/ac...ta/SymAData.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/ac.../ActiveData.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{FE5173A0-FFB5-48FC-BB08-ACDB1605F128}: NameServer = 196.3.132.1 196.3.132.4
O23 - Service: Symantec Event Manager - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - E:\WINDOWS\System32\CTSvcCDA.exe
O23 - Service: Norton AntiVirus Auto Protect Service - Symantec Corporation - E:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Personal Firewall Service - Symantec Corporation - E:\Program Files\Norton Personal Firewall\NISSERV.EXE
O23 - Service: Norton Personal Firewall Accounts Manager - Symantec Corporation - E:\Program Files\Norton Personal Firewall\NISUM.EXE
O23 - Service: Norton Unerase Protection - Symantec Corporation - E:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: ScriptBlocking Service - Symantec Corporation - E:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Norton Personal Firewall Proxy Service - Symantec Corporation - E:\Program Files\Norton Personal Firewall\SymProxySvc.exe
Facial Expressions...........................Leaves Impressions.

BC AdBot (Login to Remove)

 


#2 Buckeye_Sam

Buckeye_Sam

    Malware Expert


  • Members
  • 17,382 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pickerington, Ohio
  • Local time:08:32 AM

Posted 10 January 2005 - 09:39 PM

Place a checkmark next to these entries, close all browsers and windows, and have HijackThis fix them by clicking Fix Checked:

O4 - HKLM\..\RunServices: [Windows Registry Scan] timeupdate.exe

Find this file on your computer and delete it.

timeupdate.exe

Reboot and get an online virus scan at this site.

http://nl.trendmicro-europe.com/smb/products/housecall.php


Please post a new hijackthis log and let me know if things have improved.
Posted Image If I have helped you in any way, please consider a donation to help me continue the fight against malware.


Failing to respond back to the person that is giving up their own time to help you not only is insensitive and disrespectful, but it guarantees that you will never receive help from me again. Please thank your helpers and there will always be help here when you need it!


========================================================

#3 -Kemistry-

-Kemistry-
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:08:32 AM

Posted 11 January 2005 - 07:42 AM

:flowers: :thumbsup:

ok i did a search for

O4 - HKLM\..\RunServices: [Windows Registry Scan] timeupdate.exe

i could not find where to delete it doing a search on my computer
should i remove it using HJT?

also i did the scan on house call and found

BAT SASSER .A Non Cleanable E:\Windows\system32\cmd.ftp

i am not sure if to just delete it from house call it self

can you offer any advice on what steps i should take?

thanks in advanced

here is my new Log below

regards -Kemistry-



Logfile of HijackThis v1.99.0
Scan saved at 8:24:55 AM, on 1/11/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
E:\Program Files\Common Files\Symantec Shared\ccApp.exe
E:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
E:\Program Files\Creative\ShareDLL\CtNotify.exe
E:\Program Files\Norton Personal Firewall\IAMAPP.EXE
E:\Program Files\Creative\ShareDLL\MediaDet.Exe
E:\WINDOWS\System32\CTSvcCDA.exe
E:\Program Files\Norton AntiVirus\navapsvc.exe
E:\Program Files\Norton Personal Firewall\NISUM.EXE
E:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
E:\WINDOWS\System32\tcpsvcs.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\Norton Personal Firewall\SymProxySvc.exe
E:\Program Files\Norton Personal Firewall\NISSERV.EXE
E:\Program Files\Digital Asphyxia\Y!TunnelPro V1.3 Build 264\YTunnelPro.exe
E:\Program Files\Internet Explorer\iexplore.exe
E:\WINDOWS\explorer.exe
F:\FUCIN YAHOO\Messenger\ymsgr_tray.exe
E:\Program Files\Messenger\msmsgs.exe
E:\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.com/old
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - F:\SPYBOT~2\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - E:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "E:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "E:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] E:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [NeroCheck] E:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMS] E:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] E:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] E:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [Disc Detector] E:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [iamapp] E:\Program Files\Norton Personal Firewall\IAMAPP.EXE
O4 - HKLM\..\RunServices: [Windows Registry Scan] timeupdate.exe
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] E:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKCU\..\Run: [msnmsgr] "E:\Program Files\MSN Messenger\msnmsgr.exe" /background
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - F:\AIM95\aim.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\FUCINY~1\MESSEN~1\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\FUCINY~1\MESSEN~1\YPAGER.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: E:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: GraphicalChat Application - http://www.onchat.com/ChatWorld/chat-signed-ie.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha...t/c381/chat.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pote_x.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/ac...ta/SymAData.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/ac.../ActiveData.cab
O23 - Service: Symantec Event Manager - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - E:\WINDOWS\System32\CTSvcCDA.exe
O23 - Service: Norton AntiVirus Auto Protect Service - Symantec Corporation - E:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Personal Firewall Service - Symantec Corporation - E:\Program Files\Norton Personal Firewall\NISSERV.EXE
O23 - Service: Norton Personal Firewall Accounts Manager - Symantec Corporation - E:\Program Files\Norton Personal Firewall\NISUM.EXE
O23 - Service: Norton Unerase Protection - Symantec Corporation - E:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: ScriptBlocking Service - Symantec Corporation - E:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Norton Personal Firewall Proxy Service - Symantec Corporation - E:\Program Files\Norton Personal Firewall\SymProxySvc.exe
Facial Expressions...........................Leaves Impressions.

#4 Buckeye_Sam

Buckeye_Sam

    Malware Expert


  • Members
  • 17,382 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pickerington, Ohio
  • Local time:08:32 AM

Posted 11 January 2005 - 12:34 PM

Download and run Stinger. Let me know if it finds anything.
http://download.nai.com/products/mcafee-avert/stinger.exe


Please make sure that you can view all hidden files. Instructions on how to do this can be found here:

How to see hidden files in Windows

Run Hijackthis again, click scan, and Put a checkmark next to each of these. Then close all other windows--you should only see HijackThis on your Desktop--and click the Fix Checked button.

O4 - HKLM\..\RunServices: [Windows Registry Scan] timeupdate.exe


Reboot your computer into Safe Mode

Then delete these files or directories (Do not be concerned if they do not exist)

timeupdate.exe


Reboot your computer to go back to normal mode and post a new log.
Posted Image If I have helped you in any way, please consider a donation to help me continue the fight against malware.


Failing to respond back to the person that is giving up their own time to help you not only is insensitive and disrespectful, but it guarantees that you will never receive help from me again. Please thank your helpers and there will always be help here when you need it!


========================================================

#5 -Kemistry-

-Kemistry-
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:08:32 AM

Posted 11 January 2005 - 06:19 PM

i think its really amazing and comendable of you guys who help out others
without any kind of financial benifits or profit
i must thank you sam for all your help
but my system seems to be running the same slow pace
as before/during i made my initial post for help :thumbsup: :flowers:
well one good news is that i got the Sasser removed
and i have been trying to get a removal tool for this worm
but came up nil
i dont know what other suggestions or ideas you might have
for me to try i am more than willing to heed your suggestions
again thanks a million sam
regards
-kemistry-

here is my Stinger Log
along with my HJT log below that
have a look.




McAfee AVERT Stinger Version 2.4.7 built on Jan 3 2005

Copyright © 2004 Networks Associates Technology, Inc. All Rights Reserved.

Virus data file v1000 created on Dec 14 2004.

Ready to scan for 47 viruses, trojans and variants.



Scan initiated on Tue Jan 11 17:36:18 2005

E:\WINDOWS\system32\c.bat

Found the W32/Sdbot.bat.b virus !!!

E:\WINDOWS\system32\c.bat has been deleted.

E:\WINDOWS\system32\cmd.ftp

Found the W32/Sasser.worm!ftp virus !!!

E:\WINDOWS\system32\cmd.ftp has been deleted.

Number of clean files: 94802

Number of infected files: 2

Number of files deleted: 2





Logfile of HijackThis v1.99.0
Scan saved at 6:41:06 PM, on 1/11/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\Explorer.EXE
E:\WINDOWS\system32\spoolsv.exe
E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
E:\Program Files\Common Files\Symantec Shared\ccApp.exe
E:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
E:\Program Files\Creative\ShareDLL\CtNotify.exe
E:\Program Files\Norton Personal Firewall\IAMAPP.EXE
E:\Program Files\MSN Messenger\msnmsgr.exe
E:\Program Files\Creative\ShareDLL\MediaDet.Exe
E:\WINDOWS\System32\CTSvcCDA.exe
E:\Program Files\Norton AntiVirus\navapsvc.exe
E:\Program Files\Norton Personal Firewall\NISUM.EXE
E:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
E:\WINDOWS\System32\tcpsvcs.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\Norton Personal Firewall\SymProxySvc.exe
E:\Program Files\Norton Personal Firewall\NISSERV.EXE
E:\Program Files\Messenger\msmsgs.exe
E:\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.com/old
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - F:\SPYBOT~2\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - E:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "E:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "E:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] E:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [NeroCheck] E:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMS] E:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] E:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] E:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [Disc Detector] E:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [iamapp] E:\Program Files\Norton Personal Firewall\IAMAPP.EXE
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] E:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKCU\..\Run: [msnmsgr] "E:\Program Files\MSN Messenger\msnmsgr.exe" /background
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - F:\AIM95\aim.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\FUCINY~1\MESSEN~1\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\FUCINY~1\MESSEN~1\YPAGER.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: E:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: GraphicalChat Application - http://www.onchat.com/ChatWorld/chat-signed-ie.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha...t/c381/chat.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pote_x.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/ac...ta/SymAData.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/ac.../ActiveData.cab
O23 - Service: Symantec Event Manager - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - E:\WINDOWS\System32\CTSvcCDA.exe
O23 - Service: Norton AntiVirus Auto Protect Service - Symantec Corporation - E:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Personal Firewall Service - Symantec Corporation - E:\Program Files\Norton Personal Firewall\NISSERV.EXE
O23 - Service: Norton Personal Firewall Accounts Manager - Symantec Corporation - E:\Program Files\Norton Personal Firewall\NISUM.EXE
O23 - Service: Norton Unerase Protection - Symantec Corporation - E:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: ScriptBlocking Service - Symantec Corporation - E:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Norton Personal Firewall Proxy Service - Symantec Corporation - E:\Program Files\Norton Personal Firewall\SymProxySvc.exe
Facial Expressions...........................Leaves Impressions.

#6 Buckeye_Sam

Buckeye_Sam

    Malware Expert


  • Members
  • 17,382 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pickerington, Ohio
  • Local time:08:32 AM

Posted 11 January 2005 - 08:59 PM

Unfortunately I'm not seeing anything else in your log that we can attack. I am puzzled why your Norton didn't pick up the two viruses that Stinger found.
Do you have any other symptoms other than just a sluggish system?

The only thing I can recommend now is basic maintenance.

Delete temp files

Navigate to the E:\Windows\Temp folder. Open the Temp folder and go to Edit > Select All then Edit > Delete to delete the entire contents of the Temp folder.

Navigate to the E:\Windows\Prefetch folder. Open the Prefetch folder and go to Edit > Select All then Edit > Delete to delete the entire contents of the Prefetch folder.

Go to Start > Run and type %temp% in the Run box. The Temp folder will open. Click Edit > Select All then Edit > Delete to delete the entire contents of the Temp folder.

Finally go to Control Panel > Internet Options. On the General tab under "Temporary Internet Files" Click "Delete Files". Put a check by "Delete Offline Content" and click OK. Click on the Programs tab then click the "Reset Web Settings" button. Click Apply then OK.

Empty the Recycle Bin.


Flush your system restore, this will delete any restore points that you have but it will also make sure that any malware hiding in system restore will be booted off.

Turn off System Restore:

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

Restart your computer, turn it back on and create a restore point.

To create a restore point:

Single-click Start and point to All Programs.
Mouse over Accessories, then System Tools, and select System Restore.
In the System Restore wizard, select the box next the text labeled "Create a
restore point" and click the Next button.

Type a description for your new restore point. Something like "After
cleanup". Click Create and you're done.


Finally run scandisk and defragment your hard drive.


I would also recommend visiting Windows Update and installing any critical updates found for your computer.

http://windowsupdate.microsoft.com/
Posted Image If I have helped you in any way, please consider a donation to help me continue the fight against malware.


Failing to respond back to the person that is giving up their own time to help you not only is insensitive and disrespectful, but it guarantees that you will never receive help from me again. Please thank your helpers and there will always be help here when you need it!


========================================================

#7 -Kemistry-

-Kemistry-
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:08:32 AM

Posted 12 January 2005 - 09:28 AM

well i did what you suggested i cleaned out all the temp files in the different sections
my browser cookies and history was already cleaned
because i used Ccleaner and it cleaned out the resigtry etc.
i kind of noticed a change (for the better) in the performance when i disabled system restore
i dont know if this can be the problem all along when i enabled it back
there wasnt much change so im not sure

a couple symtoms are
i get disconnected from the internet if i open some programmes
or having to much stuff open at the same time
take for instance
on a fresh reboot of the system
say i was to open up "winamp"
the cursor would freese up on the screen if i were to do something else
while winamp is still opening and or while listening to music
i attempt to open a programme the music would break up
some programmes take a much longer time to open up way to long
this never happened before only started on new years day
i mean i have more than enuff "Ram" memory (376mb) and
1.12Ghz processor
so multi tasking was not an issue with my system before
its like a number of processes is running in the background on my system that i dont see
and drasticly slowing down the system
some one esle suggested uninstalling ipv6 in the cmd prompt
but that didnt work so i reinstalled it
i am puzzled about Norton not picking up those viruses also i think stinger is great though
but i really dont know what the problem is some one else told me they are having a similar problem like me and it happened around new years day also
if you have any other ideas or need to know anyother information from/about my system i will be more than happy to provide them for you so i can resolve this issue once and for all

regards
thanks again sam
well here is a fresh copy of my HJT log just for the hell of it



Logfile of HijackThis v1.99.0
Scan saved at 10:21:41 AM, on 1/12/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
E:\WINDOWS\Explorer.EXE
E:\Program Files\Common Files\Symantec Shared\ccApp.exe
E:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
E:\Program Files\Creative\ShareDLL\CtNotify.exe
E:\Program Files\Norton Personal Firewall\IAMAPP.EXE
E:\Program Files\Creative\ShareDLL\MediaDet.Exe
E:\WINDOWS\System32\CTSvcCDA.exe
E:\Program Files\Norton AntiVirus\navapsvc.exe
E:\Program Files\Norton Personal Firewall\NISUM.EXE
E:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
E:\WINDOWS\System32\tcpsvcs.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\Norton Personal Firewall\SymProxySvc.exe
E:\Program Files\Norton Personal Firewall\NISSERV.EXE
E:\Program Files\Winamp3\winamp3.exe
E:\Program Files\Digital Asphyxia\Y!TunnelPro V1.3 Build 264\YTunnelPro.exe
F:\FUCINY~1\MESSEN~1\ypager.exe
E:\Program Files\Internet Explorer\iexplore.exe
E:\Program Files\Messenger\msmsgs.exe
E:\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.com/old
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - F:\SPYBOT~2\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - E:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "E:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "E:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] E:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [NeroCheck] E:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMS] E:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] E:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] E:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [Disc Detector] E:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [iamapp] E:\Program Files\Norton Personal Firewall\IAMAPP.EXE
O4 - HKCU\..\Run: [Symantec NetDriver Monitor] E:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKCU\..\Run: [msnmsgr] "E:\Program Files\MSN Messenger\msnmsgr.exe" /background
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - F:\AIM95\aim.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\FUCINY~1\MESSEN~1\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\FUCINY~1\MESSEN~1\YPAGER.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: E:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: GraphicalChat Application - http://www.onchat.com/ChatWorld/chat-signed-ie.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha...t/c381/chat.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pote_x.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/ac...ta/SymAData.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/ac.../ActiveData.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{FE5173A0-FFB5-48FC-BB08-ACDB1605F128}: NameServer = 196.3.132.1 196.3.132.4
O23 - Service: Symantec Event Manager - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - E:\WINDOWS\System32\CTSvcCDA.exe
O23 - Service: Norton AntiVirus Auto Protect Service - Symantec Corporation - E:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Personal Firewall Service - Symantec Corporation - E:\Program Files\Norton Personal Firewall\NISSERV.EXE
O23 - Service: Norton Personal Firewall Accounts Manager - Symantec Corporation - E:\Program Files\Norton Personal Firewall\NISUM.EXE
O23 - Service: Norton Unerase Protection - Symantec Corporation - E:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: ScriptBlocking Service - Symantec Corporation - E:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service - Symantec Corporation - E:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Norton Personal Firewall Proxy Service - Symantec Corporation - E:\Program Files\Norton Personal Firewall\SymProxySvc.exe
Facial Expressions...........................Leaves Impressions.

#8 Buckeye_Sam

Buckeye_Sam

    Malware Expert


  • Members
  • 17,382 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pickerington, Ohio
  • Local time:08:32 AM

Posted 12 January 2005 - 05:34 PM

I reviewed your log again and found nothing malicious. Why don't you run A2 just to see if it picks anything up. Norton doesn't do a very good job at catching trojans anyways, so this would be good compliment to it.

http://www.emsisoft.com/en/software/free/

It's a free program, but you do have to register in order to download the updates.

One more thing that I would try. You said this all started on Jan 1. Look through the files and folders on your system for something that was installed or showed up around that time. Start with Program Files and maybe Documents and Settings. Look for something with the date of 1/1/05 or later that you don't recognize. Maybe you'll find a clue that we can use.

Just to confirm with you, you've scanned with Norton and done online scans with Housecall, Panda, and Bit Defender. And they've all come up clean, is that correct?

Let me know if A2 turns up anything.
Posted Image If I have helped you in any way, please consider a donation to help me continue the fight against malware.


Failing to respond back to the person that is giving up their own time to help you not only is insensitive and disrespectful, but it guarantees that you will never receive help from me again. Please thank your helpers and there will always be help here when you need it!


========================================================

#9 -Kemistry-

-Kemistry-
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:08:32 AM

Posted 13 January 2005 - 03:03 AM

hm interesting A2 didnt come up with anyting
i did as you suggested and went throught the program files and
i did see someting

E:\Program Files\NetMeeting was modified on the 11th of this month

thing is i havent used netmeeting in a long time and i mean long


and yes i did scans on housecalls and on panda
only results is which i told you about what house call found
that worm and i got rid of it using stinger

i dont know if housecall or panda uses NetMeeting this to do online scans
ok i am puzzled

another thing is that the dates on the stuff in
E:\Program Files\NetMeeting
look kinda weird
because i have only been using windows XP pro only in
2004 and the hdd it is installed on was formatted before
installation

take a look at the contents and dates on the stuff in there
and tell me what you think sam
take note no one uses this PC but me even if some one was to use it
those times are way off which is Highly irregular



below is a screen shot of what is in the folder

thanks so much again for ALL your help.

Attached Files


Facial Expressions...........................Leaves Impressions.

#10 Buckeye_Sam

Buckeye_Sam

    Malware Expert


  • Members
  • 17,382 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pickerington, Ohio
  • Local time:08:32 AM

Posted 13 January 2005 - 03:40 PM

That is odd, but I don't see anything out of place in the screen shot of that directory. As all virus scans and spyware scans are coming up clean I don't think your problem is malware related. I do have a theory and it has partly to do with Norton.

You mentioned that you have 376mb of ram. While that may seem like a lot, it is recommended to have 256mb to run Windows XP alone. Norton has always been known to be a resource hog and you're running the AV and firewall. I wonder if Norton updated it's AV or firewall around Jan 1 and that made the system slow down. I've never been a big fan of Norton for many reasons, so I'm biased. And it's just a theory, but something to think about.

Putting that aside for now, you don't seem to have excessive processes running so the only other place to check is your services. This site is a great resource to show you what each service does on your system and if you can safely disable it. It's for XP SP2, and you're still on SP1, but you should still be able to check out a lot of what you have running and possibly disable some of the unnecessary ones.

http://www.blackviper.com/WinXP/servicecfg.htm
Posted Image If I have helped you in any way, please consider a donation to help me continue the fight against malware.


Failing to respond back to the person that is giving up their own time to help you not only is insensitive and disrespectful, but it guarantees that you will never receive help from me again. Please thank your helpers and there will always be help here when you need it!


========================================================

#11 -Kemistry-

-Kemistry-
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:08:32 AM

Posted 13 January 2005 - 04:01 PM

well i did update Norton AV on Jan 2
only because i started having problems with the PC
and frankly i dont see the point in having Norton if it dont detect Visuses in the first place
can u recommend a better AV instead
i have not been able to do live updates with norton AV or fire wall for some time now the error message is

- LU1861:LiveUpdate has detected a problem with the task scheduling service on your computer. This problem may prevent Automatic LiveUpdate from running -

i dont know if this could be the problem all along
but i have been downloading the updates manually
i dont get it it was running fine all the time hmm
i guess i will try uninstalling norton and see if there is a change but i wont want to get online with out a AV present on my machine
what else do you suggest.

regards
-kemistry-
Facial Expressions...........................Leaves Impressions.

#12 Buckeye_Sam

Buckeye_Sam

    Malware Expert


  • Members
  • 17,382 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pickerington, Ohio
  • Local time:08:32 AM

Posted 13 January 2005 - 04:22 PM

Check out AVG Antivirus. It picks up trojans much better than Norton and uses much less of your computer's resources.

http://www.grisoft.com/us/us_index.php

As far as a firewall, I recommend Zone Alarm.

http://www.zonelabs.com/store/content/comp...kulist_download

Edited by Buckeye_Sam, 13 January 2005 - 04:24 PM.

Posted Image If I have helped you in any way, please consider a donation to help me continue the fight against malware.


Failing to respond back to the person that is giving up their own time to help you not only is insensitive and disrespectful, but it guarantees that you will never receive help from me again. Please thank your helpers and there will always be help here when you need it!


========================================================

#13 -Kemistry-

-Kemistry-
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:08:32 AM

Posted 13 January 2005 - 05:48 PM

quick question which version of AVG should i get ?

the free version or version 6.0 ?
Facial Expressions...........................Leaves Impressions.

#14 Buckeye_Sam

Buckeye_Sam

    Malware Expert


  • Members
  • 17,382 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pickerington, Ohio
  • Local time:08:32 AM

Posted 13 January 2005 - 06:30 PM

I'd recommend the free version 7.0
Posted Image If I have helped you in any way, please consider a donation to help me continue the fight against malware.


Failing to respond back to the person that is giving up their own time to help you not only is insensitive and disrespectful, but it guarantees that you will never receive help from me again. Please thank your helpers and there will always be help here when you need it!


========================================================

#15 -Kemistry-

-Kemistry-
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:08:32 AM

Posted 13 January 2005 - 10:50 PM

sam just to let you know whats going on i uninstalled norton AV but the problem still exist so i had no choice but to install norton 2005 (i was running 2003 before)
in able to come back online
i really am clueless as to what this problem might be
i mean we tried everything
i did multiple scans and turned up wit no viruses
i really think it could be something with the services as you said before could be all running at the same time
i dont want to hog all the attention on this forum also
so i am considering formatting i want to give some one else the chance to get your expert help and advice
but as always if you think we overlooked someting i am open to suggestions to avoid the long process of formatting and reinstalling everything
if you think that you would like to view
the running services when my system starts up i can make a screen shot for you
so let me know
mean time i just want to thank you sincerly for all your help and patience
i really apprciate it all
regards
-kemistry-
Facial Expressions...........................Leaves Impressions.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users