Resolved Logs

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 8:51:03 PM, on 9/29/2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v8.00 (8.00.6001.18813) Boot mode: Normal Running processes: C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe C:\Program Files (x86)\Steam\Steam.exe C:\Program Files (x86)\Java\jre6\bin\jusched.exe C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell.exe C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.ex…

Here's my log, thanks in advance for looking it over. ~RA Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 8:51:26 PM, on 9/28/2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18294) Boot mode: Normal Running processes: C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files (x86)\Curse\CurseClient.exe C:\Program Files (x86)\AIM\aim.exe C:\Program Files (x86)\Toshiba\ConfigFree\NDSTray.exe C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.…

My brother went on my laptop and accidentally installed a load of spyware on it. As I don't have a real-time anti-virus/alware running, and only built-in Windows firewall (normally I know whats going in and out of my computer), it spread pretty quickly, but thanks to Tarun's awesome clean up guide, it appears to have soughted out the problem (Malwarebytes, Super anti-spyware and Spybot all say its clean). Anyway, here is the hijackthis log file just to make sure it has a clean bill of health: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:35:44, on 11/09/2009 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18813) Bo…

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:20:36 PM, on 8/23/2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18294) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe C:\Program Files\Launch Manager\LManager.exe C:\Program Files\Synaptics\SynTP\SynTPStart.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE C:\Windows\System32\igfxtray.exe C:\Windows\…

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:55:31, on 17/08/2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18294) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Java\jre1.6.0\bin\jusched.exe C:\Windows\System32\nvraidservice.exe C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe C:\Program Files\McAfee.com\Agent\mcagent.exe C:\Program Files\Dell Support Center\bin\sprtcmd.exe C:\Windows\System32\Ctxfihlp.exe C:\Windows\Sy…

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:14:25 PM, on 8/15/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe C:\Program Files\Java\jre…

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 6:30:05 PM, on 8/3/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\BCMSMMSG.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\ATT-SST\McciTrayApp.exe C:\Program Files\McA…

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:52:18 PM, on 7/27/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Symantec\pcAnywhere\awhost32.exe C:\Program Files\Bonjour\mDNSResponder.exe…

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 8:53:37 AM, on 7/19/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe C:\Program Files\…

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:02:43 AM, on 7/19/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\svchost.…

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:12:18, on 28/06/2009 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Virgin Broadband Wireless\Wireless Manager.exe C:\Pro…

The only program that I can run is HJT (so far). Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 4:48:58 PM, on 6/7/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16827) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe C:\WINDOW…

Hi, I recently had a file appear on my C:\ drive called "driveretimer.txt". I don't know what it is so I'm posting it (see attachments) and my hijackthis log. The only problem that I seen with my system is that I can't open 1 of my programs (Pinnacle Studio 12) and everytime I try to configure Ad-Aware 2008 the settings dont's stay the way that I set them.I have to re-configure it everytime I open it. Is this file causing a problem on my pc? Any info you can provide me with is greatly appreciated. Thanks, Adrian Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 9:11:43 PM, on 6/2/2009 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet E…

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 4:47:41 PM, on 5/27/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16827) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\Program Files\TortoiseSVN\bin\TSVNCache.exe C:\PROGRA~1\Grisoft\AVG7\avgcc.exe C:\P…

Just finished cleaning up my new home PC, please check over to see if there's nothing left to clean. Cheers in advance. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:16:18, on 27/05/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software…

For some unknown reason, my home PC has bene getting really slow recently; slower to boot up, increased freezing here and there (especially MS Office which I have now had to replace wiht OpenOffice), generally slower. I also have avast temporarily uninstalled as that kept throwing up an error (I can't remember what it was), that appeared to be unfixable after carrying out it's instructions on how to fix it. I've done everything as far as I can tell to cure this; checked for spyware with Spybot of which the results were clean, ran CCleaner, also did a registry clean with CCleaner, ran JKDefrag, checked startup entries and services, which all looked clean, but still …

Also captured screenshot of hijackthis error. Will also shortly change AV to avast. Thanks in advance for any help you can offer Tarun. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 8:47:14 AM, on 5/09/09 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16827) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\P…

Hi all,have just finished trying to clean up my system using the advice on lunarsoft wiki cleanup page.My system has started to show 100% cpu usage when using bbc iplayer or youtube or any scanning apps.It's an old system(2001),medion 1.8ghz pg,768 sdram,geforce fx6600,40gig harddrive for opsys and 160gig for media etc.Pc was running fine until week ago,thought it was infected but the suggestions on the cleanup page found nothing and i benchmark tested memory,cpu and gpu,all to no avail.hope you guys can help. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 09:41:31, on 11/05/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.…

This log comes from a colleagues pc. He believes that his OE has been hijacked. He is not much on maintenance. When I ran Ccleaner, it removed over a gig of garbage. Thanks in advance for any assistance you may be able to offer. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 1:56:24 PM, on 05/05/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16827) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe …

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:11:53, on 04/04/2009 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files\Windows Me…

I seem to be struggling to get rid of one particular bad item here: C:\WINDOWS\system32\dmdskre.dll Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 1:41:30 PM, on 3/22/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\COMMON~1\AOL\AC…

How does it look? My computer seems to run a bit slowly sometimes. Anything I should get rid of (please include step by step instructions )? Thanks! Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 5:49:33 PM, on 3/23/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files…

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:17:18, on 24/02/2009 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16809) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\HP\Digital Imaging\bi…

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 7:35:34 PM, on 3/3/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal Running processes: D:\WINDOWS.0\System32\smss.exe D:\WINDOWS.0\system32\winlogon.exe D:\WINDOWS.0\system32\services.exe D:\WINDOWS.0\system32\lsass.exe D:\WINDOWS.0\system32\Ati2evxx.exe D:\WINDOWS.0\system32\svchost.exe D:\WINDOWS.0\System32\svchost.exe D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe D:\Program Files\Alwil Software\Avast4\ashServ.exe D:\WINDOWS.0\system32\Ati2evxx.exe D:\Program Files\Bonjour\mDNSResponder.exe D:\WINDOWS.0\system32\cisvc.exe D:\P…

I am particularly concerned about system 32 missing files. What is that all about please? Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 2:29:39 PM, on 20/02/2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Boot mode: Normal Running processes: C:\Program Files\ltmoh\ltmoh.exe C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files (x86)\Java\jre6\bin\jusched.exe C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe C:\Windows\Samsung\PanelMgr\SSMMgr.exe C:\Program Files (x86)\AVG\AVG8\avgt…