I hate to sound dumber than I am but I'm afraid anyone reading this may have to put up with my impoverished technical vocabulary.I'm using an HP a1040n PC with Windows XP Home OS.Lately its speed has abruptly slowed. And on some pages I have to click the back button on the browser twice (or more) in order to return to the previous page.Spybot, AdAware, and Registry Mechanic find nothing wrong but their scans don't solve the problem.I downloaded Hijackthis, ran a scan, and saved a log, which I will attach if there's space. Does any of this look abnormal to anyone? I can't tell. I may be overlooking some simple hijack program that everyone else knows about, but I'm loathe to delete anything because I frankly don't know what's what. Thanks in advance. Logfile of HijackThis v1.99.1Scan saved at 1:25:57 AM, on 1/2/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0011)Running processes:C:WINDOWSSystem32smss.exeC:WINDOWSsystem32winlogon.exeC:WINDOWSsystem32services.exeC:WINDOWSsystem32lsass.exeC:WINDOWSsystem32svchost.exeC:WINDOWSSystem32svchost.exeC:WINDOWSsystem32spoolsv.exeC:WINDOWSExplorer.EXEC:Program FilesWebrootSpy SweeperSpySweeper.exeC:Program FilesLexmark P910 Serieslxbymon.exeC:Program FilesMcAfeeMSKMskAgent.exeC:Program FilesMcafeeMWLMWLGui.exeC:Program FilesDAPDAP.EXEC:Program FilesProxyconnPxUi.exeC:Program FilesDAPDAP.EXEC:Program FilesSiteAdvisor4608SiteAdv.exeC:Program FilesYahoo!MessengerYahooMessenger.exeC:WINDOWSsystem32ctfmon.exeC:Program FilesSiber SystemsAI RoboFormRoboTaskBarIcon.exeC:Program FilesWinZipWZQKPICK.EXEC:Program FilesProxyconnPxClient.exeC:Program FilesDiskeeper CorporationDiskeeperDkService.exec:Program FilesCommon FilesLightScribeLSSrvc.exeC:Program FilesCommon FilesMcAfeeHackerWatchHWAPI.exeC:PROGRA~1McAfeeMSCmclogsrv.exeC:PROGRA~1McAfeeMSCmcupdmgr.exec:program filescommon filesmcafeemnamcnasvc.exeC:PROGRA~1McAfeeVIRUSS~1mcods.exeC:PROGRA~1McAfeeMSCmcpromgr.exec:PROGRA~1COMMON~1mcafeemcproxymcproxy.exec:PROGRA~1COMMON~1mcafeeredirsvcredirsvc.exeC:PROGRA~1McAfeeVIRUSS~1mcshield.exeC:PROGRA~1McAfeeVIRUSS~1mcsysmon.exeC:PROGRA~1McAfeeMSCmctskshd.exeC:PROGRA~1McAfeeMSCmcusrmgr.exeC:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXEC:Program FilesMcAfeeMPFMPFSrv.exeC:Program FilesMcAfeeMSKMskSrver.exeC:Program FilesMcafeeMWLMwlSvc.exeC:Program FilesSiteAdvisor4608SAService.exeC:WINDOWSsystem32svchost.exeC:Program FilesWebrootSpy SweeperWRSSSDK.exeC:PROGRA~1mcafee.comagentmcagent.exeC:WINDOWSsystem32svchost.exeC:PROGRA~1McAfeeMPSmps.exeC:Program FilesMcAfeeMPSmpsevh.exeC:WINDOWSsystem32lxbycoms.exec:program filesmcafeemscmcuimgr.exeC:Program FilesInternet ExplorerIEXPLORE.EXEC:PROGRA~1Yahoo!COMPAN~1InstallscpnYTBSDK.exeC:Documents and SettingsHPOwnerDesktopHijackThis.exeR1 - HKCUSoftwareMicrosoftInternet ExplorerMain,DefaultPageURL = http://ie.redirect.h...ehome&locale=ENUS&c=Q105&bd=pavilion&pf=desktopR1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://us.rd.yahoo.c...aults/sb/msgr8/http://www.yahoo.com...h/search.htmlR0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yahoo.com/?.home=ytieR1 - HKLMSoftwareMicrosoftInternet ExplorerMain,DefaultPageURL = http://www.yahoo.comR1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://us.rd.yahoo.c...aults/sb/msgr8/http://www.yahoo.com...h/search.htmlR1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft....?LinkId=54896R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.yahoo.com/?.home=ytieR0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://us.rd.yahoo.c...mp/defaults/su/http://www.yahoo.comR1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Windows Internet Explorer provided by Yahoo!R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = http=127.0.0.1:6198R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = clinic.mcafee.com; bin.mcafee.com; download.mcafee.com;<local>R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:Program FilesYahoo!CompanionInstallscpnyt.dllO2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:Program FilesYahoo!CompanionInstallscpnyt.dllO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dllO2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:Program FilesSiteAdvisor4608SiteAdv.dllO2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:Program FilesYahoo!Commonyiesrvc.dllO2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:Program FilesSiber SystemsAI RoboFormroboform.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.5.009binssv.dllO2 - BHO: PrxcnBHO Class - {7D9E713D-0388-4384-BDD8-2A42EB1C4F04} - C:Program FilesProxyconnPrxcnBrsrCtrl.dllO2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:program filesmcafeevirusscanscriptcl.dllO2 - BHO: MSN Search Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:Program FilesMSN Toolbar SuiteTB02.05.0001.1119en-usmsntb.dllO3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:Program FilesHPDigital ImagingbinHPDTLK02.dllO3 - Toolbar: MSN Search Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:Program FilesMSN Toolbar SuiteTB02.05.0001.1119en-usmsntb.dllO3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:Program FilesSiteAdvisor4608SiteAdv.dllO3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:Program FilesSiber SystemsAI RoboFormroboform.dllO3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:Program FilesYahoo!CompanionInstallscpnyt.dllO4 - HKCU..Run: [Yahoo! Pager] "C:Program FilesYahoo!MessengerYahooMessenger.exe" -quietO4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exeO4 - HKCU..Run: [RoboForm] "C:Program FilesSiber SystemsAI RoboFormRoboTaskBarIcon.exe"O4 - Global Startup: WinZip Quick Pick.lnk = C:Program FilesWinZipWZQKPICK.EXEO8 - Extra context menu item: &Clean Traces - C:Program FilesDAPPrivacy Packagedapcleanerie.htmO8 - Extra context menu item: &Download with &DAP - C:Program FilesDAPdapextie.htmO8 - Extra context menu item: &eBay Search - res://C:Program FileseBayeBay Toolbar2eBayTb.dll/RCSearch.htmlO8 - Extra context menu item: &MSN Search - res://C:Program FilesMSN Toolbar SuiteTB02.05.0001.1119en-usmsntb.dll/search.htmO8 - Extra context menu item: &Yahoo! Search - file:///C:Program FilesYahoo!Common/ycsrch.htmO8 - Extra context menu item: Add To HP Organize... - C:PROGRA~1HEWLET~1HPORGA~1bin/module.main/favoritesieaddto.htmlO8 - Extra context menu item: Customize Menu - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComCustomizeIEMenu.htmlO8 - Extra context menu item: Download &all with DAP - C:Program FilesDAPdapextie2.htmO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MI1933~1OFFICE11EXCEL.EXE/3000O8 - Extra context menu item: Fill Forms - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComFillForms.htmlO8 - Extra context menu item: Open in new background tab - res://C:Program FilesMSN Toolbar SuiteTAB02.05.0001.1119en-usmsntabres.dll/229?4727277edf4a4596822decf5ca2025d8O8 - Extra context menu item: Open in new foreground tab - res://C:Program FilesMSN Toolbar SuiteTAB02.05.0001.1119en-usmsntabres.dll/230?4727277edf4a4596822decf5ca2025d8O8 - Extra context menu item: RoboForm Toolbar - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComShowToolbar.htmlO8 - Extra context menu item: Save Forms - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComSavePass.htmlO8 - Extra context menu item: Yahoo! &Dictionary - file:///C:Program FilesYahoo!Common/ycdict.htmO8 - Extra context menu item: Yahoo! &Maps - file:///C:Program FilesYahoo!Common/ycmap.htmO8 - Extra context menu item: Yahoo! &SMS - file:///C:Program FilesYahoo!Common/ycsms.htmO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.009binssv.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.009binssv.dllO9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComFillForms.htmlO9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComFillForms.htmlO9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComSavePass.htmlO9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComSavePass.htmlO9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:Program FilesYahoo!Commonyiesrvc.dllO9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComShowToolbar.htmlO9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComShowToolbar.htmlO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe (file missing)O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe (file missing)O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exeO11 - Options group: [INTERNATIONAL] InternationalO14 - IERESET.INF: STARTPAGEURL=http://www.yahoo.comO16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} - http://www.pcpitstop...CPitStop.CABO16 - DPF: {49232000-16E4-426C-A231-62846947304B} - http://ipgweb.cce.hp.../sysinfo.cabO17 - HKLMSystemCCSServicesTcpip..{4E0A861A-376A-475B-9EFA-0CA264B7A333}: NameServer = 127.0.0.1,192.168.0.1,205.171.3.65O17 - HKLMSystemCCSServicesTcpip..{817C7BD9-76BC-4067-B202-35A009DFB404}: NameServer = 127.0.0.1,192.168.0.1,205.171.3.65O17 - HKLMSystemCCSServicesTcpip..{BBC90F97-0AC9-4698-B93C-5DDC6ACAFFFB}: NameServer = 127.0.0.1,192.168.0.1,205.171.3.65O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:Program FilesSiteAdvisor4608SiteAdv.dllO20 - Winlogon Notify: igfxcui - C:WINDOWSSYSTEM32igfxsrvc.dllO20 - Winlogon Notify: WgaLogon - C:WINDOWSSYSTEM32WgaLogon.dllO20 - Winlogon Notify: WRNotifier - C:WINDOWSSYSTEM32WRLogonNTF.dllO21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:WINDOWSsystem32WPDShServiceObj.dllO23 - Service: Diskeeper - Diskeeper Corporation - C:Program FilesDiskeeper CorporationDiskeeperDkService.exeO23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:PROGRA~1COMMON~1McAfeeEmProxyemproxy.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exeO23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c:Program FilesCommon FilesLightScribeLSSrvc.exeO23 - Service: lxbydevice - Lexmark International, Inc. - C:WINDOWSsystem32lxbycoms.exeO23 - Service: MBackMonitor - - C:Program FilesMcAfeeMBKMBackMonitor.exeO23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:Program FilesCommon FilesMcAfeeHackerWatchHWAPI.exeO23 - Service: McAfee Log Manager (McLogManagerService) - McAfee, Inc. - C:PROGRA~1McAfeeMSCmclogsrv.exeO23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:PROGRA~1McAfeeMSCmcupdmgr.exeO23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:program filescommon filesmcafeemnamcnasvc.exeO23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:PROGRA~1McAfeeVIRUSS~1mcods.exeO23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:PROGRA~1McAfeeMSCmcpromgr.exeO23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:PROGRA~1COMMON~1mcafeemcproxymcproxy.exeO23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:PROGRA~1COMMON~1mcafeeredirsvcredirsvc.exeO23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:PROGRA~1McAfeeVIRUSS~1mcshield.exeO23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:PROGRA~1McAfeeVIRUSS~1mcsysmon.exeO23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc. - C:PROGRA~1McAfeeMSCmctskshd.exeO23 - Service: McAfee User Manager (mcusrmgr) - McAfee, Inc. - C:PROGRA~1McAfeeMSCmcusrmgr.exeO23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:Program FilesMcAfeeMPFMPFSrv.exeO23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:PROGRA~1McAfeeMPSmps.exeO23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:Program FilesMcAfeeMSKMskSrver.exeO23 - Service: McAfee Wireless Network Security Service (MWLSvc) - McAfee, Inc. - C:Program FilesMcafeeMWLMwlSvc.exeO23 - Service: SiteAdvisor Service - Unknown owner - C:Program FilesSiteAdvisor4608SAService.exeO23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:Program FilesWebrootSpy SweeperWRSSSDK.exe
Page 1 of 1
Using HIJACKTHIS? Question.
#2
Posted 02 January 2007 - 09:28 AM
{size:18px}[/size]:D Hi : Looks like you have a McAfee Internet Security AND Webroot's SpySweeper BOTH providing "real-time" protection !? If true, they would "conflict" with each other, causing a slowdown. However, just having a McAfee product on your computer most likely would cause a slowdown, since it is known as a "resource-hog" . Advise about HijackThis logs are best answered by experienced, volunteer Malware Experts usually found on antiSPYWARE Support Forums and I usually recommend the Ad-Aware oriented forums at www.landzdown.com . Your Sun Java is 1 Update behind; I recommend you uninstall it, then go to www.majorgeeks.com/download4648.html to get the latest .
#3
Posted 05 January 2007 - 03:18 PM
It looks fine but you may have a lot of those program running at start up. Check how many programs you have running in the background. You only need the anti-virus, spyware (if any) and firewall to start with windows. To check go to Start>RUN>msconfig and got to start up tab. Check just the programs you want to start up with windows.
Page 1 of 1
Sign In
Register
Help

MultiQuote