Not sure what it is but i have a new problem

lastly, right before SDfix produced the logfile for me, I got an avira popup saying there thing that wanted to run using Internet Explorer called "CGtme.exe'. What is that and is it a problem? Being optimistic I told avira it was ok to keep it. Should i have done that?

since I messed up and deleted that stuff in the Dr. web scan things are runnign strangely. Every so often thigns get very slow and some programs go into "not responding" mode for a few seconds to a minute and then recover as per normal. What the hell did I do to my machine?! Have i destroyed it?

Lets try this:

Please download this file: Avira Rescue Disc

1. Insert a black CD into your CD draw.
   
2. Double click the rescuecd.exe file on your Desktop.
   
3. Hit the "Burn CD" button and allow it to burn, it shouldn't take too long.
   
4. Next, reboot your computer, keep the CD inside the draw.
   
5. Your computer should boot from the CD and boot to the Avira rescue disc.
   
6. Next, see this guide here: How to use the boot disc
   

Problem: i can't get the thing to load from the CD. I restarted with the CD in the drive and the system ignored it. The instructions you link to don't talk about this. Do i have to hit F8 when the system is starting or something to get into that menu such that i could choose to load from the CD?

Also post restart, FF starts even more slowly though once started it seems just fine.

Edit: FF is running slowly now. I updated it to the latest version and it still does it.

Last edited by spacephrawgg on 23rd July 2009, 3:59 pm; edited 1 time in total (Reason for editing : thought of somethng else to say.)

Please download SysProt AntiRootkit v1.0.1.0 by Swatkat

• Next run the file; *Note: If running vista right click and select run as administrator
  
• Once opened, navigate to the log tab and select all the areas including the hidden objects only box and click on the create log button
  
• A scan will start and then a window will pop up with two options, select scan all drives
  
• Once finished it will give you a location where it was saved, navigate to that place usually the desktop, and open the log, post all the contents of the log back here.
  

Here's the log part1:

SysProt AntiRootkit v1.0.1.0
by swatkat

******************************************************************************************
******************************************************************************************

No Hidden Processes found

******************************************************************************************
******************************************************************************************
No Hidden Kernel Modules found

******************************************************************************************
******************************************************************************************
No SSDT Hooks found

******************************************************************************************
******************************************************************************************
No Kernel Hooks found

******************************************************************************************
******************************************************************************************
No IRP Hooks found

******************************************************************************************
******************************************************************************************
Ports:
Local Address: D38Y6181.HOME:4833
Remote Address: CYCLOPS.DCA.UNTD.COM:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181.HOME:4807
Remote Address: WWW-10-03-ASH1.FACEBOOK.COM:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181.HOME:4779
Remote Address: 69.60.7.210:HTTP
Type: TCP
Process: 3120 (PID)
State: ESTABLISHED

Local Address: D38Y6181.HOME:4770
Remote Address: QW-IN-F118.GOOGLE.COM:HTTP
Type: TCP
Process: 3120 (PID)
State: ESTABLISHED

Local Address: D38Y6181.HOME:4759
Remote Address: HE-IN-F154.GOOGLE.COM:HTTP
Type: TCP
Process: 3120 (PID)
State: ESTABLISHED

Local Address: D38Y6181.HOME:4756
Remote Address: QW-IN-F102.GOOGLE.COM:HTTP
Type: TCP
Process: 3120 (PID)
State: ESTABLISHED

Local Address: D38Y6181.HOME:4735
Remote Address: 69.25.226.141:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181.HOME:4733
Remote Address: CYCLOPS.VGS.UNTD.COM:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181.HOME:4683
Remote Address: WWW-10-03-ASH1.FACEBOOK.COM:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181.HOME:4679
Remote Address: QW-IN-F102.GOOGLE.COM:HTTP
Type: TCP
Process: 3120 (PID)
State: ESTABLISHED

Local Address: D38Y6181.HOME:4658
Remote Address: CPE-24-29-138-32.NYC.RES.RR.COM:HTTP
Type: TCP
Process: 3120 (PID)
State: ESTABLISHED

Local Address: D38Y6181.HOME:4653
Remote Address: 74.217.50.10:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181.HOME:4650
Remote Address: 74.217.50.10:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181.HOME:4638
Remote Address: NETBLK-207-171-14-112.ADCONION.COM:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181.HOME:4632
Remote Address: CPE-24-29-138-16.NYC.RES.RR.COM:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181.HOME:4401
Remote Address: 69.60.7.199:HTTP
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181.HOME:4322
Remote Address: 69.60.7.199:HTTP
Type: TCP
Process: 3120 (PID)
State: ESTABLISHED

Local Address: D38Y6181.HOME:4024
Remote Address: OD-IN-F147.GOOGLE.COM:HTTP
Type: TCP
Process: 3120 (PID)
State: ESTABLISHED

Local Address: D38Y6181.HOME:2310
Remote Address: OAM-D03B.BLUE.AOL.COM:5190
Type: TCP
Process: 928 (PID)
State: ESTABLISHED

Local Address: D38Y6181.HOME:2309
Remote Address: OAM-D11C.BLUE.AOL.COM:5190
Type: TCP
Process: 928 (PID)
State: ESTABLISHED

Local Address: D38Y6181.HOME:2308
Remote Address: OAM-M10C.BLUE.AOL.COM:5190
Type: TCP
Process: 928 (PID)
State: ESTABLISHED

Local Address: D38Y6181.HOME:2307
Remote Address: 205.188.8.29:5190
Type: TCP
Process: 928 (PID)
State: ESTABLISHED

Local Address: D38Y6181.HOME:2306
Remote Address: BOS-M056C-SDR3.BLUE.AOL.COM:5190
Type: TCP
Process: 928 (PID)
State: ESTABLISHED

Local Address: D38Y6181.HOME:2303
Remote Address: 64.12.29.13:5190
Type: TCP
Process: 928 (PID)
State: ESTABLISHED

Local Address: D38Y6181.HOME:NETBIOS-SSN
Remote Address: 0.0.0.0:0
Type: TCP
Process: 4 (PID)
State: LISTENING

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4837
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4820
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4818
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4815
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4813
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4808
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4802
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4800
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4797
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4796
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4793
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4792
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4790
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4788
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4786
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4784
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4778
Type: TCP
Process: 3120 (PID)
State: ESTABLISHED

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4769
Type: TCP
Process: 3120 (PID)
State: ESTABLISHED

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4765
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4758
Type: TCP
Process: 3120 (PID)
State: ESTABLISHED

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4754
Type: TCP
Process: 3120 (PID)
State: ESTABLISHED

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4752
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4748
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4746
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4744
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4742
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4740
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4730
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4726
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4678
Type: TCP
Process: 3120 (PID)
State: ESTABLISHED

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4669
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4668
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4657
Type: TCP
Process: 3120 (PID)
State: ESTABLISHED

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4321
Type: TCP
Process: 3120 (PID)
State: ESTABLISHED

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4033
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:44080
Remote Address: LOCALHOST:4023
Type: TCP
Process: 3120 (PID)
State: ESTABLISHED

part 2:

Local Address: D38Y6181:27015
Remote Address: LOCALHOST:3063
Type: TCP
Process: 352 (PID)
State: ESTABLISHED

Local Address: D38Y6181:27015
Remote Address: LOCALHOST:1028
Type: TCP
Process: 352 (PID)
State: ESTABLISHED

Local Address: D38Y6181:27015
Remote Address: 0.0.0.0:0
Type: TCP
Process: 352 (PID)
State: LISTENING

Local Address: D38Y6181:5354
Remote Address: LOCALHOST:3069
Type: TCP
Process: 472 (PID)
State: ESTABLISHED

Local Address: D38Y6181:5354
Remote Address: LOCALHOST:3068
Type: TCP
Process: 472 (PID)
State: ESTABLISHED

Local Address: D38Y6181:5354
Remote Address: LOCALHOST:3067
Type: TCP
Process: 472 (PID)
State: ESTABLISHED

Local Address: D38Y6181:5354
Remote Address: LOCALHOST:3066
Type: TCP
Process: 472 (PID)
State: ESTABLISHED

Local Address: D38Y6181:5354
Remote Address: LOCALHOST:3065
Type: TCP
Process: 472 (PID)
State: ESTABLISHED

Local Address: D38Y6181:5354
Remote Address: 0.0.0.0:0
Type: TCP
Process: 472 (PID)
State: LISTENING

Local Address: D38Y6181:5152
Remote Address: LOCALHOST:1031
Type: TCP
Process: 580 (PID)
State: CLOSE_WAIT

Local Address: D38Y6181:5152
Remote Address: 0.0.0.0:0
Type: TCP
Process: 580 (PID)
State: LISTENING

Local Address: D38Y6181:4834
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4832
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4828
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4825
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4822
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4810
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4806
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4804
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4782
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4780
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4778
Remote Address: LOCALHOST:44080
Type: TCP
Process: 3772 (PID)
State: ESTABLISHED

Local Address: D38Y6181:4775
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4772
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4769
Remote Address: LOCALHOST:44080
Type: TCP
Process: 3772 (PID)
State: ESTABLISHED

Local Address: D38Y6181:4767
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4762
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4758
Remote Address: LOCALHOST:44080
Type: TCP
Process: 3772 (PID)
State: ESTABLISHED

Local Address: D38Y6181:4755
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4754
Remote Address: LOCALHOST:44080
Type: TCP
Process: 3772 (PID)
State: ESTABLISHED

Local Address: D38Y6181:4736
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4734
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4732
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4728
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4682
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4678
Remote Address: LOCALHOST:44080
Type: TCP
Process: 3772 (PID)
State: ESTABLISHED

Local Address: D38Y6181:4657
Remote Address: LOCALHOST:44080
Type: TCP
Process: 3772 (PID)
State: ESTABLISHED

Local Address: D38Y6181:4652
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4649
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4637
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4631
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4400
Remote Address: LOCALHOST:44080
Type: TCP
Process: 0 (PID)
State: TIME_WAIT

Local Address: D38Y6181:4321
Remote Address: LOCALHOST:44080
Type: TCP
Process: 3772 (PID)
State: ESTABLISHED

Local Address: D38Y6181:4023
Remote Address: LOCALHOST:44080
Type: TCP
Process: 3772 (PID)
State: ESTABLISHED

Local Address: D38Y6181:3069
Remote Address: LOCALHOST:5354
Type: TCP
Process: 2688 (PID)
State: ESTABLISHED

Local Address: D38Y6181:3068
Remote Address: LOCALHOST:5354
Type: TCP
Process: 2688 (PID)
State: ESTABLISHED

Local Address: D38Y6181:3067
Remote Address: LOCALHOST:5354
Type: TCP
Process: 2688 (PID)
State: ESTABLISHED

Local Address: D38Y6181:3066
Remote Address: LOCALHOST:5354
Type: TCP
Process: 2688 (PID)
State: ESTABLISHED

Local Address: D38Y6181:3065
Remote Address: LOCALHOST:5354
Type: TCP
Process: 2688 (PID)
State: ESTABLISHED

Local Address: D38Y6181:3063
Remote Address: LOCALHOST:27015
Type: TCP
Process: 2688 (PID)
State: ESTABLISHED

Local Address: D38Y6181:2989
Remote Address: LOCALHOST:44080
Type: TCP
Process: 2688 (PID)
State: CLOSE_WAIT

Local Address: D38Y6181:2987
Remote Address: LOCALHOST:44080
Type: TCP
Process: 2688 (PID)
State: CLOSE_WAIT

Local Address: D38Y6181:2985
Remote Address: LOCALHOST:44080
Type: TCP
Process: 2688 (PID)
State: CLOSE_WAIT

Local Address: D38Y6181:2960
Remote Address: LOCALHOST:44080
Type: TCP
Process: 2688 (PID)
State: CLOSE_WAIT

Local Address: D38Y6181:2959
Remote Address: LOCALHOST:44080
Type: TCP
Process: 2688 (PID)
State: CLOSE_WAIT

Local Address: D38Y6181:2953
Remote Address: LOCALHOST:44080
Type: TCP
Process: 2688 (PID)
State: CLOSE_WAIT

Local Address: D38Y6181:2945
Remote Address: LOCALHOST:44080
Type: TCP
Process: 2688 (PID)
State: CLOSE_WAIT

Local Address: D38Y6181:2943
Remote Address: LOCALHOST:44080
Type: TCP
Process: 2688 (PID)
State: CLOSE_WAIT

Local Address: D38Y6181:1073
Remote Address: LOCALHOST:1072
Type: TCP
Process: 3772 (PID)
State: ESTABLISHED

Local Address: D38Y6181:1072
Remote Address: LOCALHOST:1073
Type: TCP
Process: 3772 (PID)
State: ESTABLISHED

Local Address: D38Y6181:1049
Remote Address: LOCALHOST:1048
Type: TCP
Process: 3772 (PID)
State: ESTABLISHED

Local Address: D38Y6181:1048
Remote Address: LOCALHOST:1049
Type: TCP
Process: 3772 (PID)
State: ESTABLISHED

Local Address: D38Y6181:1032
Remote Address: 0.0.0.0:0
Type: TCP
Process: 2608 (PID)
State: LISTENING

Local Address: D38Y6181:1028
Remote Address: LOCALHOST:27015
Type: TCP
Process: 1176 (PID)
State: ESTABLISHED

Local Address: D38Y6181:44110
Remote Address: 0.0.0.0:0
Type: TCP
Process: 3108 (PID)
State: LISTENING

Local Address: D38Y6181:44080
Remote Address: 0.0.0.0:0
Type: TCP
Process: 3120 (PID)
State: LISTENING

Local Address: D38Y6181:MICROSOFT-DS
Remote Address: 0.0.0.0:0
Type: TCP
Process: 4 (PID)
State: LISTENING

Local Address: D38Y6181:EPMAP
Remote Address: 0.0.0.0:0
Type: TCP
Process: 1632 (PID)
State: LISTENING

Local Address: D38Y6181.HOME:5353
Remote Address: NA
Type: UDP
Process: 472 (PID)
State: NA

Local Address: D38Y6181.HOME:1900
Remote Address: NA
Type: UDP
Process: 1820 (PID)
State: NA

Local Address: D38Y6181.HOME:138
Remote Address: NA
Type: UDP
Process: 4 (PID)
State: NA

Local Address: D38Y6181.HOME:NETBIOS-NS
Remote Address: NA
Type: UDP
Process: 4 (PID)
State: NA

Local Address: D38Y6181.HOME:123
Remote Address: NA
Type: UDP
Process: 1676 (PID)
State: NA

Local Address: D38Y6181:1900
Remote Address: NA
Type: UDP
Process: 1820 (PID)
State: NA

Local Address: D38Y6181:1039
Remote Address: NA
Type: UDP
Process: 296 (PID)
State: NA

Local Address: D38Y6181:123
Remote Address: NA
Type: UDP
Process: 1676 (PID)
State: NA

Local Address: D38Y6181:56078
Remote Address: NA
Type: UDP
Process: 472 (PID)
State: NA

Local Address: D38Y6181:4500
Remote Address: NA
Type: UDP
Process: 1364 (PID)
State: NA

Local Address: D38Y6181:1025
Remote Address: NA
Type: UDP
Process: 472 (PID)
State: NA

Local Address: D38Y6181:500
Remote Address: NA
Type: UDP
Process: 1364 (PID)
State: NA

Local Address: D38Y6181:MICROSOFT-DS
Remote Address: NA
Type: UDP
Process: 4 (PID)
State: NA

******************************************************************************************
******************************************************************************************
No hidden files/folders found

How should I proceed? FF takes a bit longer to load now. I have to click it a bunch of times, then wait two minutes which is like a week, and then like three windows of it open more or less in series.

In keeping with the general "DON'T FIX ANYTHING [until we advise you on what to do]" instructions, I have not done any anti-malware scans or any other kind.

How should I proceed?

Hello.
Not sure what we can do here, every time we fixed something like startup, it got slower.

8>/

Well it isn't that bad i suppose. The Firefox thing and the itunes thing are the only really pressing issues at the moment.

So its safe to do conventional scans like malwarebytes and spybot SD now I guess right?

Yep.

Well thank you awfully much for your extensive help. What about my mom's computer? As soon as I can afford it I will contribute a monetary donations. Thanks again!