WiredWX Hobby Weather ToolsLog in

 


descriptionComputer running alot slower and random shutting down of coral draw with pop up EmptyComputer running alot slower and random shutting down of coral draw with pop up

more_horiz
Ran a Scan of Hijack for my computer and below is the log

Please help me fix this whatever this is

Thank you
Angel

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:42:12 PM, on 4/14/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\WrtMon.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\WrtProc.exe
C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\FRAPS\CLEAN UP SCREEN\FRAPS.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AceBIT\WISE-FTP\WF_Scheduler.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Java\jre6\bin\jucheck.exe
C:\Program Files\PlayOnline\SquareEnix\PlayOnlineViewer\pol.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sympatico.msn.ca/default.aspx
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [WrtMon.exe] C:\WINDOWS\system32\spool\drivers\w32x86\3\WrtMon.exe
O4 - HKLM\..\Run: [HPPQVideo] "C:\Program Files\HP\ScheduledLaunch\HP Color LaserJet CP2020 Series\bin\hppschlnch.exe" -r SOFTWARE\Hewlett-Packard\ScheduledLaunch\CLJ_CP2020_Series -f PQOptimizerVideo.xml -o RemindLater
O4 - HKLM\..\Run: [ToolBoxFX] "C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [UVS12 Preload] C:\Program Files\Corel\Corel VideoStudio 12\uvPL.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Fraps] C:\FRAPS\CLEAN UP SCREEN\FRAPS.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Wise-FTP Scheduler] C:\Program Files\AceBIT\WISE-FTP\WF_Scheduler.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1142960780127
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1171543544111
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O24 - Desktop Component 0: (no name) - http://www.homestead.com/%7Egallery/templates/LOHOSH008A/files/QuickSiteImages/QS_top.jpg

--
End of file - 9046 bytes

descriptionComputer running alot slower and random shutting down of coral draw with pop up EmptyRe: Computer running alot slower and random shutting down of coral draw with pop up

more_horiz
I don't understand what you mean "with popup"

An error popping up about corel? or adware popups?

descriptionComputer running alot slower and random shutting down of coral draw with pop up EmptyRe: Computer running alot slower and random shutting down of coral draw with pop up

more_horiz
Last time i was trying to save a file in corel draw which has been giving me problems for a few days the program just shut completely down and then an advertisment opened up on my screen

descriptionComputer running alot slower and random shutting down of coral draw with pop up EmptyRe: Computer running alot slower and random shutting down of coral draw with pop up

more_horiz
Lets have a look around then.

  • Please download DDS by sUBs to your Desktop (Important!!) from one of these locations:
    Link 1
    Link 2
  • Double click DDS.scr to run
  • When complete, DDS.txt will open.
  • Save the report to your Desktop.
  • Copy and paste DDS.txt back here, I don't need to see attach.txt.

descriptionComputer running alot slower and random shutting down of coral draw with pop up EmptyRe: Computer running alot slower and random shutting down of coral draw with pop up

more_horiz
Canon MX850 series
Canon My Printer
Canon Utilities Easy-PhotoPrint
Canon Utilities Easy-PhotoPrint EX
Canon Utilities Solution Menu
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
ccc-core-preinstall
ccc-core-static
ccc-utility
CCC Help English
Convert
Corel VideoStudio 12
CorelDRAW Graphics Suite X4
CorelDRAW Graphics Suite X4 - Capture
CorelDRAW Graphics Suite X4 - Content
CorelDRAW Graphics Suite X4 - Draw
CorelDRAW Graphics Suite X4 - Filters
CorelDRAW Graphics Suite X4 - FontNav
CorelDRAW Graphics SUite X4 - ICA
CorelDRAW Graphics Suite X4 - IPM
CorelDRAW Graphics Suite X4 - Lang EN
CorelDRAW Graphics Suite X4 - PP
CorelDRAW Graphics Suite X4 - VBA
CorelDRAW(R) Graphics Suite X4
CorelDRAW(R) Graphics Suite X4 - Windows Shell Extension
Critical Update for Windows Media Player 11 (KB959772)
CustomerResearchQFolder
DesignPro 5.4 Limited Edition
DivX
DivX Converter
DivX Player
DivX Web Player
DVD Solution
FINAL FANTASY XI
FINAL FANTASY XI: Chains of Promathia
FINAL FANTASY XI: Rise of the Zilart
FINAL FANTASY XI: Treasures of Aht Urhgan
FINAL FANTASY XI: Wings of the Goddess
Fraps
High Definition Audio Driver Package - KB888111
HijackThis 2.0.2
HLB Calculator
Homestead SiteBuilder
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
HP Basic Color Match
HP Color LaserJet CP2020 Series 1.0
HP Customer Participation Program 10.0
HP Update
hppFonts
hppManualsCP2020
hppPQVideoCP2020
hppQFolderCP2020
hppTLBXFXCP2020
hppusgCP2020
HPSSupply
hpzTLBXFX
Indeo®️ XP Software
iPod for Windows 2006-03-23
iTunes
J2SE Runtime Environment 5.0 Update 11
Java(TM) 6 Update 10
Java(TM) 6 Update 3
Java(TM) 6 Update 5
Java(TM) 6 Update 7
MarketResearch
Marvell Miniport Driver
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft IntelliPoint 5.4
Microsoft IntelliType Pro 5.5
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Small Business Edition 2003
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Mozilla Firefox (3.0.8)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 6.0 Parser
Nero OEM
PCFriendly
Photo Story 3 for Windows
Photo to Movie 3.5.6
PhotoGraphic Edges
PlayOnline Viewer and Tetra Master
PowerDVD
PowerProducer
Presto! PageManager 7.15.20
QuickTime
Realtek High Definition Audio Driver
Security Update for CAPICOM (KB931906)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB911565)
Security Update for Windows Media Player 9 (KB917734)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Shop for HP Supplies
Skins
Skype™️ 4.0
SmartFTP Client
SmartFTP Client 3.0 Setup Files (remove only)
SoapMaker
SoapMaker3
Uninstall AutoEye
Uninstall PGE Platinum
Uninstall PGE7Demo
Update for Windows XP (KB951978)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
VideoMach
VideoStudio
Visual Basic for Applications (R) Core
Visual Basic for Applications (R) Core - English
Web Page Maker V3.03
WebFldrs XP
WebReg
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool
Windows Internet Explorer 7
Windows Live installer
Windows Live Sign-in Assistant
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3
WinRAR archiver
WinZip 11.1
Wise-FTP
Yahoo! Toolbar

==== End Of File ===========================

descriptionComputer running alot slower and random shutting down of coral draw with pop up EmptyRe: Computer running alot slower and random shutting down of coral draw with pop up

more_horiz
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\System32\svchost.exe -k HPZ12
c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Java\jre6\bin\jucheck.exe
C:\Program Files\PlayOnline\SquareEnix\PlayOnlineViewer\pol.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://sympatico.msn.ca/default.aspx
BHO: Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
uRun: [Fraps] c:\fraps\clean up screen\FRAPS.EXE
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Wise-FTP Scheduler] c:\program files\acebit\wise-ftp\WF_Scheduler.exe
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\point32.exe"
mRun: [itype] "c:\program files\microsoft intellitype pro\itype.exe"
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
mRun: [CanonSolutionMenu] c:\program files\canon\solutionmenu\CNSLMAIN.exe /logon
mRun: [CanonMyPrinter] c:\program files\canon\myprinter\BJMyPrt.exe /logon
mRun: [WrtMon.exe] c:\windows\system32\spool\drivers\w32x86\3\WrtMon.exe
mRun: [HPPQVideo] "c:\program files\hp\scheduledlaunch\hp color laserjet cp2020 series\bin\hppschlnch.exe" -r software\hewlett-packard\scheduledlaunch\CLJ_CP2020_Series -f PQOptimizerVideo.xml -o RemindLater
mRun: [ToolBoxFX] "c:\program files\hp\toolboxfx\bin\HPTLBXFX.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on
mRun: []
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [UVS12 Preload] c:\program files\corel\corel videostudio 12\uvPL.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {77BF5300-1474-4EC7-9980-D32B190E9B07} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office11\REFIEBAR.DLL
DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1142960780127
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1171543544111
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxps://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

descriptionComputer running alot slower and random shutting down of coral draw with pop up EmptyRe: Computer running alot slower and random shutting down of coral draw with pop up

more_horiz
================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\user\applic~1\mozilla\firefox\profiles\pnvqtk59.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
FF - prefs.js: browser.startup.homepage - hxxp://en-us.start.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-sunm&p=
FF - component: c:\program files\mozilla firefox\extensions\browserhighlighter@ebay.com\components\Shim.dll
FF - plugin: c:\program files\mozilla firefox\plugins\nphssb.dll

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true
============= SERVICES / DRIVERS ===============

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-4-5 114768]
R2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\adobe\photoshop elements 7.0\PhotoshopElementsFileAgent.exe [2008-9-16 163840]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2008-4-5 20560]
R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast4\ashServ.exe [2008-2-12 138680]
R3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast4\ashMaiSv.exe [2008-2-12 254040]
R3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast4\ashWebSv.exe [2008-2-12 352920]

=============== Created Last 30 ================

2009-04-14 19:57 360,002 a------- c:\program files\dds.scr
2009-04-14 19:41 812,344 a------- c:\program files\HJTInstall.exe
2009-04-10 03:00 --d----- c:\windows\system32\KB905474
2009-04-09 23:22 43,083,040 a------- c:\program files\AdbeRdr910_en_US_Std.exe
2009-03-16 21:02 7,183,527 a------- c:\program files\SM3installer3.1.5.exe

==================== Find3M ====================

2009-04-14 19:31 2,516 a--sh--- c:\docume~1\alluse~1\applic~1\KGyGaAvL.sys
2009-04-06 12:40 163,301 a------- c:\program files\iStock_000003039227XSmall.jpg
2009-04-06 12:34 151,660 a------- c:\program files\iStock_000008659455XSmall.jpg
2009-04-06 11:45 150,660 a------- c:\program files\iStock_000006921796XSmall.jpg
2009-04-05 23:11 200,388 a------- c:\program files\iStock_000003419228XSmall.jpg
2009-04-05 22:48 127,532 a------- c:\program files\iStock_000003897132XSmall.jpg
2009-04-03 19:56 352,691 a------- c:\program files\iStock_000004754275Small.jpg
2009-03-27 07:36 4,466 a------- c:\program files\3.jpg
2009-03-22 15:00 11,264 a--sh--- c:\program files\Thumbs.db
2009-03-02 23:03 7,147,317 a------- c:\program files\SM3installer3.1.3.exe
2009-02-24 23:50 606,208 a------- c:\program files\Joann'sRepairedData(3).SDB
2009-02-24 23:36 606,208 a------- c:\program files\Joann'sRepairedData(2).SDB
2009-02-24 23:22 606,208 a------- c:\program files\Joann'sRepairedData.SDB
2009-02-24 12:25 7,145,045 a------- c:\program files\SM3installer3.1.1(2).exe
2009-02-24 02:39 7,145,045 a------- c:\program files\SM3installer3.1.1.exe
2009-02-13 00:50 2,249,512 a------- c:\program files\SkypeSetup.exe
2009-02-09 07:13 1,846,784 a------- c:\windows\system32\win32k.sys
2009-01-26 10:45 129,784 -------- c:\windows\system32\pxafs.dll
2009-01-26 10:45 118,520 -------- c:\windows\system32\pxinsi64.exe
2009-01-26 10:45 116,472 -------- c:\windows\system32\pxcpyi64.exe
2009-01-23 13:14 52,307,672 a------- c:\program files\AVSVideoConverter.exe
2009-01-23 11:07 30,868 a------- c:\program files\a337fa43905ef4953971bbf7caeb6087
2009-01-22 17:52 133,941 a------- c:\program files\iStock_000006314569XSmall.jpg
2009-01-22 17:32 149,223 a------- c:\program files\iStock_000004225398XSmall.jpg
2009-01-22 16:53 21,468 a------- c:\program files\soap1.jpg
2009-01-22 16:47 174,088 a------- c:\program files\iStock_000002025277XSmall.jpg
2009-01-22 14:53 87,935 a------- c:\program files\iStock_000001149661XSmall.jpg
2009-01-21 23:52 618,872 a------- c:\program files\iStock_000007526826Large.jpg
2009-01-21 00:39 1,636,352 a------- c:\program files\iStock_000006089315XLarge.jpg
2009-01-20 01:16 68,310 a------- c:\program files\iStock_000005665417XSmall.jpg
2009-01-16 18:27 2,413,642 a------- c:\program files\videomach-5.2.0(3).exe
2009-01-16 18:26 2,413,642 a------- c:\program files\videomach-5.2.0(2).exe
2009-01-16 18:19 2,413,642 a------- c:\program files\videomach-5.2.0.exe
2009-01-16 13:39 111,373 a------- c:\program files\iStock_000004384645XSmall.jpg
2009-01-16 13:37 121,200 a------- c:\program files\iStock_000007425501XSmall.jpg
2009-01-16 13:32 75,624 a------- c:\program files\iStock_000007227452XSmall.jpg
2009-01-16 13:22 138,416 a------- c:\program files\iStock_000004021458XSmall.jpg
2009-01-16 12:45 185,205 a------- c:\program files\iStock_000001564054XSmall.jpg
2009-01-16 12:42 107,254 a------- c:\program files\iStock_000007935325XSmall.jpg
2009-01-16 12:25 159,365 a------- c:\program files\iStock_000001350032XSmall.jpg
2009-01-16 10:16 142,649 a------- c:\program files\iStock_000004607826XSmall.jpg
2009-01-16 09:10 58,906 a------- c:\program files\iStock_000007456460XSmall.jpg
2009-01-16 09:05 64,207 a------- c:\program files\iStock_000008132533XSmall.jpg
2009-01-16 00:12 55,751 a------- c:\program files\iStock_000006089315XSmall.jpg
2009-01-15 14:00 52,509 a------- c:\program files\iStock_000007526826XSmall.jpg
2009-01-13 23:44 1,051,957 a------- c:\program files\illustration(2).eps
2009-01-13 23:43 1,051,957 a------- c:\program files\illustration.eps
2009-01-13 15:15 6,578,176 a------- c:\program files\PhotoToMovieSetup.msi
2009-01-13 09:55 178,992,632 a------- c:\program files\ESDVSPRX2IEPCPF.exe
2009-01-13 09:05 183,291 a------- c:\program files\iStock_000001130671XSmall.jpg
2009-01-13 08:40 5,271,552 a------- c:\program files\PStory.msi
2009-01-13 08:19 197,719 a------- c:\program files\iStock_000001800432XSmall.jpg
2009-01-13 08:15 331,805,736 a------- c:\program files\WindowsXP-KB936929-SP3-x86-ENU.exe
2009-01-13 07:55 9,413,888 a------- c:\program files\Q883956_xpe_sp2_x86_enu.exe
2009-01-13 07:52 894,504 a------- c:\program files\WGAPluginInstall.exe
2009-01-13 07:46 27,288,880 a------- c:\program files\QuickTimeInstaller.exe
2009-01-13 07:42 12,754,672 a------- c:\program files\MP10Setup.exe
2009-01-13 07:39 27,926,896 a------- c:\program files\wmp11-windowsxp-x64-enu.exe
2009-01-12 19:56 264,877 a------- c:\program files\iStock_000007964010XSmall.jpg
2009-01-12 17:35 3,740,422 a------- c:\program files\wpm.exe
2009-01-12 02:31 160,718 a------- c:\program files\iStock_000001445280XSmall.jpg
2009-01-12 02:15 94,946 a------- c:\program files\iStock_000005131735XSmall.jpg
2009-01-12 01:59 117,788 a------- c:\program files\iStock_000000393735XSmall.jpg
2009-01-12 01:50 151,012 a------- c:\program files\iStock_000001088203XSmall.jpg
2009-01-12 00:40 193,398 a------- c:\program files\iStock_000001472955XSmall.jpg
2009-01-12 00:34 181,205 a------- c:\program files\iStock_000004190472XSmall.jpg
2009-01-11 23:38 115,952 a------- c:\program files\green.png
2009-01-11 22:40 141,626 a------- c:\program files\iStock_000006207177XSmall.jpg
2009-01-11 14:17 113,483 a------- c:\program files\iStock_000002484056XSmall.jpg
2009-01-11 14:07 171,777 a------- c:\program files\iStock_000004685407XSmall.jpg
2009-01-11 14:06 159,080 a------- c:\program files\iStock_000001514852XSmall.jpg
2009-01-11 03:26 78,116 a------- c:\program files\iStock_000005503907XSmall.jpg
2009-01-10 14:40 122,822 a------- c:\program files\iStock_000006598492XSmall.jpg
2009-01-10 04:05 247,144 a------- c:\program files\SiteBuilderSetup.exe
2009-01-09 19:45 14,558 a------- c:\program files\dancing_in_the_rain_op_800x532.jpg
2009-01-09 19:39 25,817 a------- c:\program files\dancing in rain 1.jpg
2009-01-02 11:45 13,833 a------- c:\program files\Craigslist and Kombucha 011.JPG
2009-01-01 14:10 604,360 a------- c:\program files\HandcraftersCompanion-HowToMakeYourOwnLipGloss.pdf
2009-01-01 14:08 6,100,988 a------- c:\program files\HandcraftersCompanion-Guide.pdf
2008-12-30 14:08 111,369 a------- c:\program files\iStock_000004467459XSmall.jpg
2008-12-30 13:53 122,704 a------- c:\program files\iStock_000004793954XSmall.jpg
2008-12-30 13:43 125,833 a------- c:\program files\iStock_000005685723XSmall.jpg
2008-12-30 13:14 99,984 a------- c:\program files\iStock_000005928930XSmall.jpg
2008-12-30 12:56 164,609 a------- c:\program files\iStock_000003114872XSmall.jpg
2008-12-28 00:45 161,578 a------- c:\program files\iStock_000002794021XSmall.jpg
2008-12-28 00:14 135,997 a------- c:\program files\iStock_000000267857XSmall.jpg
2008-12-28 00:02 122,418 a------- c:\program files\iStock_000006283599XSmall.jpg
2008-12-27 23:28 75,751 a------- c:\program files\iStock_000002998654XSmall.jpg
2008-12-27 23:20 118,786 a------- c:\program files\iStock_000005740999XSmall.jpg
2008-12-27 20:09 5,330,757 a------- c:\program files\iStock_000007115554Large.jpg
2008-12-27 19:42 181,584 a------- c:\program files\iStock_000006380601XSmall.jpg
2008-12-27 19:25 137,685 a------- c:\program files\iStock_000002419867XSmall.jpg
2008-12-27 17:17 93,212 a------- c:\program files\iStock_000001554245XSmall.jpg
2008-12-27 16:15 230,804 a------- c:\program files\iStock_000003837696XSmall.jpg
2008-12-26 20:45 159,872 a------- c:\program files\iStock_000001999984XSmall.jpg
2008-12-26 20:40 105,505 a------- c:\program files\iStock_000003494842XSmall.jpg
2008-12-26 00:43 119,523 a------- c:\program files\iStock_000004467894XSmall.jpg
2008-12-26 00:14 190,395 a------- c:\program files\iStock_000005665284XSmall.jpg
2008-12-26 00:01 53,733 a------- c:\program files\iStock_000007491539XSmall.jpg
2008-12-25 23:00:11 A------- 106,706 c:\program files\iStock_000007615531XSmall.jpg
2007-02-28 10:59 56 ---shr-- c:\windows\system32\29AB314F78.sys
2008-03-28 13:21 3,350 a--sh--- c:\windows\system32\KGyGaAvL.sys
2009-01-13 08:33 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012009011320090114\index.dat

============= FINISH: 19:57:49.03 ===============

descriptionComputer running alot slower and random shutting down of coral draw with pop up EmptyRe: Computer running alot slower and random shutting down of coral draw with pop up

more_horiz
Hello.

Go to Start > Control Panel > Add/Remove Programs and remove the following programs.

  • J2SE Runtime Environment 5.0 Update 11
  • Java(TM) 6 Update 10
  • Java(TM) 6 Update 3
  • Java(TM) 6 Update 5
  • Java(TM) 6 Update 7

Please download and run this tool.

Download Malwarebytes' Anti-Malware from Here

Double Click mbam-setup.exe to install the application.

  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately.


Post the contents of the MBAM Log.

descriptionComputer running alot slower and random shutting down of coral draw with pop up EmptyRe: Computer running alot slower and random shutting down of coral draw with pop up

more_horiz
Okay did all that u said and this is the log

Malwarebytes' Anti-Malware 1.36
Database version: 1983
Windows 5.1.2600 Service Pack 3

4/14/2009 9:18:26 PM
mbam-log-2009-04-14 (21-18-26).txt

Scan type: Quick Scan
Objects scanned: 76909
Time elapsed: 7 minute(s), 23 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 8
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a4730ebe-43a6-443e-9776-36915d323ad3} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

descriptionComputer running alot slower and random shutting down of coral draw with pop up EmptyRe: Computer running alot slower and random shutting down of coral draw with pop up

more_horiz
Just registry keys.
Lets do one more deep scan for rootkits.

1. Please download The Avenger by Swandog46 to your Desktop
Link: HERE or HERE.

  • Click on Avenger.zip to open the file
  • Extract avenger.exe to your desktop

2. Now, start The Avenger program by clicking on its icon on your desktop.

  • Leave the script box empty.
  • Leave the ticked box "Scan for rootkit" ticked.
  • Then tick "Disable any rootkits found"
  • Now click on the Execute to begin execution of the script.
  • Answer "Yes" twice when prompted.

    The Avenger will automatically do the following:

  • It will Restart your computer.
  • On reboot, it will briefly open a black command window on your desktop, this is normal.
  • After the restart, it creates a log file that should open with the results of Avenger’s actions. This log file will be located at C:\avenger.txt
  • The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
3. Please copy/paste the content of c:\avenger.txt into your reply.

descriptionComputer running alot slower and random shutting down of coral draw with pop up EmptyRe: Computer running alot slower and random shutting down of coral draw with pop up

more_horiz
Also i seem to be getting a pop up Windows Genuine Advantage Notification, what the heck is that


Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!


Completed script processing.

*******************

Finished! Terminate.

descriptionComputer running alot slower and random shutting down of coral draw with pop up EmptyRe: Computer running alot slower and random shutting down of coral draw with pop up

more_horiz
The genuine advantage is because your Windows is either fake, or not activated.

descriptionComputer running alot slower and random shutting down of coral draw with pop up EmptyRe: Computer running alot slower and random shutting down of coral draw with pop up

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum