Pc Slower and Slower,need help!!!!!

BullGuard Antivirus Forum > Bullguard zone > BullGuard Trial users > Pc Slower and Slower,need help!!!!!

Forum Quick Jump

[ << Previous Thread | Next Thread >> ]

vuthda
New Member

Date Joined May 2006
Total Posts : 10

Posted 1-6-2007 5:44 (GMT +1)

my pc recently run slower and slower, i sure that it was infected by virus, because there many .exe file that name the same Folder the folder.here is my log file:
Logfile of HijackThis v1.99.1
Scan saved at 3:46:05 PM, on 1/1/2000
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\tlntsvr.exe
C:\WINDOWS\Explorer.exe
C:\DOCUME~1\ATECH\taskmgr.exe
C:\WINDOWS\system32\SCCVHOST.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\ATECH\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.0.200:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = pc3;192.168.0.3;192.168.0.6;<local>
F2 - REG:system.ini: Shell=Explorer.exe SVICHOST.exe
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\userinit.exe,C:\DOCUME~1\LOCALS~1\csrss.exe
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SCCVHOST] C:\WINDOWS\system32\SCCVHOST.exe
O4 - HKLM\..\Run: [The King of Ghost]
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo Messengger] C:\WINDOWS\system32\SVICHOST.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{20F9C291-9CEE-4661-82BC-3EB63EC88A58}: NameServer = 192.168.0.1
O23 - Service: KSD2Service - Unknown owner - C:\WINDOWS\system32\SVCH0ST.exe (file missing)
O23 - Service: MsInfo Service (MsInfo) - Unknown owner - C:\RECYCLER\MsInfo\MsInfo.exe (file missing)

thank in advance for your help,

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 13645

Posted 1-6-2007 7:03 (GMT +1)

Hi vuthda

Install antivirus and Firewall

http://free.grisoft.com/freeweb.php/doc/1/

http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp?lid=zaskulist_download

Update AVG, run a full Systemscan.

Reboot normally, richtclick on hijackthis exe and rename it to hjt exe

post new hijacthis log using hjt exe

Do NOT post your problem in someone elses thread.

Start a new topic so that it may receive proper attention.

Do not PM me with logfiles. They will be deleted

Forum Information

Currently it is Saturday, November 22, 2008 6:52 PM (GMT +1)
There are a total of 64.070 posts in 15.845 threads.
In the last 3 days there were 31 new threads and 162 reply posts. View Active Threads