Sorry, don't know how to delete a post.
Last edited by Shona; 06-09-2006 at 10:31 PM.
The Kaspersky log was unusually long. Many of the ‘locked objects’ are TEMPORARY FILES (certainly most of page two) and several items in QUARANTINE locations. No active infections are evident from that scan. Clean out any items in the Norton quarantine area. _Restore items (System Restore) are normally cleaned out as a last step once your PC has been put in good shape:
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\38BB34C1.006 Infected: not-a-virus:Monitor.Win32.Ardamax.k skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\38BB34C1.007 Infected: not-a-virus:Monitor.Win32.Ardamax.k skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\38BB34C1.exe Infected: not-a-virus:Monitor.Win32.Ardamax.23 skipped
C:\System Volume Information\_restore{B1C538C0-CBA3-4434-A006-53A338B37653}\RP283\A0202738.DLL Infected: not-a-virus:AdWare.Win32.MyWebSearch.aq skipped
C:\System Volume Information\_restore{B1C538C0-CBA3-4434-A006-53A338B37653}\RP283\A0202739.DLL Infected: not-a-virus:AdWare.Win32.MyWebSearch.an skipped
C:\System Volume Information\_restore{B1C538C0-CBA3-4434-A006-53A338B37653}\RP283\A0202740.EXE Infected: not-a-virus:AdWare.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{B1C538C0-CBA3-4434-A006-53A338B37653}\RP283\A0202741.DLL Infected: not-a-virus:AdWare.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{B1C538C0-CBA3-4434-A006-53A338B37653}\RP284\A0203738.dll Infected: not-a-virus:AdWare.Win32.MyWebSearch.an skipped
C:\System Volume Information\_restore{B1C538C0-CBA3-4434-A006-53A338B37653}\RP305\change.log Object is locked skipped
TEMPORARY files are both a significant source of clutter and potential hiding places for MALWARE content. Clean out those areas periodically - at least weekly:
Run the following tool in SAFE MODE for best results:
Clean out TEMPORARY FILES:
To clean your temp folder, recycle bin, etc..please download this free tool:
CCleaner http://www.ccleaner.com/downloadbuilds.asp
Install Options:
- Don't install any Toolbars, or other programs, should it ask you!
- Just uncheck the option of installing the Yahoo toolbar.
It will put a shortcut on your Desktop.
Select the ‘Cleaner’ BUTTON option (top LEFT), if not already selected. Use the ’Windows’ TAB up front by default.
- Uncheck ‘Cookies’ option (advisable)
- Optionally, Uncheck ‘Recently Typed URLs’ option (potentially still useful)
- Click the ‘Analyse’ button.
- Thereafter, click ‘Run Cleaner’ after you have reviewed what it proposes to clean.
What has been different over the last while? Think about what have been your most recent installs recently. What kind of file content have you been mainly creating recently (pictures, etc.) ?
Are any of your hard drive partitions more than 80% full? Is your RAM less than 1GB? Go to PCPITSTOP – www.pcpitstop.com and run their ‘full tests’ – that may help bring certain issue to light. Run the ‘Disk Health’ test for all of your drive partitions http://www.pcpitstop.com/pcpitstop/diskhealth.asp and report back any problems without actually running any defragmentation process at this time.
Let us see what is loaded on your PC:
- Run HijackThis and Click ‘Open the Misc Tools section’ button.
- Then click the ‘Open Uninstall Manager…’ button.
- Click the ‘Save list…’ button. Save uninstall_list to your desktop.
- Open the Uninstall list file and post in your next reply please.
448MB RAM. I know I haven't installed any programmes lately. Other than the ones you've mentioned. I think it might be my sister, she has a tendancy to download useless programmes such as myspace IM and things. Alot of them she just keeps on her area and she doesn't even use them. I made sure I uninstalled the myspace IM as it showed up on my area too. The thing is, I don't think my mum and sister have ever cleaned out there temporary internet files and cookies (I'll get them to do that straight away).
Other than that, nothing else has been downloaded. My sister does download alot of music and also uses msn. She accepts all sorts of files from her contacts (pictures, music etc) No matter how many times I tell her not to, she doesn't think it'll do any harm.
Like I mentioned before, our internet always disconnects itself and we often have to unplug and plug in our modem just to make it work again. I think it is time for a new one. We're with tiscali at the moment and we got the modem free, which I don't think is that good. But that's another problem
When I load sites I also notice at the bottom another site loading. I'm not sure how to explain this so i'll post a picture. It could just be nothing but i'm sure it's better to check:
And finally, here's the hijackthis uninstall list:
Ad-Aware SE Personal
Adobe Reader 7.0
CC_ccProxyExt
ccCommon
CCleaner (remove only)
ccPxyCore
Creative Jukebox Driver
Creative MediaSource
Creative Removable Disk Manager
Creative System Information
Creative Zen Sleek
ewido anti-spyware 4.0
GdiplusUpgrade
HijackThis 1.99.1
HP Digital Photo Advisor
HP Image Zone 4.5
HP Photosmart Cameras 4.5
HP PSC & OfficeJet 4.2
HP Software Update
Interactive User’s Guide
J2SE Runtime Environment 5.0 Update 2
J2SE Runtime Environment 5.0 Update 4
J2SE Runtime Environment 5.0 Update 6
Kaspersky Online Scanner
LimeWire 4.9.30
LiveReg (Symantec Corporation)
LiveUpdate 3.0 (Symantec Corporation)
Macromedia Flash Player 8
Macromedia Shockwave Player
Microsoft .NET Framework 1.1
Microsoft Office Standard Edition 2003
Microsoft Works
MP3 Player Utilities
MSN
MSN Messenger 7.5
MSRedist
Norton AntiSpam
Norton AntiSpam
Norton AntiVirus 2005
Norton Internet Security
Norton Internet Security
Norton Internet Security
Norton Internet Security
Norton Internet Security
Norton Internet Security
Norton Internet Security
Norton Internet Security
Norton Internet Security 2005 (Symantec Corporation)
Norton WMI Update
Norton WMI Update
overland
Realtek AC'97 Audio
SAGEM F@st 800-840
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901190)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Shockwave
Sonic MyDVD
Sonic RecordNow!
SPBBC
SwiftSwitch
Symantec Script Blocking Installer
SymNet
Uniblue Registry Booster
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Update for Windows XP (KB916595)
VIA/S3G Display Driver
Viewpoint Media Player
WildTangent Web Driver
Windows Genuine Advantage v1.3.0254.0
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows Media Encoder 9 Series
Windows Media Format Runtime
Windows Media Player 10
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890047
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
The image that you posted is fine - if you look closely it has 'dalonline' which is normal when your enter the DAL Forums.
UNINSTALL ITEMS: In Add/Remove Programs (Control Panel) the need to be uninstalled (allows known vulnerabilities to be potentially actioned):
J2SE Runtime Environment 5.0 Update 2
J2SE Runtime Environment 5.0 Update 4
Optionally, suggest removing the following as they may be resource intensive in nature and/or unnecessary:
Viewpoint Media Player
WildTangent Web Driver
Also note that PCs that use P2P programs such as Limewire can often find themselves getting into horrible problems. Stop running that app, for now, as a minimun precaution or remove altogether:
LimeWire 4.9.30
I urge you to run the suggested scans at PCPITSTOP (and use their forum resources if needed) - it will tell you where your PC may be performing poorly (relative to other PCs) or what potentially might need to be addressed. I also need to know whether there are any potential performance robbing issues caused by low hard drive space (in any given partition/drive) or indications or high fragmentation levels.
Posting separate HijackThis logs in separate topics, for each user profile, might also provide additional insights and potential clues for further investigation.
Hi, i've uninstalled all the programs you mentioned. I did run the tests, everything came up fine except a minor problem with the internet. So I clicked on it and everything seemed fine except for the average ping time which they had highlighted in red: 365ms. I have no idea what this means though.
On the C drive there is 21.6GB of free space, 8.32GB used. On the D drive there is 147GB free and 2.59GB used.
I'm the only one in the house at the moment, when they come home i'll tell them to do a hijackthis log.