Author Topic: [Inactive] Super slow IE Chrome redraws etc to the point of not responding.  (Read 2137 times)

0 Members and 1 Guest are viewing this topic.

Offline Marco

  • Bronze Member
  • Posts: 70
I think you guys have helped me with this machine before. Almost always running Chrome for internet unless IE is required. All programs start off running slow, then quickly deteriorate to the point of not responding. MBAM just took almost 2 minutes to close. Avast found nothing. MBAM found almost nothing. Haven't run anything else. Here is the HJT file:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:39:30 AM, on 6/22/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\System32\DSentry.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.net/
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [AdobeUpdater] "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe"
O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {E6BB2089-163F-466B-812A-748096614DFD} (CAScanner Control) - http://cainternetsecurity.net/scanner/cascanner.cab
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe

--
End of file - 5549 bytes
« Last Edit: June 22, 2012, 12:15:21 PM by Hoov »



Offline Hoov

  • Malware Removal Mentors
  • Global Moderator
  • Diamond Member
  • Posts: 22719
  • Unwilling part owner of Gov't. Motors and Chrysler
    • Hoov's Personal Site
My name is Hoov and I will be helping you with your problem, as you have already been helped here before I am going to skip the preamble, you know how we work and what we need.

First things have changed a bit since you last posted here. Please read [NEW Instructions!] What Do I Do First? just post the requested logs here.

After that, could you please post the Malwarebytes' Anti-Malware log that you just ran?

Also please follow the instructions below and run Ccleaner. And can you tell me when the last time you ran a defragmentation routine on your harddrive?


1.Download and scan with CCleaner
When you get to the website, there is a dark grey box on the left side with two tabs along the top. Inside this Dark Grey box is a light grey box. Below that light grey box is where the download links are at. The pay amount is for paid support.
2. Before first use, select Options > Advanced and UNCHECK "Only delete files in Windows Temp folder older than 48 hours"
3. Then select the items you wish to clean up.
In the Windows Tab:

    • Clean all entries in the "Internet Explorer" section except Cookies if you want to keep those.
    • Clean all the entries in the "Windows Explorer" section.
    • Clean all entries in the "System" section.
    • Clean all entries in the "Advanced" section.
    • Clean any others that you choose.


    In the Applications Tab
      • Clean all except cookies in the Firefox/Mozilla section if you use it.
      • Clean all in the Opera section if you use it.
      • Clean Sun Java in the Internet Section.
      • Clean any others that you choose.


      4. Click the "Run Cleaner" button.
      5. A pop up box will appear advising this process will permanently delete files from your system.
      6. Click "OK" and it will scan and clean your system.
      7. Click "exit" when done.

      Consumer Security

      If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

      Offline Marco

      • Bronze Member
      • Posts: 70
      MBAM and DDS logs. Thank you!


      Malwarebytes Anti-Malware 1.61.0.1400
      www.malwarebytes.org

      Database version: v2012.06.21.11

      Windows XP Service Pack 3 x86 NTFS
      Internet Explorer 8.0.6001.18702
      JoAnne Cunningham :: DBJRZ541 [administrator]

      6/25/2012 12:41:21 PM
      mbam-log-2012-06-25 (12-41-21).txt

      Scan type: Quick scan
      Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
      Scan options disabled: P2P
      Objects scanned: 216263
      Time elapsed: 21 minute(s), 37 second(s)

      Memory Processes Detected: 0
      (No malicious items detected)

      Memory Modules Detected: 0
      (No malicious items detected)

      Registry Keys Detected: 0
      (No malicious items detected)

      Registry Values Detected: 0
      (No malicious items detected)

      Registry Data Items Detected: 0
      (No malicious items detected)

      Folders Detected: 0
      (No malicious items detected)

      Files Detected: 0
      (No malicious items detected)

      (end)


      .
      DDS (Ver_2011-08-26.01) - NTFSx86
      Internet Explorer: 8.0.6001.18702
      Run by JoAnne Cunningham at 13:50:25 on 2012-06-25
      Microsoft Windows XP Home Edition  5.1.2600.3.1252.1.1033.18.254.44 [GMT -7:00]
      .
      AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
      .
      ============== Running Processes ===============
      .
      C:\WINDOWS\system32\svchost -k DcomLaunch
      svchost.exe
      C:\WINDOWS\System32\svchost.exe -k netsvcs
      svchost.exe
      svchost.exe
      C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
      C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
      C:\WINDOWS\System32\hkcmd.exe
      C:\WINDOWS\System32\DSentry.exe
      C:\WINDOWS\system32\dla\tfswctrl.exe
      C:\WINDOWS\BCMSMMSG.exe
      C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
      C:\Program Files\WinZip\WZQKPICK.EXE
      svchost.exe
      C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\WINDOWS\System32\svchost.exe -k imgsvc
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
      C:\WINDOWS\System32\HPZipm12.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
      C:\Program Files\Google\Chrome\Application\chrome.exe
      C:\Program Files\Google\Chrome\Application\chrome.exe
      C:\Program Files\Google\Chrome\Application\chrome.exe
      C:\Program Files\Google\Chrome\Application\chrome.exe
      C:\WINDOWS\system32\wscntfy.exe
      .
      ============== Pseudo HJT Report ===============
      .
      uStart Page = hxxp://www.msn.net/
      uInternet Connection Wizard,ShellNext = iexplore
      BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
      BHO: {243b17de-77c7-46bf-b94b-0b5f309a0e64} - c:\program files\microsoft money\system\mnyside.dll
      BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\tfswshx.dll
      BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\alwil software\avast5\aswWebRepIE.dll
      BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
      BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\alwil software\avast5\aswWebRepIE.dll
      TB: {4982D40A-C53B-4615-B15B-B5B5E98D167C} - No File
      TB: {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - No File
      TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
      uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
      uRun: [Sonic RecordNow!]
      uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
      uRun: [MoneyAgent] "c:\program files\microsoft money\system\mnyexpr.exe"
      uRun: [AdobeUpdater] "c:\program files\common files\adobe\updater5\AdobeUpdater.exe"
      mRun: [avast5] c:\progra~1\alwils~1\avast5\avastUI.exe /nogui
      mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
      mRun: [StorageGuard] "c:\program files\common files\sonic\update manager\sgtray.exe" /r
      mRun: [Microsoft Works Update Detection] c:\program files\common files\microsoft shared\works shared\WkUFind.exe
      mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
      mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
      mRun: [DVDSentry] c:\windows\system32\DSentry.exe
      mRun: [dla] c:\windows\system32\dla\tfswctrl.exe
      mRun: [BCMSMMSG] BCMSMMSG.exe
      mRun: [Adobe Photo Downloader] "c:\program files\adobe\photoshop album starter edition\3.0\apps\apdproxy.exe"
      mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
      StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hppsc2~1.lnk - c:\program files\hewlett-packard\digital imaging\bin\hpobnz08.exe
      StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpoddt~1.lnk - c:\program files\hewlett-packard\digital imaging\bin\hpotdd01.exe
      StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
      StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\winzip~1.lnk - c:\program files\winzip\WZQKPICK.EXE
      IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
      IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
      DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
      DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
      DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
      DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
      DPF: {E6BB2089-163F-466B-812A-748096614DFD} - hxxp://cainternetsecurity.net/scanner/cascanner.cab
      TCP: DhcpNameServer = 75.75.75.75 75.75.76.76
      TCP: Interfaces\{5905D8C4-30C0-4316-9CDA-CEAAAD747E30} : DhcpNameServer = 75.75.75.75 75.75.76.76
      Notify: igfxcui - igfxsrvc.dll
      SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
      .
      ============= SERVICES / DRIVERS ===============
      .
      R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2011-7-11 612184]
      R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2010-3-28 337880]
      R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2010-3-28 20696]
      .
      =============== Created Last 30 ================
      .
      2012-06-22 01:17:47   22344   ----a-w-   c:\windows\system32\drivers\mbam.sys
      2012-06-22 01:17:46   --------   d-----w-   c:\program files\Malwarebytes' Anti-Malware
      2012-06-14 03:45:39   521728   ------w-   c:\windows\system32\dllcache\jsdbgui.dll
      2012-06-08 21:54:10   --------   d-----w-   c:\documents and settings\joanne cunningham\local settings\application data\CRE
      .
      ==================== Find3M  ====================
      .
      2012-06-02 22:19:44   22040   ----a-w-   c:\windows\system32\wucltui.dll.mui
      2012-06-02 22:19:38   219160   ----a-w-   c:\windows\system32\wuaucpl.cpl
      2012-06-02 22:19:38   15384   ----a-w-   c:\windows\system32\wuaucpl.cpl.mui
      2012-06-02 22:19:34   15384   ----a-w-   c:\windows\system32\wuapi.dll.mui
      2012-06-02 22:19:30   17944   ----a-w-   c:\windows\system32\wuaueng.dll.mui
      2012-06-02 22:18:58   275696   ----a-w-   c:\windows\system32\mucltui.dll
      2012-06-02 22:18:58   214256   ----a-w-   c:\windows\system32\muweb.dll
      2012-06-02 22:18:58   17136   ----a-w-   c:\windows\system32\mucltui.dll.mui
      2012-05-31 13:22:09   599040   ----a-w-   c:\windows\system32\crypt32.dll
      2012-05-16 15:08:26   916992   ----a-w-   c:\windows\system32\wininet.dll
      2012-05-15 13:20:33   1863168   ----a-w-   c:\windows\system32\win32k.sys
      2012-05-11 14:42:33   43520   ----a-w-   c:\windows\system32\licmgr10.dll
      2012-05-11 14:42:33   1469440   ------w-   c:\windows\system32\inetcpl.cpl
      2012-05-11 11:38:02   385024   ----a-w-   c:\windows\system32\html.iec
      2012-05-04 13:12:30   2192640   ----a-w-   c:\windows\system32\ntoskrnl.exe
      2012-05-04 12:32:19   2069120   ----a-w-   c:\windows\system32\ntkrnlpa.exe
      2012-05-02 13:46:36   139656   ----a-w-   c:\windows\system32\drivers\rdpwd.sys
      .
      ============= FINISH: 13:52:16.90 ===============



      .
      UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
      IF REQUESTED, ZIP IT UP & ATTACH IT
      .
      DDS (Ver_2011-08-26.01)
      .
      Microsoft Windows XP Home Edition
      Boot Device: \Device\HarddiskVolume2
      Install Date: 2/16/2004 1:01:27 PM
      System Uptime: 6/22/2012 10:52:32 AM (75 hours ago)
      .
      Motherboard: Dell Computer Corp. |  | 0G1548
      Processor:               Intel(R) Pentium(R) 4 CPU 2.66GHz | Microprocessor | 2658/533mhz
      .
      ==== Disk Partitions =========================
      .
      C: is FIXED (NTFS) - 37 GiB total, 20.827 GiB free.
      D: is CDROM ()
      E: is Removable
      .
      ==== Disabled Device Manager Items =============
      .
      ==== System Restore Points ===================
      .
      RP2777: 6/7/2012 1:49:30 PM - System Checkpoint
      RP2778: 6/8/2012 3:26:31 PM - System Checkpoint
      RP2779: 6/9/2012 3:47:59 PM - System Checkpoint
      RP2780: 6/10/2012 4:26:09 PM - System Checkpoint
      RP2781: 6/11/2012 5:14:14 PM - System Checkpoint
      RP2782: 6/12/2012 5:20:16 PM - System Checkpoint
      RP2783: 6/13/2012 5:31:08 PM - System Checkpoint
      RP2784: 6/13/2012 9:19:38 PM - Software Distribution Service 3.0
      RP2785: 6/15/2012 8:38:15 AM - System Checkpoint
      RP2786: 6/16/2012 9:11:17 AM - System Checkpoint
      RP2787: 6/17/2012 10:10:21 AM - System Checkpoint
      RP2788: 6/18/2012 10:33:38 AM - System Checkpoint
      RP2789: 6/19/2012 11:31:23 AM - System Checkpoint
      RP2790: 6/20/2012 11:54:41 AM - System Checkpoint
      RP2791: 6/21/2012 1:15:17 PM - System Checkpoint
      RP2792: 6/21/2012 5:24:39 PM - ARO 2012 - Before Installation
      RP2793: 6/22/2012 5:57:19 PM - System Checkpoint
      RP2794: 6/23/2012 6:57:17 PM - System Checkpoint
      RP2795: 6/24/2012 7:57:18 PM - System Checkpoint
      .
      ==== Installed Programs ======================
      .
      Adobe Acrobat 5.0
      Adobe Flash Player 10 ActiveX
      Adobe Flash Player 10 Plugin
      Adobe Reader 9.1
      Adobe® Photoshop® Album Starter Edition 3.0
      AOL Uninstaller
      avast! Free Antivirus
      Banctec Service Agreement
      BCM V.92 56K Modem
      Broadcom Management Programs
      CCleaner
      Compatibility Pack for the 2007 Office system
      Critical Update for Windows Media Player 11 (KB959772)
      Dell Networking Guide
      DS21Patch
      DVDSentry
      Google Chrome
      Google Update Helper
      Help and Support Customization
      HijackThis 2.0.2
      Hotfix for Windows Media Format 11 SDK (KB929399)
      Hotfix for Windows Media Player 11 (KB939683)
      Hotfix for Windows XP (KB2158563)
      Hotfix for Windows XP (KB2443685)
      Hotfix for Windows XP (KB2570791)
      Hotfix for Windows XP (KB2633952)
      Hotfix for Windows XP (KB952287)
      Hotfix for Windows XP (KB970653-v3)
      Hotfix for Windows XP (KB976098-v2)
      Hotfix for Windows XP (KB979306)
      Hotfix for Windows XP (KB981793)
      HP Memories Disc
      HP Photo and Imaging 2.0 - All-in-One
      HP Photo and Imaging 2.0 - All-in-One Drivers
      HP Photo and Imaging 2.0 - hp psc 2170 series
      hp psc 2170 series
      Intel(R) Extreme Graphics Driver
      Internet Explorer Default Page
      Java 2 Runtime Environment, SE v1.4.2
      Java Auto Updater
      Java(TM) 6 Update 18
      KODAK Picture CD Volume 3 Issue 2
      Malwarebytes Anti-Malware version 1.61.0.1400
      Microsoft .NET Framework 1.1
      Microsoft .NET Framework 1.1 Security Update (KB2656353)
      Microsoft .NET Framework 1.1 Security Update (KB2656370)
      Microsoft .NET Framework 1.1 Security Update (KB979906)
      Microsoft Compression Client Pack 1.0 for Windows XP
      Microsoft Data Access Components KB870669
      Microsoft Encarta Encyclopedia Standard 2003
      Microsoft Money 2003
      Microsoft Money 2003 System Pack
      Microsoft Office XP Professional
      Microsoft Picture It! Photo 7.0
      Microsoft Streets and Trips 2002
      Microsoft User-Mode Driver Framework Feature Pack 1.0
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
      Microsoft Web Publishing Wizard 1.52
      Microsoft Word 2002
      Microsoft Works 2003 Setup Launcher
      Microsoft Works 7.0
      Microsoft Works Suite Add-in for Microsoft Word
      Modem Helper
      MSXML 4.0 SP2 (KB927978)
      MSXML 4.0 SP2 (KB936181)
      MSXML 4.0 SP2 (KB954430)
      MSXML 4.0 SP2 (KB973688)
      OLYMPUS CAMEDIA Master 4.1
      Photo Organizer
      Photo Viewer
      PowerDVD
      Security Update for Microsoft Windows (KB2564958)
      Security Update for Step By Step Interactive Training (KB898458)
      Security Update for Step By Step Interactive Training (KB923723)
      Security Update for Windows Internet Explorer 8 (KB2183461)
      Security Update for Windows Internet Explorer 8 (KB2360131)
      Security Update for Windows Internet Explorer 8 (KB2416400)
      Security Update for Windows Internet Explorer 8 (KB2482017)
      Security Update for Windows Internet Explorer 8 (KB2497640)
      Security Update for Windows Internet Explorer 8 (KB2510531)
      Security Update for Windows Internet Explorer 8 (KB2530548)
      Security Update for Windows Internet Explorer 8 (KB2544521)
      Security Update for Windows Internet Explorer 8 (KB2559049)
      Security Update for Windows Internet Explorer 8 (KB2586448)
      Security Update for Windows Internet Explorer 8 (KB2618444)
      Security Update for Windows Internet Explorer 8 (KB2647516)
      Security Update for Windows Internet Explorer 8 (KB2675157)
      Security Update for Windows Internet Explorer 8 (KB2699988)
      Security Update for Windows Internet Explorer 8 (KB971961)
      Security Update for Windows Internet Explorer 8 (KB972260)
      Security Update for Windows Internet Explorer 8 (KB974455)
      Security Update for Windows Internet Explorer 8 (KB976325)
      Security Update for Windows Internet Explorer 8 (KB978207)
      Security Update for Windows Internet Explorer 8 (KB981332)
      Security Update for Windows Internet Explorer 8 (KB982381)
      Security Update for Windows Media Player (KB2378111)
      Security Update for Windows Media Player (KB911564)
      Security Update for Windows Media Player (KB952069)
      Security Update for Windows Media Player (KB954155)
      Security Update for Windows Media Player (KB968816)
      Security Update for Windows Media Player (KB973540)
      Security Update for Windows Media Player (KB975558)
      Security Update for Windows Media Player (KB978695)
      Security Update for Windows Media Player 11 (KB936782)
      Security Update for Windows Media Player 11 (KB954154)
      Security Update for Windows Media Player 6.4 (KB925398)
      Security Update for Windows Media Player 9 (KB911565)
      Security Update for Windows Media Player 9 (KB917734)
      Security Update for Windows Media Player 9 (KB936782)
      Security Update for Windows XP (KB2079403)
      Security Update for Windows XP (KB2115168)
      Security Update for Windows XP (KB2121546)
      Security Update for Windows XP (KB2160329)
      Security Update for Windows XP (KB2229593)
      Security Update for Windows XP (KB2259922)
      Security Update for Windows XP (KB2279986)
      Security Update for Windows XP (KB2286198)
      Security Update for Windows XP (KB2296011)
      Security Update for Windows XP (KB2296199)
      Security Update for Windows XP (KB2347290)
      Security Update for Windows XP (KB2360937)
      Security Update for Windows XP (KB2387149)
      Security Update for Windows XP (KB2393802)
      Security Update for Windows XP (KB2412687)
      Security Update for Windows XP (KB2419632)
      Security Update for Windows XP (KB2423089)
      Security Update for Windows XP (KB2436673)
      Security Update for Windows XP (KB2440591)
      Security Update for Windows XP (KB2443105)
      Security Update for Windows XP (KB2476490)
      Security Update for Windows XP (KB2476687)
      Security Update for Windows XP (KB2478960)
      Security Update for Windows XP (KB2478971)
      Security Update for Windows XP (KB2479628)
      Security Update for Windows XP (KB2479943)
      Security Update for Windows XP (KB2481109)
      Security Update for Windows XP (KB2483185)
      Security Update for Windows XP (KB2485376)
      Security Update for Windows XP (KB2485663)
      Security Update for Windows XP (KB2491683)
      Security Update for Windows XP (KB2503658)
      Security Update for Windows XP (KB2503665)
      Security Update for Windows XP (KB2506212)
      Security Update for Windows XP (KB2506223)
      Security Update for Windows XP (KB2507618)
      Security Update for Windows XP (KB2507938)
      Security Update for Windows XP (KB2508272)
      Security Update for Windows XP (KB2508429)
      Security Update for Windows XP (KB2509553)
      Security Update for Windows XP (KB2511455)
      Security Update for Windows XP (KB2524375)
      Security Update for Windows XP (KB2535512)
      Security Update for Windows XP (KB2536276-v2)
      Security Update for Windows XP (KB2536276)
      Security Update for Windows XP (KB2544893-v2)
      Security Update for Windows XP (KB2544893)
      Security Update for Windows XP (KB2555917)
      Security Update for Windows XP (KB2562937)
      Security Update for Windows XP (KB2566454)
      Security Update for Windows XP (KB2567053)
      Security Update for Windows XP (KB2567680)
      Security Update for Windows XP (KB2570222)
      Security Update for Windows XP (KB2570947)
      Security Update for Windows XP (KB2584146)
      Security Update for Windows XP (KB2585542)
      Security Update for Windows XP (KB2592799)
      Security Update for Windows XP (KB2598479)
      Security Update for Windows XP (KB2603381)
      Security Update for Windows XP (KB2618451)
      Security Update for Windows XP (KB2619339)
      Security Update for Windows XP (KB2620712)
      Security Update for Windows XP (KB2621440)
      Security Update for Windows XP (KB2624667)
      Security Update for Windows XP (KB2631813)
      Security Update for Windows XP (KB2633171)
      Security Update for Windows XP (KB2639417)
      Security Update for Windows XP (KB2641653)
      Security Update for Windows XP (KB2646524)
      Security Update for Windows XP (KB2647518)
      Security Update for Windows XP (KB2653956)
      Security Update for Windows XP (KB2659262)
      Security Update for Windows XP (KB2660465)
      Security Update for Windows XP (KB2661637)
      Security Update for Windows XP (KB2676562)
      Security Update for Windows XP (KB2685939)
      Security Update for Windows XP (KB2686509)
      Security Update for Windows XP (KB2695962)
      Security Update for Windows XP (KB2707511)
      Security Update for Windows XP (KB2709162)
      Security Update for Windows XP (KB923561)
      Security Update for Windows XP (KB923689)
      Security Update for Windows XP (KB938464)
      Security Update for Windows XP (KB941569)
      Security Update for Windows XP (KB946648)
      Security Update for Windows XP (KB950759)
      Security Update for Windows XP (KB950760)
      Security Update for Windows XP (KB950762)
      Security Update for Windows XP (KB950974)
      Security Update for Windows XP (KB951066)
      Security Update for Windows XP (KB951376-v2)
      Security Update for Windows XP (KB951376)
      Security Update for Windows XP (KB951698)
      Security Update for Windows XP (KB951748)
      Security Update for Windows XP (KB952004)
      Security Update for Windows XP (KB952954)
      Security Update for Windows XP (KB953838)
      Security Update for Windows XP (KB953839)
      Security Update for Windows XP (KB954211)
      Security Update for Windows XP (KB954600)
      Security Update for Windows XP (KB955069)
      Security Update for Windows XP (KB956390)
      Security Update for Windows XP (KB956391)
      Security Update for Windows XP (KB956572)
      Security Update for Windows XP (KB956744)
      Security Update for Windows XP (KB956802)
      Security Update for Windows XP (KB956803)
      Security Update for Windows XP (KB956841)
      Security Update for Windows XP (KB956844)
      Security Update for Windows XP (KB957095)
      Security Update for Windows XP (KB957097)
      Security Update for Windows XP (KB958215)
      Security Update for Windows XP (KB958644)
      Security Update for Windows XP (KB958687)
      Security Update for Windows XP (KB958690)
      Security Update for Windows XP (KB958869)
      Security Update for Windows XP (KB959426)
      Security Update for Windows XP (KB960225)
      Security Update for Windows XP (KB960714)
      Security Update for Windows XP (KB960715)
      Security Update for Windows XP (KB960803)
      Security Update for Windows XP (KB960859)
      Security Update for Windows XP (KB961371)
      Security Update for Windows XP (KB961373)
      Security Update for Windows XP (KB961501)
      Security Update for Windows XP (KB963027)
      Security Update for Windows XP (KB968537)
      Security Update for Windows XP (KB969059)
      Security Update for Windows XP (KB969897)
      Security Update for Windows XP (KB969898)
      Security Update for Windows XP (KB969947)
      Security Update for Windows XP (KB970238)
      Security Update for Windows XP (KB970430)
      Security Update for Windows XP (KB971468)
      Security Update for Windows XP (KB971486)
      Security Update for Windows XP (KB971557)
      Security Update for Windows XP (KB971633)
      Security Update for Windows XP (KB971657)
      Security Update for Windows XP (KB972260)
      Security Update for Windows XP (KB972270)
      Security Update for Windows XP (KB973346)
      Security Update for Windows XP (KB973354)
      Security Update for Windows XP (KB973507)
      Security Update for Windows XP (KB973525)
      Security Update for Windows XP (KB973869)
      Security Update for Windows XP (KB973904)
      Security Update for Windows XP (KB974112)
      Security Update for Windows XP (KB974318)
      Security Update for Windows XP (KB974392)
      Security Update for Windows XP (KB974571)
      Security Update for Windows XP (KB975025)
      Security Update for Windows XP (KB975467)
      Security Update for Windows XP (KB975560)
      Security Update for Windows XP (KB975561)
      Security Update for Windows XP (KB975562)
      Security Update for Windows XP (KB975713)
      Security Update for Windows XP (KB977165)
      Security Update for Windows XP (KB977816)
      Security Update for Windows XP (KB977914)
      Security Update for Windows XP (KB978037)
      Security Update for Windows XP (KB978251)
      Security Update for Windows XP (KB978262)
      Security Update for Windows XP (KB978338)
      Security Update for Windows XP (KB978542)
      Security Update for Windows XP (KB978601)
      Security Update for Windows XP (KB978706)
      Security Update for Windows XP (KB979309)
      Security Update for Windows XP (KB979482)
      Security Update for Windows XP (KB979559)
      Security Update for Windows XP (KB979683)
      Security Update for Windows XP (KB979687)
      Security Update for Windows XP (KB980195)
      Security Update for Windows XP (KB980218)
      Security Update for Windows XP (KB980232)
      Security Update for Windows XP (KB980436)
      Security Update for Windows XP (KB981322)
      Security Update for Windows XP (KB981852)
      Security Update for Windows XP (KB981957)
      Security Update for Windows XP (KB981997)
      Security Update for Windows XP (KB982132)
      Security Update for Windows XP (KB982214)
      Security Update for Windows XP (KB982665)
      Security Update for Windows XP (KB982802)
      Shockwave
      Sonic DLA
      Sonic RecordNow!
      Sonic Update Manager
      Terayon DOCSIS Modem
      Update for Windows Internet Explorer 8 (KB973874)
      Update for Windows Internet Explorer 8 (KB976662)
      Update for Windows Internet Explorer 8 (KB976749)
      Update for Windows Internet Explorer 8 (KB980182)
      Update for Windows XP (KB2141007)
      Update for Windows XP (KB2345886)
      Update for Windows XP (KB2467659)
      Update for Windows XP (KB2541763)
      Update for Windows XP (KB2607712)
      Update for Windows XP (KB2616676-v2)
      Update for Windows XP (KB2641690)
      Update for Windows XP (KB2718704)
      Update for Windows XP (KB951072-v2)
      Update for Windows XP (KB951978)
      Update for Windows XP (KB955759)
      Update for Windows XP (KB955839)
      Update for Windows XP (KB967715)
      Update for Windows XP (KB968389)
      Update for Windows XP (KB971029)
      Update for Windows XP (KB971737)
      Update for Windows XP (KB973687)
      Update for Windows XP (KB973815)
      Viewpoint Media Player
      WebFldrs XP
      Windows Driver Package - (mr7910) Image  (08/08/2006 1.4.0.0)
      Windows Genuine Advantage Notifications (KB905474)
      Windows Genuine Advantage v1.3.0254.0
      Windows Internet Explorer 8
      Windows Media Format 11 runtime
      Windows Media Player 11
      Windows XP Service Pack 3
      WinZip 14.0
      Works Suite OS Pack
      .
      ==== Event Viewer Messages From Past Week ========
      .
      6/20/2012 4:25:41 PM, error: Service Control Manager [7011]  - Timeout (30000 milliseconds) waiting for a transaction response from the stisvc service.
      .
      ==== End Of File ===========================

      Offline Hoov

      • Malware Removal Mentors
      • Global Moderator
      • Diamond Member
      • Posts: 22719
      • Unwilling part owner of Gov't. Motors and Chrysler
        • Hoov's Personal Site
      Sorry about no response. I could have sworn I had posted.

      I notice that your computer had not been rebooted for 75 hours when the DDS log had been run, have you tried turning the computer off and letting it get cold, then starting it up and see how it responds?

      Consumer Security

      If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

      Offline Marco

      • Bronze Member
      • Posts: 70
      Tried shutting down and (relatively) cold start-up. Still slow in all aspects. Redraws are a bit better, but still not reasonable. Opening and closing are still still slow as well.

      Offline Hoov

      • Malware Removal Mentors
      • Global Moderator
      • Diamond Member
      • Posts: 22719
      • Unwilling part owner of Gov't. Motors and Chrysler
        • Hoov's Personal Site
      Right click on the taskbar and select taskmanager. Let me know what the CPU percentage is.

      Can you tell me when you defragmented last?



      Consumer Security

      If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

      Offline Marco

      • Bronze Member
      • Posts: 70
      CPU percentage stabilizes 2-4%. Spikes occasionally at 19-21%. It's been a year or two since any defrag was ran. I'm doing it now.

      Offline Marco

      • Bronze Member
      • Posts: 70
      Ran defrag, but still slow??? It's better, but not even close to right.

      Offline Hoov

      • Malware Removal Mentors
      • Global Moderator
      • Diamond Member
      • Posts: 22719
      • Unwilling part owner of Gov't. Motors and Chrysler
        • Hoov's Personal Site
      Lets try a clean boot and see what happens.

      I need you to reboot windows cleanly. To do that please go to the run command and type in msconfig . Once that starts, select selective startup, and then uncheck the load startup items. Now click on the services tab, and down near the bottom of the window, check the box that says Hide all Microsoft Services now go up and uncheck all the services still listed, make sure you scroll down the list if need to unselect all the non Microsoft services. Now click apply, then click OK and reboot the computer.

      Test your computer, see how things startup. Once you have decided, run msconfig and select normal startup, now click apply then OK and reboot.

      Then come back here and let me know.

      Consumer Security

      If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

      Offline Marco

      • Bronze Member
      • Posts: 70
      The clean start up was not noticeably faster. The search.conduit hijack had infected Chrome, so I removed that and the mapit1.ourtoolbar extension, but IE and Chrome start up is still slow as are redraws, although not to the point of crashing anymore.

      I realize the search.conduit information would have been helpful up front, so I apologize. This is my mom's machine and she didn't mention the start page change until I came to continue working on the trouble this morning.

      Offline Hoov

      • Malware Removal Mentors
      • Global Moderator
      • Diamond Member
      • Posts: 22719
      • Unwilling part owner of Gov't. Motors and Chrysler
        • Hoov's Personal Site
      * Anyone other than the originator of this thread, you would be best advised to not run combofix without guidance from someone trained in its use. It is a very powerful tool that can cause damage to your computer if used wrong.

      Run comboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

      http://www.bleepingcomputer.com/combofix/how-to-use-combofix

      * Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix. Also make sure you close all your browsers just before the instructions tell you to start the scanner.

      Please include the C:\ComboFix.txt in your next reply for further review.

      Note:
      Do not mouseclick combofix''s window while it''s running. That may cause it to stall

      Consumer Security

      If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

      Offline Marco

      • Bronze Member
      • Posts: 70
      I had to hard reboot. I tried running Combo Fix again and had the same result.

      Offline Hoov

      • Malware Removal Mentors
      • Global Moderator
      • Diamond Member
      • Posts: 22719
      • Unwilling part owner of Gov't. Motors and Chrysler
        • Hoov's Personal Site
      Try rebooting to safe mode and then run combofix from there.

      Consumer Security

      If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

      Offline Marco

      • Bronze Member
      • Posts: 70
      I tried Combo Fix in Safe Mode. Same result, it stopped running. So I tried deleting it and re-downloading using IE (I used Chrome the first time). Same result again. Nothing.

      Offline Hoov

      • Malware Removal Mentors
      • Global Moderator
      • Diamond Member
      • Posts: 22719
      • Unwilling part owner of Gov't. Motors and Chrysler
        • Hoov's Personal Site
      Download Combofix from either of the following links:

      Link 1
      Link 2

      Save to this folder:

      C:\Program Files\Malwarebytes' Anti-Malware\Chameleon <---Combofix must be in Chameleon folder

      For 64 bit systems:

      C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon

      Install the Chameleon protective driver by doing the following:

      Select the Windows key + R key together,  (Windows 7 and Vista user will have to accept the UAC prompt...

      In the Run box copy and paste the following command:

      "C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\mbam-chameleon.exe" /o

      For 64 bit systems:

      "C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\mbam-chameleon.exe" /o





      select OK or tap Enter.

      A black DOS prompt will appear with a prompt to press any key to continue, please do.







      The driver will be installed:





      You will be asked to press any key to continue, please do.


      The dos window will close....

      Navigate to C:\Program Files\Malwarebytes' Anti-Malware\Chameleon

      For 64 bit systems:

      C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon

      • Disable all security programs as they will have a negative effect on Combofix,

      instructions Here if required.
      Be aware the list may not have all programs listed, if you need more help please ask.

      • Close any open browsers and any other programs you might have running
      • Double click the icon to run the tool
        (Vista or Windows 7 users right click and select "Run as Administrator)

      • Instructions for running Combofix Here
        if required.

      • If you are using windows XP It might display a pop up saying that "Recovery console is not installed, do you want to install?"

      Please select yes & let it download the files it needs to do this. Once the recovery console is installed Combofix will then offer to scan for
      malware. Select continue or yes.

      • When finished, it will produce a report for you. Please post the "C:\ComboFix.txt" for further review
      ****Note: Do not mouseclick combofix's window while it's running.
      That may cause it to stall or freeze
      ****

      Note: ComboFix may reset a number of Internet Explorer's settings, including making it the default browser.
      Note: Combofix prevents autorun of ALL CDs, floppies and USB devices to assist with malware removal & increase security.
      If this is an issue or makes it difficult for you -- please tell us when you reply.
      Read Here why  disabling autoruns is recommended.

      *EXTRA NOTES*

       
      • If Combofix detects any Rootkit/Bootkit activity on your system it will give a warning and prompt for a reboot, you must allow it to do so.
      • If Combofix reboot's due to a rootkit, the screen may stay black for several minutes on reboot, this is normal
         
      • If after running Combofix you receive any type of warning message about registry key's being listed for deletion when trying to open

      certain items, reboot the system and this will fix the issue (Those items will not be deleted)
      [/list]

      Post the log in next reply please...



      Consumer Security

      If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!