[Nokios]

Since I started using AVG Free anti-virus v.8, my PC started to slow CONSIDERABLY....especially when I put my mouse cursor on the "Start" button...After a few hours of PC use,it would take minutes for the program list to populate !! This is most marked in branching menus...I have this empty gray rectangle totally paralyzing the PC till it fills..!!

I tried defrag,added RAM,stopped Win Defender,stopped my Mc Afee Firewall...no effect..

The Task manager always shows the criminal process: AVGrsx.exe consuming 98% of CPU for ages !!!

Whenever I deactivate this cursed process,my PC becomes "Superfast"...


Is there a solution without compromising protection??

Please help

[tomdkat]

What speed CPU do you have, how much total RAM do you have, and how much free RAM do you have after a fresh system boot?

Peace...

[Nokios]

Originally Posted by tomdkat

What speed CPU do you have, how much total RAM do you have, and how much free RAM do you have after a fresh system boot?

Peace...

Sorry I recorded all this in my profile and assumed it would show..

Pentium4,Intel MotherBoard,2GHz Intel processor with 1GB RAM...showing on a fresh system (My video card has its own memory)..

[Cookiegal]

It's likely updating on boot up as many programs do by default. You can go Tools - Advanced - Scheduler and set it to update later.

[Nokios]

It is not only on boot up...yes update does take a few minutes...but all the time...even 10 or 20 hours after booting...It occurs whenever I click "Start" and point to "All programs" !! but it is much worse after I work with my PC for some time.

Now I am running with it deactivated...Another example: tried to copy a 124MB folder to desktop..it took over 7 min with the shield on!!!

Even with the Resident sh.. deactivated,avgrsx.exe is still here in the processes on task manager ...I also noticed an AVG trojan warning after I downloaded a file from the internet with the shield off !!

[Cookiegal]

Sorry, I misunderstood. There may be a conflict with some other program you're running. Did you disable all security programs when installing AVG?

Click here to download HJTsetup.exe.

• Save HJTsetup.exe to your desktop.
• Double click on the HJTsetup.exe icon on your desktop.
• By default it will install to C:\Program Files\Hijack This.
• Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
• Put a check by Create a desktop icon then click Next again.
• Continue to follow the rest of the prompts from there.
• At the final dialogue box click Finish and it will launch Hijack This.
• Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
• Click Save to save the log file and then the log will open in notepad.
• Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
• Come back here to this thread and Paste the log in your next reply.
• DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

[Cookiegal]

Also, I've edited your post. Please be mindful of your language, even if the words are not totally spelled out.

[Nokios]

Hyjack this report:
Logfile of HijackThis v1.99.1
Scan saved at 12:17:40 AM, on 7/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\astsrv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
D:\Program Files\Cfos Speed\spd.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
T:\Program Files\Norton Ghost\Agent\VProSvc.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
d:\Program Files\ProShowGold\ScsiAccess.exe
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
C:\Program Files\Alcohol\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Firetray.exe
C:\WINDOWS\system32\svchost.exe
D:\Program Files\WebcamMax\CAMTHINS.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
D:\Program Files\Cfos Speed\cFosSpeed.exe
D:\Program Files\UPHClean\uphclean.exe
C:\Program Files\Intel\Intel(R) Active Monitor\imonnt.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
D:\Program Files\PC Auto Shutdown\AutoShutdown.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Intel\Intel(R) Active Monitor\imontray.exe
C:\Program Files\Windows Defender\MSASCui.exe
T:\Program Files\Norton Ghost\Agent\VProTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
D:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
D:\Program Files\ClipCache\clipc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\taskmgr.exe
D:\PROGRAM FILES\MOZILLA\FIREFOX.EXE
D:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
F3 - REG:win.ini: run=
O1 - Hosts: AmsServer
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - D:\Program Files\TechSmith\SnagIt 9\SnagItBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: Translator - {FF284F5C-7CF9-4682-8701-D467C1DBB99F} - D:\Dictionaries\PRMT6\PRMTIE\prmtie.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Save Flash - {4064EA35-578D-4073-A834-C96D82CBCF40} - d:\Program Files\Save Flash\SaveFlash.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - D:\Program Files\TechSmith\SnagIt 9\SnagItIEAddin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [AtiPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [WheelMouse] "C:\Program Files\A4Tech\Mouse\Amoumain.exe"
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [McAfeeFireTray] "C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Firetray.exe"
O4 - HKLM\..\Run: [WebcamMaxMoniter] "D:\Program Files\WebcamMax\CAMTHINS.exe" /m
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
O4 - HKLM\..\Run: [cFosSpeed] "D:\Program Files\Cfos Speed\cFosSpeed.exe"
O4 - HKLM\..\Run: [Babylon Client] "d:\Program Files\Babylon\Babylon-Pro\Babylon.exe" -AutoStart
O4 - HKLM\..\Run: [NeroFilterCheck] "C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe"
O4 - HKLM\..\Run: [PDF4 Registry Controller] "D:\Program Files\ScanSoft\PDF Professional 4.0\\RegistryController.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [PC Auto Shutdown] D:\Program Files\PC Auto Shutdown\AutoShutdown.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [IMONTRAY] C:\Program Files\Intel\Intel(R) Active Monitor\imontray.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Norton Ghost 12.0] "T:\Program Files\Norton Ghost\Agent\VProTray.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [OpAgent] "OpAgent.exe" /agent
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [SRS Audio Sandbox] "D:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe" /hideme
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: ClipCache Pro.lnk = D:\Program Files\ClipCache\clipc.exe
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Flash Saver - {09EA1F80-F40A-11D1-B792-444553540001} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Flash Saver - {09EA1F80-F40A-11D1-B792-444553540001} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\tv\EXPLBAR.DLL
O9 - Extra button: (no name) - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - D:\Dictionaries\PRMT6\PRMTIE\prmtie5.htm
O9 - Extra 'Tools' menuitem: Translate - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - D:\Dictionaries\PRMT6\PRMTIE\prmtie5.htm
O9 - Extra button: (no name) - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - D:\Dictionaries\PRMT6\PRMTIE\options.htm
O9 - Extra 'Tools' menuitem: Customize translation options - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - D:\Dictionaries\PRMT6\PRMTIE\options.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: SmartWhois - {FD9DE2B4-C926-4460-81C4-FC58C6F1062E} - D:\Program Files\Who is\swmsie.exe
O9 - Extra button: (no name) - {FF983118-58C7-4AD4-B5A7-691C39CB7B42} - D:\Program Files\Who is\swmsie.exe
O9 - Extra 'Tools' menuitem: SmartWhois - {FF983118-58C7-4AD4-B5A7-691C39CB7B42} - D:\Program Files\Who is\swmsie.exe
O11 - Options group: [INTERNATIONAL] International*
O11 - Options group: [TABS] Tabbed Browsing
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {3D3BF1F8-9696-4A5E-B4F1-49101C997B70} (VaxSIPUserAgentCAB Control) - http://www.earthcaller.com/VaxSIPUserAgentCAB.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by121fd.bay121.hotmail.msn.co...s/MsnPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsof...?1203026755156
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1203026725562
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary...o.cab47946.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F06FAEB3-5DEC-4500-A85C-9DBC666A3B5B}: NameServer = xxxxxxxxxxx
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O20 - AppInit_DLLs: prio.dll,C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL,avgrsstx.dll C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - D:\Program Files\Ad-Aware\aawservice.exe
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - Unknown owner - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AST Service (astcc) - Nalpeiron Ltd. - C:\WINDOWS\system32\astsrv.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: cFosSpeed System Service (cFosSpeedS) - Unknown owner - D:\Program Files\Cfos Speed\spd.exe" -service (file missing)
O23 - Service: McAfee Desktop Firewall Service (FireSvc) - Networks Associates Technology, Inc. - C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe
O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Intel(R) Active Monitor (imonNT) - Intel Corp. - C:\Program Files\Intel\Intel(R) Active Monitor\imonnt.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Unknown owner - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe" /ServiceStart (file missing)
O23 - Service: Norton Ghost - Symantec Corporation - T:\Program Files\Norton Ghost\Agent\VProSvc.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: ScsiAccess - Unknown owner - d:\Program Files\ProShowGold\ScsiAccess.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol\Alcohol 120\StarWind\StarWindServiceAE.exe

[Cookiegal]

Do you recognize this?

AmsServer

Open HijackThis and click on "Config" and then on the "Misc Tools" button. If you're viewing HijackThis from the Main Menu then click on "Open the Misc Tools Section". Click on the "Open Uninstall Manager" button. Click the "Save List" button. Copy and paste that list here please.

[Nokios]

@promt Professional 7 EFFE Try-Buy
+++ ÇáßÊÇÈ ÇáãÞÏÓ ÈÇááÛÉ ÇáÚÑÈíÉ ÇáÇÕÏÇÑ ÇáËÇäì æÇáÓäßÓÇÑ +++
1998 Grolier Multimedia Encyclopedia
1999 World Book (International)
3D SexVilla
3DVIA Player 4.1
abrViewer.NET v2
Ad-Aware
Adobe Acrobat 7.0.9 Professional
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Flash Player Plugin
Adobe Help Center 1.0
Adobe PDF IFilter 4.1
Adobe Photoshop CS2
Adobe Shockwave Player
Adobe Stock Photos 1.0
Air Guard Full
AirStrike II Gulf Thunder
Alien Skin Exposure 2
Alien Skin Eye Candy 5 Impact
Alien Skin Eye Candy 5 Nature Demo
Alien Skin Eye Candy 5 Textures
Alien Skin Image Doctor 2
Alien Skin Snap Art
Alien Skin Splat! 1.0 Demo
Alien Skin Xenofex 2.0
Altostorm Rectilinear Panorama v1.2.1 Pro
Antidote RX v7
Apple Software Update
Around the World: London 1.0
ArtIcons Pro
Artistic Effects by Lokas Software
ArtMasterPro
Ashampoo ClipFinder 1.19
Ashampoo UnInstaller Platinum 2
Aspi Installer
Atani 4.3
ATI - Software Uninstall Utility
ATI AVIVO Transcoder v1.12
ATI Control Panel
ATI Display Driver
ATI MCE Transcode
ATI Multimedia Center 9.03
Atlas of Dermatology
AudioBurst FX Engine
Aurora MPEG To DVD Burner 4.9.15
AutoMask 4_68
AV Bros. Page Curl Pro 2.1 (Remove Only)
AVG Free 8.0
AVI/MPEG/RM/WMV Joiner 4.51
AviInfo 3.1.0
Azureus
Babylon
Beach Head 2002
BiblePro Software
BibleWorks 6
Bixorama
buZZ.Pro 3.0
Call Soft Pro 3.1
CDRoller version 7.51
cFosSpeed v3.11
ChordWizard Gold 2.0
ChordWizard Songtrix Gold 3.0
Christ the Saviour Cathedral 3D 1.0
ChristmasTheme
ClipCache Pro 3.1.0
CloneCD
CloneDVD Full 3.0.2.5
CLUE Classic
Color Efex Pro 3.0 Complete
ColorImpact 3.0
ColorWasher 2.02b
Comfort Lang Switcher 2.1.0.0
Compatibility Pack for the 2007 Office system
CoreAVC Professional Edition (remove only)
COWON Media Center - jetAudio Plus VX
CUE Splitter
Cut-It-Out
CyberLink MPEG-2 video decoder v5.0
Deep Shredder 11 UCI
DFE-520TX
DFX for Winamp
DFX for Windows Media Player
Digital Element Aurora
Directmedia
Discovery 3D Screensaver 1.1
DivX Codec
DivX Converter
DivX Player
DivX Web Player
DivXMuxGUI
D-Link PCI Fast Ethernet Adapter
Dorling Kindersley Application Database v1.4
Drawing Hand Screen Saver
Dream Aquarium
Driver Genius Professional Edition 2007
DSS Electronic Reference Library
DVB Dream version 1.4i
DVDInfoPro
DVDInfoPro
Easy Video Splitter 1.28
easyWebSave 1.7.0
Egyptoid
Elecard AVC PlugIn for XMuxer Pro
Elecard XMuxer Pro
Encyclopaedia Britannica 2007 Ultimate Reference Suite
Encyclopédie Hachette Multimédia (désinstallation)
eXeScope
Extensis Intellihance Pro 4.0
ExtractNow
Eyewitness Encyclopedia of Science 2.0
EZ Extract Resource
EZ Mask v1 for Adobe Photoshop & Photoshop Elements
FaceFilter Studio 2
Fast Video Indexer 1.08
FastFolders v4.0.0
ffdshow [rev 1751] [2007-01-05]
FileRescue for NTFS 2.5
Flash Decompiler Trillix
FlashGet 1.9.6.1073
FLV Player
Focus Magic 3.02
Font Fitting Room Deluxe
Foreign Characters
Foxit Reader
Game Speed Changer 6.3
Gertrudis Pro 3.4.0.0166
GetDataBack for NTFS
GlowingWorld 3.1
Google Desktop
Google Earth
Google Talk (remove only)
Google Toolbar for Internet Explorer
Google Toolbar for Internet Explorer
Google Updater
Hard Disk Sentinel PRO
HD Pack 1.4
HentaII-024.006
Hide IP Platinum 3.4
Hijackthis 1.99.1
HijackThis 1.99.1
Holiday Lights 5.4
Hotfix for MSXML 2 (KB887606)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB942288-v3)
HP Photo and Imaging 2.2 - Scanjet 3970 Series
HyperTyle 1.02
INFOPEDIA
Instant Photo Effects 2.0
Intel Application Accelerator
Intel(R) Active Monitor
iolo technologies' Search and Recover 4
iSilo
iWheelWorks 7.72
J2SE Runtime Environment 5.0 Update 11
Jardinains 2!
Jardinains!
Jasc Virtual Painter 4
Java 2 Runtime Environment Standard Edition v1.3.1
Java(TM) 6 Update 3
Java(TM) 6 Update 5
Java(TM) SE Runtime Environment 6 Update 1
Judaic Classics Library
jv16 PowerTools 2008
Kaleido Flash 2.3
Karaoke CD+G Creator Pro
Karaoke Sound Tools
Kodak DIGITAL GEM Airbrush Professional Plug-In
Kodak DIGITAL GEM Professional Plug-In
Kodak DIGITAL ROC Professional Plug-In
Kodak DIGITAL SHO Professional Plug-In
L&H TTS3000 British English
L&H TTS3000 Français
Learning Essentials for Microsoft Office
Lernout & Hauspie TruVoice American English TTS Engine
LifeGlobe Goldfish Aquarium 2.0
Light Artist 1.3
LiveUpdate 2.6 (Symantec Corporation)
Lizardtech DjVu Control
LogoManager for Nokia Phones
luxor 3
MagicScore
Mask Pro 4.1
Mazaika 3.1
McAfee Desktop Firewall 8.5
Medieval CUE Splitter
Merriam-Webster
Micro Application - 36 Dictionnaires et Recueils de Correspondance - version d'évaluation
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft .NET Framework 3.0 Service Pack 1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Office 2003 Proofing Tools
Microsoft Office Professional Edition 2003
Microsoft Office XP Professional with FrontPage
Microsoft Reader
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable
Microsoft Windows Script 5.7
MidiIllustrator v2.01
Monkey's Audio
Mov Recorder
MozBackup 1.4.5
Mozilla Firefox (3.0)
MP3 Rocket
MP3 Splitter & Joiner 3.27
Mp3tag v2.39a
MSXML 4.0 SP2 (KB925672)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 Parser and SDK
MSXML 6.0 Parser (KB933579)
Music MasterWorks v3.87
Mysteries of Horus
namesuppressed Autochromatic 2.02
Nature Illusion Studio
Noiseware Professional Plug-in
Norton Ghost
n-Track Studio 5
Orban/Coding Technologies AAC/aacPlus Player Plugin™ 1.0
oRipa Yahoo Webcam Recorder1.2.2
Oxford Interactive Encyclopedia
PC Auto Shutdown 2.2
PCI SoftV92 Modem
PDF Password Cracker Pro v2.0
PDF Password Remover v3.0
PDR Electronic Library
Pegasus Imaging Corp. "The JPEG Wizard2"
PerfectDisk 2008 Professional
Petit Larousse 2008
Photo! 3D Album 1.0 Beta
Photo! 3D ScreenSaver 1.0 Beta
Photodex Presenter
PhotoFiltre Studio
PhotoKit Color 2 Plug-In Module
PhotoTune 2
piano
Pinnacle Hollywood FX 5

Portraiture Plug-in
Power Stroke v1.0 for Adobe Photoshop & Photoshop Elements
PowerDVD Ultra
Prio v1.9.3
ProShow Gold
QMAX II
Quasar 1.0
Quick Batch File Compiler 3.16
QuickTime
R.C. Cars
Rack Em Up Roadtrip
RAR Password Recovery v1.1 RC16 (remove only)
Real Alternative 1.7.5 Lite
Recover My Files
RightClick RegEx 2.1
Save Flash 4.1
save2pc Pro 3.37
ScanSoft OmniPage 16
ScanSoft PDF Professional 4
Scarabs Of Pharaoh
Screen OCR 6.1
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
SereneScreen Marine Aquarium 2.6
Shape Shifter
Shockwave
Siglos Karaoke Player/Recorder
Skype™ 3.6
SmartWhois
SnagIt 9
Snap for Adobe Photoshop & Photoshop Elements
Snap v2 for Adobe Photoshop & Photoshop Elements
Sobotta 13 - Atlas of Human Anatomy
SoftCamEditor 7.0.4.1364
SolveigMM Video Splitter
SoundMAX
Spectaculator 7.00
SRS Audio Sandbox
Studio 8
Super Collapse! from GameHouse
Surgical Anatomy
Taj Mahal 3D 1.0
Text Copy Helper
The Lost Watch 3D Screensaver 1.0
The Mathematical Explorer
The Rosetta Stone
thriXXX VirtuallyJenna-029.002
Tiffen Dfx v1.0 for Photoshop
TimeToPhoto 2.3.4345
TMPGEnc 4.0 XPress
TMPGEnc MPEG Editor
TMPGEnc Sound Player
Treasure Pyramid
Treasures of Ra 1.2
Trésor de la Langue Française informatisé
Tumblebugs 2
Tweak-XP Pro 4
TwistingPixels
Ulead GIF Animator 5 Trial
Ulead GIF-X.Plugin 2.0
UltraISO Premium V9.2
Undelete NOW! Trial
Uninstall AutoEye
Unlocker 1.8.7
USB Safely Remove 4.0 beta 3
User Profile Hive Cleanup Service
vanBasco's Karaoke Player
Variations 1.0
Venta Fax & Voice 5.3 (remove/restore)
Veo Connect
Vertus Fluid Mask 3 3.0.2
VirtuallyJenna-2.017.002
Water Illusion Professional
Water Illusion Screensaver
WD Diagnostics
Web Dumper 2.3.6
WebcamMax
Winamp
Windows Defender
Windows Defender Signatures
Windows Imaging Component
Windows Live installer
Windows Live Mail
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player Firefox Plugin
Windows Presentation Foundation
Windows Resource Kit Tools - SubInAcl.exe
Windows XP Service Pack 3
WinPcap 3.1 beta3
WinRAR archiver
WordWeb Pro
World of Satellites II
xplorer² professional
Yahoo! Messenger
Zoom ADSL USB Modem

[Nokios]

I do not remember anything about this "server" in my Hosts file...


On google seems to be either related to Norton antivirus(Symmantec)...I used to have it a long long time ago..but now I still have both: Norton Ghost and Norton Win Doctor...or to the American meteorological society (!!) or....!!

Norton ghost recovery CD offers an antivirus scan...(??..maybe it is related to it?)

[Cookiegal]

I should have asked for a list of what you DON'T have installed.

I would go through that list and remove any programs you no longer use or need via the Control Panel - Add or Remove Programs.

Regarding the following, if you downloaded them intentionally then leave them but malware sometimes installs these types of programs so if not, remove them via the Control Panel.

3D SexVilla
thriXXX VirtuallyJenna-029.002
VirtuallyJenna-2.017.002



Remove AVG 8 via the Control Panel as well.



Click here to download ATF Cleaner by Atribune and save it to your desktop.

• Double-click ATF-Cleaner.exe to run the program. (Vista users right-click and slect "Run As Administrator").
• Under Main choose: Select All
• Click the Empty Selected button.
  • If you use Firefox:
    • Click Firefox at the top and choose: Select All
    • Click the Empty Selected button.
    • NOTE: If you would like to keep your saved passwords, please click No at the prompt.
  • If you use Opera:
    • Click Opera at the top and choose: Select All
    • Click the Empty Selected button.
      
    • NOTE: If you would like to keep your saved passwords, please click No at the prompt.
• Click Exit on the Main menu to close the program.

Now redownload the AVG8 installer then disconnect from the Internet and disable all of your security programs, i.e. McAfee Firewall, Windows Defender and disable Norton Ghost as well.


Now run the AVG installer.

Don't forget to re-enable your security programs before going back on-line.


Let me know how it goes please.

[Nokios]

A big THANK YOU Cookiegal,

I followed literally all your directives exept for these:
1) I kept the XXX softwares because I had installed them
2) On using the ATF cleaner,"Firefox" was greyed so it could not be clicked
3) I could not deactivate Norton Ghost..

After reinstallation of AVG,setting back Firewall and Win Defender then connecting here I am.....................alas with the same situation..!!no improvement


During reinstalling AVG I got these 2 warnings (errors?) :

Local machine: installed successfully
Installation:
Warning: Action failed for registry key HKCU\Software\Avg (Administrator): creating registry key....
Error 0x80070005
Warning: Action failed for registry key HKCU\Software\Avg\Avg8 (Administrator): creating registry key....
Internal error. Registry handle has not been opened.


But here is a copy of my registry now:

[HKEY_CURRENT_USER\Software\Avg]
[HKEY_CURRENT_USER\Software\Avg\Avg8]
[HKEY_CURRENT_USER\Software\Avg\Avg8\Dialogs]

[HKEY_CURRENT_USER\Software\Avg\Avg8\Dialogs\Layout]
"FrwWizard"=hex:2c,00,00,00,00,00,00,00,01,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff ,ff,\
ff,ff,ff,ff,ff,ff,ff,e9,00,00,00,aa,00,00,00,17,03,00,00,39,02,00,00

[HKEY_CURRENT_USER\Software\Avg\Avg8\MainWnd]
"WndPos"=hex:2c,00,00,00,00,00,00,00,01,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,ff ,ff,\

These keys look fine to me !!




I think seriously of keeping the things as they are with a DEactivated Resident shield...I think that the stuff downloaded by firefox are automatically sent for scrutiny by the AVG...same for mail..Besides,Win Defender is supposed to prevent or stop abnormal activity...

Please advise...can I do it this way or is it preferable to try another antivirus? (Avira,Avast??)

[Cookiegal]

Something must still be interfering.

The same goes for ATF Cleaner if Firefox was greyed out then some components of the program probably didn't get installed.

You can't run AVG without it's resident shield as that's its main component and you wouldn't be protected.

I'd like to check the Event Viewer to see what type of errors are being generated by these failed installs.

Please go to Start - Run - type in eventvwr.msc to open the event viewer. Look under both "Application" and "System" for recent (the last 48 hours or so) errors (shown in red) and if found, do this for each one.

Double-click the error to open it up and then click on the icon that looks like two pieces of paper. This will copy the full error. Then "paste" the error into Notepad. Do this for each one until you have them all listed in Notepad and then copy and paste the list in a reply here please.

[Nokios]

First here are "Application Warnings" not errors...and as you can see they are 2 d old


Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1524
Date: 7/8/2008
Time: 11:29:37 PM
User: COMPUTER\*****
Computer: COMPUTER
Description:
Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.



For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.





Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 7/8/2008
Time: 11:31:27 PM
User: NT AUTHORITY\SYSTEM
Computer: COMPUTER
Description:
Windows saved user COMPUTER\***** registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.






Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1524
Date: 7/9/2008
Time: 12:11:56 AM
User: COMPUTER\*****
Computer: COMPUTER
Description:
Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.



For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.



Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 7/9/2008
Time: 12:13:27 AM
User: NT AUTHORITY\SYSTEM
Computer: COMPUTER
Description:
Windows saved user COMPUTER\***** registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.




Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1524
Date: 7/9/2008
Time: 2:52:06 AM
User: COMPUTER\*****
Computer: COMPUTER
Description:
Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.



For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.







Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 7/9/2008
Time: 2:53:29 AM
User: NT AUTHORITY\SYSTEM
Computer: COMPUTER
Description:
Windows saved user COMPUTER\***** registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.







Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1524
Date: 7/9/2008
Time: 12:30:02 PM
User: COMPUTER\*****
Computer: COMPUTER
Description:
Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.



For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.






Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 7/9/2008
Time: 12:31:59 PM
User: NT AUTHORITY\SYSTEM
Computer: COMPUTER
Description:
Windows saved user COMPUTER\***** registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.

This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.















After I installed and run microsoft UPHClean, the P.C. only takes less than 1 min to shut-down...and no more application errors in the event viewer