Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

Windows XP Windows XP
Search Search
Search for:
Tech Support Guy > > >

xp messedup


(!)

flavallee's Avatar
flavallee   (Frank) flavallee is offline flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 57,937 posts.
 
Join Date: May 2002
Location: Hillsborough county, Florida
Experience: Advanced
09-Sep-2013, 08:35 AM #16
It hurts my eyes just trying to read those logs.

Unless the next one submitted is readable, I'm going to unsubscribe from this thread.

--------------------------------------------------------
CCNV's Avatar
CCNV CCNV is offline
Member with 42 posts.
THREAD STARTER
 
Join Date: Aug 2013
09-Sep-2013, 07:11 PM #17
hijack
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:08:08 PM, on 9/9/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.21348)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\netdde.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files\AVG\AVG2013\avgidsagent.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVG\AVG2013\avgwdsvc.exe
C:\Program Files\BOINC\boincmgr.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\AVG\AVG2013\avgui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\QuickTime\QTTask.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Adobe\Reader 11.0\Reader\Reader_sl.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AVG\AVG2013\avgnsx.exe
C:\Program Files\AVG\AVG2013\avgemcx.exe
C:\Program Files\wrapper_inst\file_to_run.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\AVG\AVG2013\avgrsx.exe
C:\Program Files\AVG\AVG2013\avgcsrvx.exe
C:\Program Files\BOINC\boinc.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page

= http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet

Explorer\Main,Default_Page_URL =

http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet

Explorer\Main,Default_Search_URL =

http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page

= http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet

Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet

Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Connection

Wizard,ShellNext = http://eula.mindspark.com/ask/uninstall/
R3 - URLSearchHook: (no name) -

{539F76FD-084E-4858-86D5-62F02F54AE86} - (no file)
O2 - BHO: (no name) - AutorunsDisabled - (no file)
O2 - BHO: (no name) -

{02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper -

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program

Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper -

{DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program

Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: (no name) -

{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - (no file)
O3 - Toolbar: WebFerret -

{A58686ED-FC46-44C3-95C6-4A812AB776F1} - C:\Program

Files\WebFerret\FerretBand.dll
O4 - HKLM\..\Run: [boincmgr] "C:\Program

Files\BOINC\boincmgr.exe" /a /s
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common

Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [AVG_UI] "C:\Program

Files\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program

Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program

Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [pcreg] C:\Program

Files\wrapper_inst\service.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SDP] C:\Documents and

Settings\Administrator\Local Settings\Application Data\FilesFrog

Update Checker\update_checker.exe /auto
O9 - Extra button: (no name) -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.6.0_05\bin\ssv.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.6.0_05\bin\ssv.dll (file missing)
O9 - Extra button: Check for updates -

{AAA38851-3CFF-475F-B5E0-720D3645E4A5} -

C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) -

{e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network

Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -

{e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network

Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger -

{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -

{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}

(MUWebControl Class) -

http://www.update.microsoft.com/micr...V5Controls/en/

x86/client/muweb_site.cab?1360463856968
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} -

http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 -

HKLM\System\CCS\Services\Tcpip\..\{59DEB196-A8D3-4594-84C8-

5B0BFF47FACE}: NameServer = 208.69.150.250,208.69.150.252
O18 - Protocol: linkscanner -

{F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O20 - AppInit_DLLs:

c:\docume~1\alluse~1\applic~1\browse~1\23787~1.43\{16cdf~1\browse~

1.dll

c:\docume~1\alluse~1\applic~1\browse~1\22643~1.41\{16cdf~1\browse~

1.dll
O20 - Winlogon Notify: avgrsstarter - Invalid registry found
O21 - SSODL: EldosMountNotificator -

{5FF49FE8-B332-4CB9-B102-FB6951629E55} -

C:\WINDOWS\system32\CbFsMntNtf3.dll
O22 - SharedTaskScheduler: Browseui preloader -

{438755C2-A8BA-11D1-B96B-00A0C90312E1} -

C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon -

{8C7461EF-2B13-11d2-BE35-3078302C2030} -

C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Virtual Storage Mount Notification -

{5FF49FE8-B332-4CB9-B102-FB6951629E55} -

C:\WINDOWS\system32\CbFsMntNtf3.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis -

C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Flash Player Update Service

(AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated -

C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.

exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. -

C:\Program Files\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o.

- C:\Program Files\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle

Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) -

Mozilla Foundation - C:\Program Files\Mozilla Maintenance

Service\maintenanceservice.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation

- C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: pcregservice Service (pcregservice) - Unknown owner -

C:\Program Files\wrapper_inst\file_to_run.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. -

C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--
End of file - 7547 bytes
flavallee's Avatar
flavallee   (Frank) flavallee is offline flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 57,937 posts.
 
Join Date: May 2002
Location: Hillsborough county, Florida
Experience: Advanced
09-Sep-2013, 07:14 PM #18
Start HiJackThis, but don't run a scan.

Click on the "Open The Misc Tools Section" button.

Click on the "Open Uninstall Manager" button.

Click on the "Save List" button.

Save the "uninstall_list.txt" file somewhere.

It'll then open in Notepad.

Return here to your thread, then copy-and-paste the ENTIRE file here.

----------------------------------------------------------
CCNV's Avatar
CCNV CCNV is offline
Member with 42 posts.
THREAD STARTER
 
Join Date: Aug 2013
10-Sep-2013, 08:40 AM #19
herwego
32 Bit HP CIO Components Installer
ACDSee 5.0 PowerPack
Acronis True Image Home
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader XI (11.0.03)
Adobe Shockwave Player 12.0
AVG 2013
AVG 2013
AVG 2013
Belarc Advisor 8.3
Cacheman
CCleaner
Defraggler
Duplicate File Finder
Easy Poster Printer
Electric Sheep 2.7b35
HiJackThis
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
HP Photosmart C4400 All-In-One Driver 11.0 Rel .3
Intel(R) Extreme Graphics 2 Driver
Intel(R) PRO Network Connections Drivers
Intel(R) PROSet for Wired Connections
Java 7 Update 25
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft .NET Framework 4 Extended
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 2000 Premium
Microsoft Security Client EN-US Language Pack
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft Web Publishing Wizard 1.52
Microsoft Word Supplemental Templates and Wizards
Mozilla Firefox 23.0.1 (x86 en-US)
Mozilla Maintenance Service
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Quick ShutDown
QuickTime
Revo Uninstaller 1.95
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2840629)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft .NET Framework 4 Extended (KB2736428)
Security Update for Windows Internet Explorer 7 (KB2647516)
Security Update for Windows Internet Explorer 7 (KB2675157)
Security Update for Windows Internet Explorer 7 (KB2699988)
Security Update for Windows Internet Explorer 7 (KB2722913)
Security Update for Windows Internet Explorer 7 (KB2744842)
Security Update for Windows Internet Explorer 7 (KB2761465)
Security Update for Windows Internet Explorer 7 (KB2792100)
Security Update for Windows Internet Explorer 7 (KB2797052)
Security Update for Windows Internet Explorer 7 (KB2799329)
Security Update for Windows Internet Explorer 7 (KB2809289)
Security Update for Windows Internet Explorer 7 (KB2817183)
Security Update for Windows Internet Explorer 7 (KB2829530)
Security Update for Windows Internet Explorer 7 (KB2846071)
Security Update for Windows Internet Explorer 7 (KB2862772)
Security Update for Windows Internet Explorer 7 (KB982381)
Security Update for Windows Media Player (KB2803821-v2)
Should I Remove It
swMSM
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
VC 9.0 Runtime
WebFerret
Windows Media Player Firefox Plugin
Windows PowerShell(TM) 1.0
Windows Update Remover
Windows XP Service Pack 3
WinZip 17.5
World Community Grid
flavallee's Avatar
flavallee   (Frank) flavallee is offline flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 57,937 posts.
 
Join Date: May 2002
Location: Hillsborough county, Florida
Experience: Advanced
10-Sep-2013, 09:03 AM #20
You need to get rid of

Cacheman

CCleaner

Defraggler

Duplicate File Finder

Quick ShutDown

Should I Remove It

WebFerret

Windows Update Remover


If you're using the registry/file cleaner feature that's built into AVG 2013, you need to stop using that feature.

It's my guess the use of most of the above apps has damaged Windows and is causing part of your computer's issues.

---------------------------------------------------------------

Assuming your computer is a factory brand one and not a custom-built or home-built one, what is its brand name and model name and model number?

----------------------------------------------------------------
CCNV's Avatar
CCNV CCNV is offline
Member with 42 posts.
THREAD STARTER
 
Join Date: Aug 2013
10-Sep-2013, 11:30 AM #21
emachine
INTEL R
CELERON R CPU 2.80GHz
2.79GHzm0.98 GB of ram
CCNV's Avatar
CCNV CCNV is offline
Member with 42 posts.
THREAD STARTER
 
Join Date: Aug 2013
10-Sep-2013, 11:31 AM #22
got rid of programs you listed
flavallee's Avatar
flavallee   (Frank) flavallee is offline flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 57,937 posts.
 
Join Date: May 2002
Location: Hillsborough county, Florida
Experience: Advanced
10-Sep-2013, 11:58 AM #23
Quote:
Originally Posted by CCNV View Post
INTEL R
CELERON R CPU 2.80GHz
2.79GHzm0.98 GB of ram
All that tells me is the type of processor and the amount of RAM that's in that computer.

It doesn't tell me the description of that computer.

Is it a name brand one, such as Acer or Compaq or Dell or eMachines or Gateway or HP or Sony or Toshiba?

----------------------------------------------------------
flavallee's Avatar
flavallee   (Frank) flavallee is offline flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 57,937 posts.
 
Join Date: May 2002
Location: Hillsborough county, Florida
Experience: Advanced
10-Sep-2013, 11:59 AM #24
Go here, then click the large blue "Download Now @ Bleeping Computer" link to download and save AdwCleaner.exe to your desktop.

Close all open windows first, then double-click AdwCleaner.exe to load its main window.

Note: The "Clean" and "Report" buttons will be grayed out at this time.

Click the "Scan" button, then allow the scanning process to finish.

Click the "Report" button.

When the log appears, save it.

Return here to your thread, then copy-and-paste the ENTIRE log here.

-----------------------------------------------------------------
CCNV's Avatar
CCNV CCNV is offline
Member with 42 posts.
THREAD STARTER
 
Join Date: Aug 2013
10-Sep-2013, 04:56 PM #25
Emachine t3882
flavallee's Avatar
flavallee   (Frank) flavallee is offline flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 57,937 posts.
 
Join Date: May 2002
Location: Hillsborough county, Florida
Experience: Advanced
10-Sep-2013, 05:13 PM #26
Here is the support and driver downloads site for the eMachines T3882 desktop.

If you decide to a clean install of Windows XP (Home Edition or Professional) and get a fresh start with it, you'll want to download and save the necessary drivers before you start.

That desktop appears to have these devices:

Realtek AC'97 Audio

Intel 865GV Chipset

Intel PRO/100 VE Ethernet

Intel 82865 Graphics

-----------------------------------------------------------
CCNV's Avatar
CCNV CCNV is offline
Member with 42 posts.
THREAD STARTER
 
Join Date: Aug 2013
10-Sep-2013, 11:14 PM #27
**content removed by mod**

Last edited by valis; 11-Sep-2013 at 05:28 PM.. Reason: rudeness
flavallee's Avatar
flavallee   (Frank) flavallee is offline flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 57,937 posts.
 
Join Date: May 2002
Location: Hillsborough county, Florida
Experience: Advanced
11-Sep-2013, 09:10 AM #28
What's the reason for calling me a "grump"?

I am trying to help you, but you haven't replied to post #24 so I can proceed further.

-------------------------------------------------------
flavallee's Avatar
flavallee   (Frank) flavallee is offline flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 57,937 posts.
 
Join Date: May 2002
Location: Hillsborough county, Florida
Experience: Advanced
11-Sep-2013, 09:12 AM #29
Quote:
I just want to start over again with clean slate
The information I gave you in post #26 is for your benefit, just in case you decide to do a clean reinstall and get a fresh start.

This is what you advised in post #1.

-----------------------------------------------------------
valis's Avatar
Moderator with 63,590 posts.
 
Join Date: Sep 2004
Location: as above
11-Sep-2013, 05:28 PM #30
Quote:
Originally Posted by CCNV View Post
sorry you r a grump i just asked for help
heyya CCNV, hope all finds you well.

Please remember that we are ALL volunteers here, and our pay is just helping others get their tech feet under them.......no need for comments such as that.

Also, fyi, flavallee has taught me a thing or three about this stuff; the guy knows his stuff. I'd definitely recommend following his instructions.

thanks,

v
__________________
Microsoft M.V.P. - Windows IT Professional | M.C.S.A. | M.C.P. - MS Server 2k3 | blog | rate me

"Ask Bill why the string in function 9 is terminated by a dollar sign. Ask him, because he can't answer. Only I know that". - Gary Kildall
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑