Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Slow computer

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: Slow computer

Unread postby Wingman » November 30th, 2009, 12:50 pm

3 Day Response
Hello...
It has been 2 days since my last post to you.
  • Do you still need help with this problem?
  • Do you need more time?
  • Are you having problems understanding or following my instructions?
Just let me know what's going on otherwise...
After 24 hrs., if you have not replied to this thread... it will be closed!
User avatar
Wingman
Admin/Teacher
Admin/Teacher
 
Posts: 14115
Joined: July 1st, 2008, 1:34 pm
Location: East Coast, USA
Advertisement
Register to Remove

Re: Slow computer

Unread postby sin_fury » November 30th, 2009, 11:14 pm

Sorry for not replying... updating and scanning now. As soon as it's done I'll post it.
sin_fury
Regular Member
 
Posts: 46
Joined: June 11th, 2008, 1:52 am

Re: Slow computer

Unread postby sin_fury » December 1st, 2009, 3:05 am

Malwarebytes' Anti-Malware 1.41
Database version: 3264
Windows 5.1.2600 Service Pack 2

12/1/2009 12:47:47 AM
mbam-log-2009-12-01 (00-47-47).txt

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 235069
Time elapsed: 58 minute(s), 25 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\System Volume Information\_restore{587DBFB0-3671-4C4B-9425-9CC0AB1393C2}\RP1041\A0231847.vxd (Rogue.sysCleaner) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{587DBFB0-3671-4C4B-9425-9CC0AB1393C2}\RP1041\A0231848.vxd (Rogue.sysCleaner) -> Quarantined and deleted successfully.
sin_fury
Regular Member
 
Posts: 46
Joined: June 11th, 2008, 1:52 am

Re: Slow computer

Unread postby Wingman » December 2nd, 2009, 12:35 pm

Hi sin_fury,

Please do not make any changes to your system, run any "fix" programs and/or remove any files unless instructed to do so, by me.

Please read these instructions carefully before executing and then perform the steps, in the order given.
lf, you have any questions or problems, executing these instructions, <<STOP>> do not proceed, post back with the question or problem.

Please print these instructions, as you will be closing all applications.

Step 1.
ERUNT - Emergency Recovery Utility NT
Run:
  1. Please navigate to Start >> All Programs >> ERUNT... double-click ERUNT from the menu.
  2. Click on OK within the pop-up menu.
  3. In the next menu under C:\WINDOWS\ERDNT\DD-MM-YYYY under Backup options make sure both the following are selected:
    • System registry.
    • Current user registry.
  4. Next click on "OK"... at the prompt... reply "Yes".
    After a short duration the Registry backup is complete! pop-up message will appear.
  5. Now click on "OK". A registry backup has now been created.
< STOP > If you did not successfully complete this step. < STOP > Do not continue with any other steps, post back and let me know!

Step 2.
ComboFix
Please download ImageComboFix.exe... © Copyrighted to sUBs Save it to your desktop. Alternate download site: forospyware.com.
If you previously downloaded ComboFix, please delete that version and download it again. This tool is frequently updated.

This program is a powerful tool, intended by its creator, to be "used under the guidance and supervision of trained malware removers".
Using this tool incorrectly could cause problems with your operating system... preventing it from ever starting again!


The first thing you need to do is print out How-To-Use-ComboFix. Read these instructions thoroughly.
You will not have Internet access when you execute ComboFix. All open windows will need to be closed!

  1. Please disable any Antivirus or Firewall you have active, as shown in this topic. Please close all open application windows.
  2. Double click the ComboFix.exe icon on your desktop to begin execution. If you receive the "Open File - Security Warning"... press Run.
  3. Press Yes to the Disclaimer prompt.
    ComboFix screen appears... preparing to run. ComboFix will now begin creating a System Restore Point and then backup your registry.
  4. If not already installed... Press Yes to the "Install Recovery Console" prompt.
  5. Press Yes at the Recovery Console installation results prompt... Even if unsuccessful, have ComboFix continue the scan.
    Do Not use your keyboard or mouse click anywhere in the ComboFix window, as this may cause the program to stall or crash!
    ComboFix will disconnect you from the Internet, may cause your desktop to disappear and also change your clock settings... this is normal, so don't worry. They will be restored when finished. The ComboFix window data will be changing with various "Stages"... completed. When finished the screen will show that a log is being created.
    ComboFix disables autorun of all CD, floppy and USB devices to assist with malware removal and increase security.
    When finished... Notepad will open ... ComboxFix will produce a log file called "log.txt".
  6. Please copy/paste the contents of log.txt... in your next reply.
** Enable your Antivirus and Firewall, before connecting to the Internet again! **

Step 3.
Please include in your next reply:
  1. Any problem executing the instructions?
  2. ComboFix log.txt file contents.
  3. How is the computer behaving?
Thanks,
Wingman
User avatar
Wingman
Admin/Teacher
Admin/Teacher
 
Posts: 14115
Joined: July 1st, 2008, 1:34 pm
Location: East Coast, USA

Re: Slow computer

Unread postby sin_fury » December 4th, 2009, 2:50 am

Haven't gotten to a computer with a printer yet, but I should be able to print the instructions out tomorrow.
sin_fury
Regular Member
 
Posts: 46
Joined: June 11th, 2008, 1:52 am

Re: Slow computer

Unread postby sin_fury » December 6th, 2009, 4:04 am

Since I still have a student email account I was thinking about getting windows 7 for $25. Don't know if that would help with all the registry things you were talking about earlier. No problems with the instructions (once I finally printed them out). Computer is acting about the same.



ComboFix 09-12-05.01 - SiN_Fury 12/05/2009 14:38.3.2 - x86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.511.233 [GMT -6:00]
Running from: c:\documents and settings\Administrator\Desktop\ComboFix.exe
AV: McAfee VirusScan Enterprise *On-access scanning disabled* (Updated) {918A2B0B-2C60-4016-A4AB-E868DEABF7F0}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\ATI Technologies\ATI.ACE\atIAcmxx.dll
c:\windows\system32\3572050806.dat
c:\windows\system32\skinboxer43.dll
c:\windows\system32\tb.dll

.
((((((((((((((((((((((((( Files Created from 2009-11-05 to 2009-12-05 )))))))))))))))))))))))))))))))
.

2009-12-18 01:14 . 2009-09-10 20:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-18 01:13 . 2009-12-18 01:13 4045527 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2009-12-05 19:28 . 2009-12-05 20:21 -------- d-----w- c:\documents and settings\Guest\Application Data\HPAppData
2009-12-05 08:22 . 2009-12-05 08:27 -------- d-----w- c:\documents and settings\Administrator\Application Data\HPAppData
2009-12-04 22:18 . 2009-12-04 22:18 -------- d-----w- c:\documents and settings\Administrator\Application Data\HP
2009-12-04 22:18 . 2009-12-04 22:18 -------- d-----w- c:\documents and settings\All Users\Application Data\WEBREG
2009-12-04 22:16 . 2008-10-28 10:31 16496 ----a-r- c:\windows\system32\drivers\HPZipr12.sys
2009-12-04 22:16 . 2008-10-28 10:31 49920 ----a-r- c:\windows\system32\drivers\HPZid412.sys
2009-12-04 22:16 . 2008-10-06 21:37 315392 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\hpfpp083.dll
2009-12-04 22:16 . 2008-10-29 18:35 271704 ----a-r- c:\windows\system32\hpzids01.dll
2009-12-04 22:16 . 2008-10-06 21:38 121344 ----a-w- c:\windows\system32\hpf3l083.dll
2009-12-04 22:16 . 2008-10-28 10:31 21568 ----a-r- c:\windows\system32\drivers\HPZius12.sys
2009-12-04 22:16 . 2008-10-29 18:37 737280 ----a-r- c:\windows\system32\hposwia_d02a.dll
2009-12-04 22:16 . 2008-10-29 18:37 598016 ----a-r- c:\windows\system32\hpost_d02a.dll
2009-12-04 22:16 . 2008-10-29 18:37 307200 ----a-r- c:\windows\system32\hposc_d02a.dll
2009-12-04 22:16 . 2008-10-28 10:31 372736 ----a-r- c:\windows\system32\hppldcoi.dll
2009-12-04 22:16 . 2008-10-28 10:31 309760 ----a-r- c:\windows\system32\difxapi.dll
2009-12-04 22:12 . 2009-12-04 22:12 -------- d-----w- c:\documents and settings\All Users\Application Data\HP Product Assistant
2009-12-04 22:10 . 2009-12-04 22:10 -------- d-----w- c:\program files\Common Files\HP
2009-12-04 22:10 . 2009-12-04 22:17 -------- d-----w- c:\documents and settings\All Users\Application Data\HP
2009-12-04 22:09 . 2009-12-04 22:09 -------- d-----w- c:\program files\Common Files\Hewlett-Packard
2009-12-04 22:08 . 2004-08-04 04:58 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2009-12-04 22:08 . 2004-08-04 04:58 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2009-12-04 22:06 . 2009-12-04 22:14 -------- d-----w- c:\program files\HP
2009-12-04 22:05 . 2009-12-04 22:17 164909 ----a-w- c:\windows\hpoins37.dat
2009-12-04 22:05 . 2009-07-08 14:40 632 ------w- c:\windows\hpomdl37.dat
2009-11-21 22:41 . 2009-11-21 22:41 -------- d-----w- c:\documents and settings\Guest\Application Data\Malwarebytes
2009-11-17 00:25 . 2009-11-17 00:26 -------- d-----w- C:\rsit
2009-11-16 21:03 . 2009-11-16 21:03 -------- d-----w- c:\program files\ESET
2009-11-15 00:33 . 2009-11-15 00:33 -------- d-----w- c:\program files\Java
2009-11-13 21:51 . 2009-11-13 21:51 -------- d-----w- C:\_OTM
2009-11-13 21:43 . 2009-11-13 21:43 -------- d-----w- c:\program files\ERUNT

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-18 01:17 . 2008-06-16 06:55 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-18 01:06 . 2006-01-17 23:02 -------- d-----w- c:\program files\PConPoint
2009-12-05 07:16 . 2008-08-08 16:17 -------- d-----w- c:\documents and settings\All Users\Application Data\Google Updater
2009-12-04 22:20 . 2005-09-14 03:54 39976 -c--a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-12-01 07:31 . 2009-05-14 19:56 -------- d-----w- c:\documents and settings\Administrator\Application Data\Skype
2009-12-01 07:30 . 2009-05-14 19:57 -------- d-----w- c:\documents and settings\Administrator\Application Data\skypePM
2009-11-15 00:34 . 2009-06-12 23:32 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-11-15 00:02 . 2005-10-18 04:33 -------- d-----w- c:\program files\Common Files\Adobe
2009-11-14 08:26 . 2009-10-30 03:00 -------- d-----w- c:\program files\Celtx
2009-11-13 21:48 . 2006-11-01 06:03 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-11-13 07:56 . 2009-08-19 07:38 -------- d-----w- c:\program files\Conduit
2009-11-12 22:04 . 2009-05-14 19:33 -------- d-----w- c:\program files\Logitech
2009-11-05 20:53 . 2006-01-09 08:15 -------- d-----w- c:\documents and settings\Administrator\Application Data\uTorrent
2009-10-30 03:00 . 2009-10-30 03:00 -------- d-----w- c:\documents and settings\Administrator\Application Data\Greyfirst
2009-10-29 02:27 . 2009-10-29 02:27 -------- d-----w- c:\documents and settings\Administrator\Application Data\Turbine
2009-10-29 02:09 . 2009-10-29 02:09 -------- d-----w- c:\program files\Turbine
2009-10-28 19:48 . 2009-10-28 19:46 -------- d-----w- c:\documents and settings\All Users\Application Data\PMB Files
2009-10-28 19:45 . 2009-10-28 19:45 -------- d-----w- c:\program files\Pando Networks
2009-09-25 05:56 . 2004-08-10 12:00 662016 ----a-w- c:\windows\system32\wininet.dll
2009-09-25 05:56 . 2004-08-10 12:00 81920 ----a-w- c:\windows\system32\ieencode.dll
2009-09-11 14:33 . 2004-08-10 12:00 133632 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-10 20:53 . 2008-06-16 06:55 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2006-09-06 09:11 . 2006-09-05 09:21 42903040 -c--a-w- c:\program files\Sibelius 2 Full (1).exe
2006-07-14 16:31 . 2006-10-03 08:51 2262475 -c--a-w- c:\program files\KaraokeGuide401.pdf
2006-07-08 23:48 . 2006-10-03 08:51 4949 -c--a-w- c:\program files\Read_Me_First!.htm
2006-03-11 09:56 . 2007-06-24 07:11 438272 -c--a-w- c:\program files\Mpeg2DecFilter.ax
2005-09-15 21:33 . 2005-09-15 21:33 1868 -c--a-w- c:\program files\Microsoft Mouse.lnk
2005-09-15 21:33 . 2005-09-15 21:33 1899 -c--a-w- c:\program files\Microsoft Keyboard.lnk
2005-06-18 22:31 . 2006-10-03 08:51 136 -c--a-w- c:\program files\KaraokeInfo Support Site.url
2003-11-12 03:53 . 2003-11-12 03:53 507 -c--a-w- c:\program files\ActivationFile.htm
2007-08-15 03:26 . 2007-02-18 10:10 12884 --sha-w- c:\windows\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2009-10-28 2923192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="c:\windows\ehome\ehtray.exe" [2004-08-10 59392]
"SoundMan"="SOUNDMAN.EXE" [2004-05-14 67072]
"type32"="c:\program files\Microsoft IntelliType Pro\type32.exe" [2004-06-03 172032]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\point32.exe" [2004-06-03 204800]
"ShStatEXE"="c:\program files\McAfee\VirusScan Enterprise\SHSTAT.EXE" [2007-10-17 111952]
"WinPatrol"="c:\program files\BillP Studios\WinPatrol\winpatrol.exe" [2008-04-25 333120]
"McAfeeUpdaterUI"="c:\program files\McAfee\Common Framework\UdaterUI.exe" [2007-10-25 136512]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\dxdiag.exe"=
"c:\\Program Files\\SlurpySoft\\Wulfram\\wulfram2.exe"=
"c:\\Program Files\\ABIT\\ABIT uGuru\\FlashMenu.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Trillian\\trillian.exe"=
"c:\\Program Files\\Windows Media Player\\wmplayer.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Black Isle\\BGII - SoA\\BGMain.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\mirc-mod4\\mirc.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-1.12.0-enUS-downloader.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-1.12.0.5595-to-1.12.1.5875-enUS-downloader.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-1.12.x-to-2.0.1-enUS-patch-downloader.exe"=
"c:\\Program Files\\World of Warcraft\\BackgroundDownloader.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-2.0.3-enUS-downloader.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-2.0.4.6314-to-2.0.5.6320-enUS-downloader.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-2.0.3.6299-to-2.0.5.6320-enUS-downloader.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-2.0.5.6320-to-2.0.6.6337-enUS-downloader.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-2.0.6.6337-to-2.0.7.6383-enUS-downloader.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-2.0.7.6383-to-2.0.8.6403-enUS-downloader.exe"=
"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\PMSRegisterFile.exe"=
"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\umi.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-2.0.8.6403-to-2.0.10.6448-enUS-downloader.exe"=
"c:\\Program Files\\World of Warcraft\\WoW-2.0.10.6448-to-2.0.12.6546-enUS-downloader.exe"=
"c:\\Program Files\\GameSpy Arcade\\Aphex.exe"=
"c:\\Program Files\\McAfee\\Common Framework\\FrameworkService.exe"=
"c:\\Program Files\\VentSrv\\ventrilo_srv.exe"=
"c:\\mIRC-TCKG5\\mirc.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqcopy2.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\Common Files\\HP\\Digital Imaging\\Bin\\hpqPhotoCrm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
"c:\\Program Files\\HP\\HP Software Update\\HPWUCli.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724
"56966:TCP"= 56966:TCP:Pando Media Booster
"56966:UDP"= 56966:UDP:Pando Media Booster

R0 uGuru;uGuru;c:\windows\system32\drivers\uGuru.SYS [9/15/2005 3:14 PM 10752]
S3 AC2003;AC2003;c:\windows\system32\drivers\AC2003.sys [9/7/2005 4:28 PM 4224]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office10\EXCEL.EXE/3000
Trusted Zone: idolonfox.com\www
Trusted Zone: mlb.com\www
FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\8zq2x5i8.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-sunm&p=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-sunm&p=
FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpClipBook.dll
FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpClipBookDB.dll
FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpNeoLogger.dll
FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSaturn.dll
FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSeymour.dll
FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSmartSelect.dll
FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSmartWebPrinting.dll
FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSWPOperation.dll
FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpXPLogging.dll
FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpXPMTC.dll
FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpXPMTL.dll
FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpXREStub.dll
FF - component: c:\program files\Mozilla Firefox\extensions\browserhighlighter@ebay.com\components\Shim.dll
FF - plugin: c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\8zq2x5i8.default\extensions\moveplayer@movenetworks.com\platform\WINNT_x86-msvc\plugins\npmnqmp071303000006.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\plugins\nphpclipbook.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npPandoWebInst.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\NPTURNMED.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
.
- - - - ORPHANS REMOVED - - - -

WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)
AddRemove-Scr Online The - c:\docume~1\ADMINI~1\APPLIC~1\FILMHO~1\TRAY CAKE.exe



**************************************************************************
scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files:

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(696)
c:\windows\system32\Ati2evxx.dll
.
Completion time: 2009-12-05 14:55
ComboFix-quarantined-files.txt 2009-12-05 20:54
ComboFix2.txt 2008-06-16 05:50
ComboFix3.txt 2008-06-16 03:28

Pre-Run: 50,275,459,072 bytes free
Post-Run: 50,267,152,384 bytes free

- - End Of File - - 4D040822CE7DAF0C00DBBB71C61AB2B0
sin_fury
Regular Member
 
Posts: 46
Joined: June 11th, 2008, 1:52 am

Re: Slow computer

Unread postby Wingman » December 6th, 2009, 5:40 pm

Hi sin_fury,

Please do not make any changes to your system, run any "fix" programs and/or remove any files unless instructed to do so, by me.

Please read these instructions carefully before executing and then perform the steps, in the order given.
lf, you have any questions or problems, executing these instructions, <<STOP>> do not proceed, post back with the question or problem.

I noticed some entries in your Internet Trusted Zone. For security reasons, it is advisable not to have any entries in this zone, unless absolutely
necessary, say for maybe an antivirus application. Please go to your Internet Options - Security tab - Trusted Sites - Sites button... and remove the entries there.

Step .
ERUNT - Emergency Recovery Utility NT
Modifying the Registry can create unforeseen problems, so it's always wise to create a backup before doing so.
Run:
  1. Please navigate to Start >> All Programs >> ERUNT... double-click ERUNT from the menu.
  2. Click on OK within the pop-up menu.
  3. In the next menu under C:\WINDOWS\ERDNT\DD-MM-YYYY under Backup options make sure both the following are selected:
    • System registry.
    • Current user registry.
  4. Next click on "OK"... at the prompt... reply "Yes".
    After a short duration the Registry backup is complete! pop-up message will appear.
  5. Now click on "OK". A registry backup has now been created.
< STOP > If you did not successfully complete this step. < STOP > Do not continue with any other steps, post back and let me know!

Step 2.
OTM
You should still have this on your desktop. Just ignore the download instructions, provided for convenience.
  1. Please download OTM.exe...by Old Timer. Save it to your desktop.
  2. Double click on OTM.exe to run it.
    If you receive the "Open File - Security Warning", please press Run.
  3. Please copy and paste the text in the Code box below, into OTM (1).
    Please refer to the OTM screen image below, for reference.
    Warning: Do not type it out... errors could damage your machine.
    Code: Select all
    :Processes
    :Reg
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "C:\Program Files\GameSpy Arcade\Aphex.exe"=-
    :Files
    c:\program files\PConPoint
    :Commands
    [EmptyTemp]
    [Start Explorer]
    [Reboot]
    

    Please refer to this image to use OTM.exe

    Image

  4. Click on MoveIt! (2)
  5. The end results of the processing will be in 2 places:
    • The Results window on the right side of the OTM screen.
    • A log (text) file created in "C:\_OTM\MovedFiles\mmddyyyy_hhmmss.log"
  6. Copy all the text from the Results window... Open Notepad, paste the OTM results into the Notepad file, save it on your desktop.
  7. Click Exit (3) when done.
  8. Please paste the entire content from the OTM (Results) window (Notepad file) or the OTM log file, in your next reply.
NOTE: If your computer did not automatically reboot... please reboot it (normally) now!

Step 3.
Kaspersky Online Scanner.
Please go to Kaspersky Online Virus Scanner © Kaspersky Lab to perform an online antivirus scan.
  1. Read the "Advantages - Requirements and Limitations" then press... the ACCEPT...button.
    The latest program and definition files will be downloaded. It takes time, please be patient, let it finish.
  2. Once the files have been downloaded, click on the SETTINGS...button.
    In the scan settings make sure the following are selected:
    • Detect malicious programs of the following categories:
      Viruses, Worms, Trojan Horses, Rootkits
      Spyware, Adware, Dialers and other potentially dangerous programs
    • Scan compound files (doesn't apply to the File scan area):
      Archives
      Mail databases
      By default the above items should already be checked.
    • Click the SAVE...button, if you made any changes.
  3. Now under the Scan section on the left:
      Select My Computer
    The program will start scanning your system. This takes a while, be patient... let it run.
    Once the scan is complete it will display if your system has been infected.
  4. Save the scan results as a Text file ... save it to your desktop.
  5. Copy and paste the saved scan results file in your next reply.

Step 4.
Please include in your next reply:
  1. Any problem executing the instructions?
  2. OTM results
  3. KAS scan results
  4. How is the computer behaving?
Thanks,
Wingman
User avatar
Wingman
Admin/Teacher
Admin/Teacher
 
Posts: 14115
Joined: July 1st, 2008, 1:34 pm
Location: East Coast, USA

Re: Slow computer

Unread postby sin_fury » December 7th, 2009, 9:41 pm

Things were going smoothly until I ran Kaspersky. The scan took 10 hours...the last 6 hours it was stuck at 99%. I tried stopping the scan but that froze my computer. I started another scan a few hours later, and once again it stopped at 99%, so I stopped it at 5 and a half hours. Here are both reports.

All processes killed
========== PROCESSES ==========
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Program Files\GameSpy Arcade\Aphex.exe deleted successfully.
========== FILES ==========
c:\program files\PConPoint\PC OnPointBackup folder moved successfully.
c:\program files\PConPoint\logs folder moved successfully.
c:\program files\PConPoint folder moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 114860 bytes
->Temporary Internet Files folder emptied: 719825 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 107064353 bytes
->Apple Safari cache emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Guest
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 70551073 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->FireFox cache emptied: 0 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 49286 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
Windows Temp folder emptied: 49828296 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 217.78 mb


OTM by OldTimer - Version 3.1.1.0 log created on 12062009_154959

Files moved on Reboot...

Registry entries deleted on Reboot...
sin_fury
Regular Member
 
Posts: 46
Joined: June 11th, 2008, 1:52 am

Re: Slow computer

Unread postby sin_fury » December 7th, 2009, 9:42 pm

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0: scan report
Monday, December 7, 2009
Operating system: Microsoft Windows XP Professional Service Pack 2 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Monday, December 07, 2009 18:01:21
Records in database: 3340577
--------------------------------------------------------------------------------

Scan settings:
scan using the following database: extended
Scan archives: yes
Scan e-mail databases: yes

Scan area - My Computer:
A:\
C:\
D:\
E:\
F:\

Scan statistics:
Objects scanned: 119828
Threats found: 3
Infected objects found: 4
Suspicious objects found: 0
Scan duration: 05:25:38


File name / Threat / Threats count
C:\mirc-mod4\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.621 1
C:\mIRC-TCKG5\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.621 1
C:\QooBox\Quarantine\C\Program Files\NewDotNet\nncore.dll.vir Infected: not-a-virus:AdWare.Win32.NewDotNet.m 1
C:\WINDOWS\$NtUninstallKB959426$\kernel32.dll Infected: Trojan.Win32.Patched.gr 1

Scanning stopped by the user.
sin_fury
Regular Member
 
Posts: 46
Joined: June 11th, 2008, 1:52 am

Re: Slow computer

Unread postby Wingman » December 8th, 2009, 11:24 am

Hi sin_fury,

Sorry the KAS scans took so long. But the good news is the files found are not really a problem. The Qoobox file entry will be removed later.

At this point I am not sure what else I can do for you. We've removed some old files, registry entries, updated some out-of-date software and eliminated some programs from starting when you boot your computer. The only things I can provide to you now are some things that you can do to assist the performance of your system. Please read the entire post and see the last line.

The first thing I want to remind you of is because of having had a rootkit infection earlier... the only way to truly know that there are no remnants
left is to perform a reformat and reinstall of your Operating System. Whether you choose to do so is up to you. If it were my system, I would backup my personal files, music, pictures... no programs, screensavers, html type files, then reformat and reinstall..

Your original complaint was about how slow your computer was running. Here are some things you can do to help alleviate that condition.

Add more memory (RAM)
You are severely limited on the amount of RAM installed.
RAM has gotten cheaper and you could use Crucial Memory Advisor™ tool to scan your system and determine what kind and how much memory you could purchase and install. Adding additional memory is one of the most cost effective ways to increase your computer's performance.

Update your browser software
As I indicated before your version of FireFox (3.0.1.5) is out-dated. If you experience slowness or instability with your current browser, you should install the latest version. For security reasons, you should update to the latest version... now.

Slow Computer
Here are some steps you can take to assist your computer's performance. These should be performed on a regular basis, some more frequently than others.

Frequent Steps:

1. Clear out Temporary files.
Windows and other programs create temporary files. These are normally removed when no longer needed by the same programs that created them. For a variety of reasons, sometimes they get left behind.
So over time their number builds up, and unless you clear them out they can slow down your computer noticeably.
Cleaning your browser's temporary files is even more critical. All browsers cache (store) the web pages you visit. The original reason was to make loading pages faster. For dial-up users this was quite a good idea but with today's faster connections it's unnecessary.
How to clean your temporary files:
Windows XP
Click Start > All Programs > Accessories > System Tools > Disk Cleanup
This will bring up the Disk Cleanup window.
Check the following entries:
- Temporary Internet Files.
- Recycle Bin.
- Temporary Files.
Click OK. When prompted whether you're sure you want to do this click Yes.

Get into the habit of doing this about once a month, or more frequently if you use your computer a lot.
--------------------------------------------------------------------------------

2. Defrag your Hard Drive.
When files get written to your Hard Drive, the drive controller has to find space for it, at times breaking the file into smaller fragments to make use of drive space efficiently.
Over time files can become very fragmented, causing the drive controller to work harder to find all the fragments, re-combine them, so a program can use it. This can impact the overall performance of your computer and depending on the degree of fragmentation, could impact it a lot.
You should defrag your hard drive:
  • once a month ( heavy users - lots of files written and/or removed)
  • once every 3 months (for light users).
Defragmentation software generally allows for an analysis to be performed, to see if a defragmentation is needed. The actual defrag operation can take several hours to complete depending on the degree of fragmentation and size of the Hard Drive, therefore it is better to perform this operation overnight.
How to Defrag your Hard Drive:
Windows XP
Click Start > All Programs > Accessories > System Tools > Disk Defragmenter
Click on the Analyze button.
Let the analyzer run, it takes 5-10 mins or so, sometimes longer, depending on your disk size. When finished it will pop up a window telling you whether you need to defrag or not.
Microsoft is conservative about Defragging, so even if it states no defrag is needed, look at the graph produced when analyzing, if there's more than about 10-15% showing red, then Defragging will improve your disk performance.
If you need to Defrag...
Click the Defragment button.
The defrag process can take hours, so a good time to start this is at night, before your go to bed.

----------------------------------------------------------------------------------------------------------------------------

Infrequent Steps:

1. Eliminate unnecessary programs at Startup.
Software makers think their programs are important and want them to start when you first start your computer.
Having unneeded programs run when you start your computer can dramatically slow your start time (when you can actually begin using the computer)
and each program uses a certain amount of memory when loaded. Low memory can severely impact your computer's performance.
Preventing programs from "auto starting doesn't mean you can't run the programs. You simply have to start them yourself, like other programs you use,
it just means they won't be running unless you deliberately want to use it.
Programs like your Anti-Virus and Firewall need to auto run, so don't alter their startup settings.
How to eliminate unnecessary programs at Startup.
For Inexperienced users:
Download StartupLite ... by Rubberducky. Save it to your Desktop.
Doubleclick StartupLite.exe to launch the programme.
Ensure the Disable box is checked.
Click Continue.
A pop up message will relate that the unnecessary startup items in your list have been disabled and ask you to restart your computer.
Re-start your computer.

For experienced users:
Download and install WinPatrol ... by Bill Pytlovany.
Doubleclick the Scottydog icon in your taskbar to launch the program.
Click on the Startup Programs tab.
To stop a program starting automatically at startup, click on it to highlight it, then click the Disable button.
(It will be up to you to research items first to see whether they should be disabled)
Exit WinPatrol.

If you've disabled something you later wish to re-enable, do the following.

Launch WinPatrol (as described above).
Click on the Startup Programs tab.
Click on entry you wish to re-enable.
With a disabled entry, the Disable button will turn into an Enable button.
Click Enable
Exit WinPatrol
--------------------------------------------------------------------------------

2. Large HOSTS file and DNS Client Service.
If you use a large HOSTS file, one of the Hosts files (eg MVPs Hosts, Bluetack or using Spybot Search and Destroy's Immunize feature) and notice a slowdown, you may need to disable the Windows DNS Client Service. Only disable if you are NOT part of a domain.
How to disable the DNS Client Service:
Windows XP
Click Start > Run
type: services.msc into the Open: box, then click OK.
This will open the Services window.
Scroll down to DNS Client and double click on it.
Click the Stop button to stop the service.
Set Startup type to Manual.
Click OK
Exit the Services window.
--------------------------------------------------------------------------------

3. Disable your Indexing Service.
This service indexes all your files, in order that you can find them faster when searching. This indexing is done on a continuous basis and can use a lot of CPU time, while working your hard drive for no real noticeable search speed difference but slows your computer at all other times.
How to disable Indexing Service:Windows XP
Click Start > Run
type: services.msc into the Open: box, then click OK.
This will open the Services window.
Scroll down to Indexing Service and double click on it.
Click the Stop button to stop the service.
Set Startup type to Disabled.
Click OK
Exit the Services window
--------------------------------------------------------------------------------

4. Hard Drive - Check % of Free Space.
Windows (XP and Vista) need a certain amount of (free disk space) to operate efficiently, not available the processor has to "page out",
which will slow everything down considerably. You should try to keep 15-20% of your disk empty, if you don't have 15%, it's time to free up some disk space.
How to check your % free disk space:
Windows XP
Click Start > All Programs > Accessories > System Tools > Disk Defragmenter
Look in the last column (top right) under % Free Space
Exit Disk Defragmenter
--------------------------------------------------------------------------------

If you don't have enough free disk space, here's a couple of suggestions for freeing some up.
  • Remove unnecessary programs.
  • Reduce your System Restore Points

How to remove unused programs:
Windows XP
Click Start > Control Panel > Add or Remove Programs
Click on the program you want to remove to highlight it.
Click the Change/Remove button and follow any instructions given.
Repeat for all programs you wish to remove.
--------------------------------------------------------------------------------

How to remove all but your last System Restore Point:
Windows XP
Click Start > All Programs > Accessories > System Tools > Disk Cleanup
This will bring up the Disk Cleanup window.
Click the More Options tab.
In the System Restore field, click Clean up
You will be prompted if you want to remove all but the most recent Restore Point.
Click Yes... then click OK.
When prompted whether you're sure you want to do this click Yes.

Please post back that you have seen this post and if you have any questions, ask... I try my best to answer them.
After I get your response to this post, We'll do some cleanup and I'll post some things you can do to make your system more secure OK?


Thanks,
Wingman
User avatar
Wingman
Admin/Teacher
Admin/Teacher
 
Posts: 14115
Joined: July 1st, 2008, 1:34 pm
Location: East Coast, USA

Re: Slow computer

Unread postby sin_fury » December 8th, 2009, 4:37 pm

As I said in an earlier post, I was planning on getting the student discounted version of Windows 7. Would that solve the rootkit problems? And I was just holding off on updating Firefox because you told me to wait until we were done, so am I clear to update it now?
sin_fury
Regular Member
 
Posts: 46
Joined: June 11th, 2008, 1:52 am

Re: Slow computer

Unread postby Wingman » December 8th, 2009, 7:53 pm

Hi sin_fury,

I saw that statement about Windows 7, at a student discount...
I have to make sure you understand what I mean when I talk about reformatting and reloading the Operating System. The way any remnants of the rootkit infection can be removed is in the reformatting of the entire hard drive. This is not the quick format but a thorough format and clean installation of the OS. The reformatting of the disk is what removes any rootkit traces, not the loading of the OS.
If this student discounted version of Windows 7 is an UPGRADE version... it will not work. In an upgrade, the hard drive is not reformatted.

As far as updating to the latest version of FireFox, please wait until we are finished and this topic is closed.

For now, except for the rootkit issue, there does not appear to be any malware on your system. So let's finish up by removing some of the tools we used.
These tools are not for everyday use and should only be used under the supervision of a trained helper.

Step 1.
Please delete from your desktop:
sreng2.zip
sreng2 folder and all it's contents
any report logs we created

Step 2.
ComboFix - Cleanup
  1. Click Start...select Run from the menu.
  2. Copy and paste the following into the text entry box:
    Combofix /Uninstall
  3. Click the OK button. (See image below as reference.)
Image

Step 3.
OTC
Please download OTC.exe... by OldTimer. Save it to your desktop.
  1. Double click on OTCl.exe.
    If you receive the "Open File - Security Warning" prompt, press "Run".
  2. Click on CleanUp!.
  3. Click "Yes" to the Begin cleanup process? prompt.
  4. Click "Yes" ... when prompted to reboot the computer to remove files.
Your computer should restart automatically. If it doesn't, please do so manually.

Please follow these simple guidelines in order to help keep your computer more secure:

Update your Antivirus programs and other security products regularly.
Avoid new threats that could infect your system. You can also check if any application updates are needed for your PC.
Secunia Software Inspector - Copyright © Secunia.
F-secure Health Check - Copyright © F-Secure Corporation.

Visit Microsoft often
Keep on top of critical updates , as well as other updates for your computer.
How to configure and use Automatic Updates in Windows XP
Using Windows Update for Windows XP
Microsoft Update Home

You can try...some free programs, that will help improve your computer's security.
These kinds of protection programs (adware, spyware, etc...) tend to overlap in coverages.
Many feel that having a "layered" protection scheme, is beneficial. Each individual has to decide what works best for their situation.
There are many available...here are a few you can look into, if you want. :)

Malwarebytes' Anti-Malware
You have this program... update and use often. Download link provided for convenience.
Download it from Malewarebytes © Malwarebytes Corporation.
Tutorials are available for installing and running, Malwarebytes' Anti-Malware.
Powerful, easy to use and free. For real-time protection you will have to purchase the product.

Spybot Search and Destroy
Download it from © Safer Networking Ltd. Just choose a mirror and off you go.
A Spybot tutorial can be found Here.

SpywareBlaster
Download it from © Javacool Software LLC.
A SpywareBlaster knowledgebase can be found Here.

WinPatrol
Download it from Copyright © BillP Studios
Information about how WinPatrol works, is available Here.
(The free version of WinPatrol...does not provide any real-time protection)

Firetrust SiteHound
You can find information and download it from © Firetrust Ltd


Read, stay informed.
Please check out these articles:
Tony Klein's "How did I get infected in the first place?"
How to prevent Malware:© miekiemoes - Microsoft MVP - Consumer Security .

Please post back to let me know you successfully completed the first 3 steps and read the remainder of this post. Once I receive your post, unless you have any questions, I will have this topic closed as resolved.

Stay Safe! 8)
Wingman
User avatar
Wingman
Admin/Teacher
Admin/Teacher
 
Posts: 14115
Joined: July 1st, 2008, 1:34 pm
Location: East Coast, USA

Re: Slow computer

Unread postby sin_fury » December 9th, 2009, 4:22 am

This is from the FAQ from microsofts website concerning the windows 7 package.

PCs designed for Windows Vista should run Windows 7 very well. To double check your PC’s capabilities, you can download and run the free Windows Upgrade Advisor. How you upgrade will depend on the edition of Windows Vista on your PC, and the edition of Windows 7 you want to install.


That made it seem like just an upgrade, but that was for Windows Vista, so I read the section on Windows XP, and it seems similar to what you were talking about earlier.

If you decide to install Windows 7 on a PC running Windows XP you’ll need to do a custom installation. This is sometimes called a “clean install” because it will erase your hard drive and set up your PC from scratch. To avoid losing anything, you’ll need to make copies of all the files, photos, and other information you want to keep.


So I think given the nature of the "upgrade" it would force me to set up the PC from scratch anyway. Other than that, I removed all the things you told me to, and I read the rest of the post concerning other ways to keep the computer running smoothly. Thank you very much for your help, this has been a long and drawn out process, but it is definitely worth it to know about the rootkit.


P.S. Congrats on graduating!!!

Edit: On a side note, I'm up to 1 GB of RAM now. When I was putting in a new fan 6 months ago I had to move the RAM chips to get a good angle on some of the pins that fastened the fan. I put one of the 2 chips back in successfully, but apparently I didn't put the other chip in all the way. Opened up my computer, saw the loose RAM card and fixed it. I still have 2 open slots though...plus I could be using 1 GB sticks instead of 512 MB ones, so more RAM is definitely on the way.
sin_fury
Regular Member
 
Posts: 46
Joined: June 11th, 2008, 1:52 am

Re: Slow computer

Unread postby Wingman » December 9th, 2009, 11:36 am

Hi sin_fury,
P.S. Congrats on graduating!!!
Thanks a lot. :)

I want to make sure you check this out.
The Windows 7 student discount version... this discounted version may only be an upgrade version and not a full install version.
Microsoft releases both "upgrade" or "full" versions. You would need the "full" version.
So before you purchase it, make sure it's a full version, otherwise you'll just waste your money.

Glad to hear about "finding" more RAM... I'm sure you'll see an improvement in performance.
I use (2) 1GB RAM modules on my XP machine and its very responsive.

You did a good job hanging in there :)
There is no need to respond to this post, I will now ask for this topic to be closed, as resolved.

Stay Safe,
Wingman
User avatar
Wingman
Admin/Teacher
Admin/Teacher
 
Posts: 14115
Joined: July 1st, 2008, 1:34 pm
Location: East Coast, USA

Re: Slow computer

Unread postby Dakeyras » December 10th, 2009, 2:37 pm

As this topic is resolved, this topic is now closed.

We are pleased we could help you resolve your computer's malware issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.
User avatar
Dakeyras
MRU Honors Graduate
MRU Honors Graduate
 
Posts: 8732
Joined: November 21st, 2007, 5:30 am
Location: The Tundra
Advertisement
Register to Remove

Previous

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 93 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware