Helping a friend .. Whats wrong with this log..
#16
Posted 10 February 2007 - 12:51 AM
#17
Posted 10 February 2007 - 01:43 AM
Looks good. How is the pc behaving?
So far so good...
I ran spybot and it came up with newdotnet but im pretty sure it said it deleted it succesfully.
What do you suggest i use for protection?
Nod32, Spybot, Adaware?
Oh and Thanks so much.
#18
Posted 10 February 2007 - 12:25 PM
* If I had you use Killbox to delete any files, go ahead and delete the C:\!Killbox folder then empty the Recycle Bin.
* Check this out for info on how to tighten your security settings and some good free tools to help prevent this from happening again.
* Go to Windows update and install all "High Priority Updates".
* Now turn off System Restore:
On the Desktop, right-click My Computer.
Click "Properties".
Click the "System Restore" tab.
Put a check by "Turn off System Restore on all drives".
Click Apply, and then click OK.
Restart your computer, turn System Restore back on and create a restore point.
To turn System Restore back on:
On the Desktop, right-click My Computer.
Click "Properties".
Click the "System Restore" tab.
Remove the check by "Turn off System Restore on all drives".
Click Apply, and then click OK.
To create a restore point:
Single-click "Start" and point to "All Programs".
Mouse over "Accessories", then "System Tools", and select "System Restore".
In the System Restore wizard, select the box next the text labeled "Create a restore point" and click the "Next" button.
Type a description for your new restore point. Something like "After trojan/spyware cleanup". Click "Create" and you're done.
#19
Posted 10 February 2007 - 04:03 PM
I use Nod32. It's the best as far as I'm concerned. I use it an SpywareBlaster alone. Those two together meet all my malware protection needs. My surfing habits are quite conservative. If you go to a lot of unsavory sites, you may want to add an antispyware app like AVG-Antispyware.
* If I had you use Killbox to delete any files, go ahead and delete the C:\!Killbox folder then empty the Recycle Bin.
* Check this out for info on how to tighten your security settings and some good free tools to help prevent this from happening again.
* Go to Windows update and install all "High Priority Updates".
* Now turn off System Restore:
On the Desktop, right-click My Computer.
Click "Properties".
Click the "System Restore" tab.
Put a check by "Turn off System Restore on all drives".
Click Apply, and then click OK.
Restart your computer, turn System Restore back on and create a restore point.
To turn System Restore back on:
On the Desktop, right-click My Computer.
Click "Properties".
Click the "System Restore" tab.
Remove the check by "Turn off System Restore on all drives".
Click Apply, and then click OK.
To create a restore point:
Single-click "Start" and point to "All Programs".
Mouse over "Accessories", then "System Tools", and select "System Restore".
In the System Restore wizard, select the box next the text labeled "Create a restore point" and click the "Next" button.
Type a description for your new restore point. Something like "After trojan/spyware cleanup". Click "Create" and you're done.
Awesome ...
Thanks Again for your help bud.
#20
Posted 10 February 2007 - 06:17 PM
There are just a couple more things I'd like to point out. One is the fact that you have a lot of unnecessary apps loading when Windows starts. These apps are running all the time. Even when you are not using them. This is putting an unnecessary drain on your pcs resources. Below I'm posting some info to help you remove some of those.
The maintenance practices you'll find below should be done on a regular basis to keep your machine running efficiently. The frequency with which you perform these depends largely on your pc usage.
Keeping the programs that run when Windows boots up to a minimum is of great importance and has a significant effect on the performance of your pc. These I refer to here as "startups". ** See the Note below for info to help you identify the startups in your Hijack This log.
Another thing that can have a significant effect on your pc's performance is fragmentation. Over time the files on your computer will become fragmented. This can cause your machine to slow down and freeze. This fragmentation can be corrected by running the Windows Defragmentation tool.
You should go ahead and do all of the following now:
1: Remove unnecessary startups
This should be done through the Windows System Configuration Utility. I do not recommend using Hijack This to control your startups.
To use the Windows System Configuration Utility, Go to Start > Run and type in msconfig.
Click OK or hit the Enter key.
Click on the "Startup" tab and remove the check by the items that you have determined are unnecessary. Click "Apply" then "Close"
You will be prompted to restart. Go ahead and restart.
Upon restart you will be confronted with a dialogue box warning about running in selective startup. Just ignore that message and put a check in the box by "Don't show me this message or launch the System Configuration Utility when Windows starts" and click "OK". You will not be bothered by the message again.
Keep in mind that some entries will be re-enabled in the startups each time you use that particular program. Therefore, you will have to find the option in that programs preferences that says something like "Load with Windows" or "Run when Windows Starts" and disable that option.
Go here for info on msconfig:
You can look up the startups at the following links to help determine what is needed and what is not:
ComputerCops Startuplist
BleepingComputer Startuplist
AnswersThatWork Task List
Windows Startup Application Knowledge Base
** Note: The startups are represented by the O4 entries in your Hijack This log like this one:
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
Look them up at those links by copying and pasting the name in the brackets (as bolded in the example above [QuickTime Task]) in the search box on the Startuplist (Castlecops) and Startup Programs Database (Bleepingcomputer) pages. Read the Usage Instructions/information that tells you how to use the pages and identify what to remove and what not to remove. For example, it tells you that if you see a "Y" under the Status column for startup entry it means Yes that entry is normally needed to run at startup. "N" under status means No it is not needed to run at startup and you should disable it. "X" means that it is definitely not needed and usually the Xs are malware. There is more info on those pages that tell you how to use the lists so please read that before you begin disabling startups.
2: How to Defrag your Hard Drive
3: How to Run Disk Cleanup
4: Finally, How to Run chkdsk:
To use Chkdsk, click Start and My Computer. Right-click the hard drive you want to check, and click Properties. Select the Tools tab and click Check Now. Check both boxes. Click Start. You'll get a message that the computer must be rebooted to run a complete check. Click Yes and reboot. Chkdsk will take awhile, so run it when you don't need to use the computer for something else.
#21
Posted 11 February 2007 - 01:35 AM
I will post a reply and let you know how i do after i check the startup programs, create system restore and run the defrag and chkdsk.
Again thanks for your help and all the info you have given me.
#22
Posted 11 February 2007 - 05:26 PM
I moved the log you posted from your pc to it's own thread here:
http://www.geekstogo...s...=148560&hl=
It's too confusing to start with a new pc in the same thread. We'll deal with that one there.
#23
Posted 11 February 2007 - 05:49 PM
It was my pleasure!
I moved the log you posted from your pc to it's own thread here:
http://www.geekstogo...s...=148560&hl=
It's too confusing to start with a new pc in the same thread. We'll deal with that one there.
Okay not a problem thanks.
I ran everything you said and removed a lot of unnecessary startup programs and the laptop is running a lot smoother.
Thanks for your help bud.
#24
Posted 11 February 2007 - 06:04 PM
#25
Posted 13 March 2007 - 08:44 PM
If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.
Everyone else please begin a New Topic.
Similar Topics
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users