[Spanstar]

Well, I just got done going through a virus/malware fix on your site with the help of Thunderbird. Thanks so much. Have a few lingering issues and he recommended I come here. First issue is that a few months ago, I had a virus that messed up my desktop. My background was blank and all my icons were gone. Turned out that when I log into my profile "SHAWN" instead of looking at SHAWN\Destop, my desktop is actually looking at TEMP\Desktop. Anyone have any idea how to fix this? I got my background back and all my icons and stuff, but it is looking at the wrong folder still. Had to basically set up the TEMP\Desktop as my active desktop instead of the desktop associated with my profile. The second issue is that after TB got done helping with my virus/malware issue, now my computer has a lag on startup. The desktop shows up, with no icons and no task bar and it hangs for about 45 seconds. Prior to us fixing the virus/malware, this was not happening. I have done all the msconfig stuff and should have nothing starting up that would cause this. Everything I can disable is disabled. I have noticed in my taskmanager that I have a googleupdate.exe running. I have nothing installed from google. There is no google in my msconfig. There is no google in my add/remove software. If I go to the actual googleupdate.exe file and try and delete it, it won't let me. Gives me some error. I am thinking that maybe this is whats causing my startup to hang, but I really have no idea. Any help would be greatly appreciated!

Thanks,
Shawn

[Advertisements]

Hi there Spanstar I will attempt to help you with the second problem.

Download Autoruns from the link in my signature below:
1: Extract the Autoruns Zip file contents to a folder.
2: Double-click the "Autoruns.exe".
3: Click on the "Everything" tab
4: Remove any entries that mention "File Not Found" by right-clicking the entry and select Delete.
5: Go to File then to Export As or Save in some versions.
6: Save AutoRuns.txt file to know location.
7: Attach to your next reply.

[rshaffer61]

Hi there Spanstar I will attempt to help you with the second problem.

Download Autoruns from the link in my signature below:
1: Extract the Autoruns Zip file contents to a folder.
2: Double-click the "Autoruns.exe".
3: Click on the "Everything" tab
4: Remove any entries that mention "File Not Found" by right-clicking the entry and select Delete.
5: Go to File then to Export As or Save in some versions.
6: Save AutoRuns.txt file to know location.
7: Attach to your next reply.

[Spanstar]

Thank you so much, rsh. I really appreciate the help. Here is the autoruns file. Hrmmmmm
cant seem to attach the file. ARgh!

[Spanstar]

Sorry...I'm an idiot. Forgot to save it as a txt file. Here it is now.

Attached Files

•  AutoRuns.txt   114.98KB   112 downloads

[rshaffer61]

Ok it may be a infection causing the google problem. I suggest you go to the Malware Removal and Spyware Removal Forum and run all the steps located in the START HERE. These self-help tools will help you clean up 70% of problems on your own. If you are still having problems after doing the steps, then please post the reguested logs in THAT forum. If you are unable to run any of the tools then start a new topic in the malware forum and put this in the subject line...I am unable to run any malware tools

If you are still having problems after being given a clean bill of health from the malware expert, then please return to THIS thread and we will pursue other options to help you solve your current problem(s).

[Spanstar]

Not sure how to quote my first post, but I stated in the first post that I have already done all of that with Thunderbird. He has already given me a clean bill of health and told me to come to this portion of the forums.

[rshaffer61]

Yes you are correct. Sorry it's been a long day for me.
Going on 14 hours but let's try a different route.
This may seem repetitive but please bear with me for a bit.

Lets see what you have in your startup
Please click on
Start and then on Run
Type in msconfig and then press Enter
Now click on Startup
Next click on your Print Screen on your keyboard. It is normally the key above your number pad between the F12 key and the Scroll Lock key
Now go to Start
All Programs
Accessories
Paint
In the empty white area click and hold the CTRL key and then click the V
Go to the File option at the top and click on Save As
Save as file type JPEG and save it to your desktop

In your next reply attach the screenshot.

[rshaffer61]

Lets see what you have in your startup services area

Please click on
Start and then to Run
Type in msconfig and press Enter
Now click on Services
Click on the Hide All Microsoft Services
Then uncheck everything and restart.
If system boots correctly and is running smoothly and faster then we have a startup problem
Try going back into msconfig and check one item and reboot
Keep doing that till you have found the problem or all are finally checked.
Post back with the results

[Spanstar]

Had to take 3 pics of it. Its a long list.

Here is the first one.


Here is the second one.


Here is the third one.


Not entirely sure what the 2 checked ones are. They always come back on, even when I disable them.

[rshaffer61]

The following entry is needed only if you use multi language keyboard layouts.
To turn off just ctfmon.exe go to:

Control Panel then to Regional and Language Options

Click on the Languages Tab then click the Details button

Click on the Advanced tab

Check the box that says Turn off advanced text services option

Click A and then OK

[Spanstar]

ty....shut that one off.

[rshaffer61]

cdloader2 belongs to the Magicjack

[Rorschach112]

I am seeing some malware in those screenshots, you should head back to the Malware Removal forum and make a new topic there

[rshaffer61]

Thanks Rorschach112 and i will await the completion of the Malware topic before continuing.

[123Runner]

Question I have is if the malware is removed, does it remove those entries in the MSconfig startup?
Or are they just left over? and they have to be removed another way?

123runner