[23red]

Hi Mark

 

Is everything ok?  Are you still with me?

[Advertisements]

Ok.... here we go:

 

All processes killed
========== COMMANDS ==========
Restore point Set: OTL Restore Point
========== OTL ==========
Registry value HKEY_USERS\S-1-5-21-1501211371-2371496142-710079751-1006\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.
Registry value HKEY_USERS\S-1-5-21-1501211371-2371496142-710079751-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}\ not found.
Registry value HKEY_USERS\S-1-5-21-1501211371-2371496142-710079751-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{472734EA-242A-422B-ADF8-83D1E48CC825} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{472734EA-242A-422B-ADF8-83D1E48CC825}\ not found.
Registry key HKEY_USERS\S-1-5-21-1501211371-2371496142-710079751-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\aol.com\objects\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-1501211371-2371496142-710079751-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\turbotax.com\ deleted successfully.
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Documents and Settings\Mark\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\Mark\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
 
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 475162 bytes
 
User: Mark
->Temp folder emptied: 10881109 bytes
->Temporary Internet Files folder emptied: 2162982 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 595 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
 
User: Owner
->Temp folder emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1500210 bytes
%systemroot%\System32 .tmp files removed: 2577 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 664 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 49041 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 14.00 mb
 
 
OTL by OldTimer - Version 3.2.69.0 log created on 07162014_163805

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

 

 

 Results of screen317's Security Check version 0.99.85 
 Windows XP Service Pack 3 x86  
 Internet Explorer 8 
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Disabled! 
 Bitdefender Total Security   
`````````Anti-malware/Other Utilities Check:`````````
 Malwarebytes Anti-Malware version 1.75.0.1300 
 CCleaner    
 Java 7 Update 25 
 Java version out of Date!
 Adobe Flash Player  14.0.0.145 
 Adobe Reader XI 
````````Process Check: objlist.exe by Laurent```````` 
 Malwarebytes' Anti-Malware mbamscheduler.exe  
 Bitdefender Bitdefender vsserv.exe 
 Bitdefender Bitdefender updatesrv.exe 
 Bitdefender Bitdefender SafeBox safeboxservice.exe 
 Bitdefender Bitdefender bdagent.exe 
 Bitdefender Bitdefender pmbxag.exe 
 Bitdefender Bitdefender bdapppassmgr.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C:: 5%
````````````````````End of Log``````````````````````
 

 

Thanks!

 

Mark

[marqq]

Ok.... here we go:

 

All processes killed
========== COMMANDS ==========
Restore point Set: OTL Restore Point
========== OTL ==========
Registry value HKEY_USERS\S-1-5-21-1501211371-2371496142-710079751-1006\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.
Registry value HKEY_USERS\S-1-5-21-1501211371-2371496142-710079751-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}\ not found.
Registry value HKEY_USERS\S-1-5-21-1501211371-2371496142-710079751-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{472734EA-242A-422B-ADF8-83D1E48CC825} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{472734EA-242A-422B-ADF8-83D1E48CC825}\ not found.
Registry key HKEY_USERS\S-1-5-21-1501211371-2371496142-710079751-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\aol.com\objects\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-1501211371-2371496142-710079751-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\turbotax.com\ deleted successfully.
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Documents and Settings\Mark\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\Mark\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
 
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 475162 bytes
 
User: Mark
->Temp folder emptied: 10881109 bytes
->Temporary Internet Files folder emptied: 2162982 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 595 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
 
User: Owner
->Temp folder emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1500210 bytes
%systemroot%\System32 .tmp files removed: 2577 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 664 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 49041 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 14.00 mb
 
 
OTL by OldTimer - Version 3.2.69.0 log created on 07162014_163805

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

 

 

 Results of screen317's Security Check version 0.99.85 
 Windows XP Service Pack 3 x86  
 Internet Explorer 8 
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Disabled! 
 Bitdefender Total Security   
`````````Anti-malware/Other Utilities Check:`````````
 Malwarebytes Anti-Malware version 1.75.0.1300 
 CCleaner    
 Java 7 Update 25 
 Java version out of Date!
 Adobe Flash Player  14.0.0.145 
 Adobe Reader XI 
````````Process Check: objlist.exe by Laurent```````` 
 Malwarebytes' Anti-Malware mbamscheduler.exe  
 Bitdefender Bitdefender vsserv.exe 
 Bitdefender Bitdefender updatesrv.exe 
 Bitdefender Bitdefender SafeBox safeboxservice.exe 
 Bitdefender Bitdefender bdagent.exe 
 Bitdefender Bitdefender pmbxag.exe 
 Bitdefender Bitdefender bdapppassmgr.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C:: 5%
````````````````````End of Log``````````````````````
 

 

Thanks!

 

Mark

[23red]

Hi Mark

 

Thanks!

 

You are very welcome

 

Ok, looks good.  Please turn on the Windows Firewall. An active firewall is a must as part of your first line of defense.  To do this:

Click Start ~> Control Panel ~> Windows Firewall
A new window will open.
Check the box that says On (recommended).

Next...
 
Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older versions of Java components and upgrade the application.

Upgrading Java :
Please download JavaRa to your desktop and unzip it to its own folder

• Run JavaRa.exe, then click on Remove Java Runtime.
• Select the Java version you have from the drop down list, and then click on Run Uninstaller
• Press Yes if it asks to uninstall the product.
• Allow the uninstaller to remove the installed version.
• When its finished, go back to JavaRa, and click Back
• Click on Update Java Runtime and then select Download and install latest version.
• Press Next
• Press Java Manual Download.
• A browser window will open with the Java download page.
• Click the Windows offline link to download Java.
• Run the installer.
• Close JavaRa

 

 

 

Questions for you upon return:

1.  How is the computer running?
2.  Is Bit Defender paid or free?  It appears to use a lot of processes is why I'm asking.
3.  Java update go ok?
4.  Firewall On?

 

Thank you

[marqq]

It seems that I had the windows firewall on... do the logs show otherwise?

 

The system certainly seems better... I'm not sure what did it, but hopefully it will continue.

 

I have the paid version of bit defender and, truth be told, I don't like it.  Should I remove it?  What do you recommend that isn't such a drain on resources?

 

Again, thank you!

 

Mark

[23red]

Hi Mark
 

  Your logs show you have BitDefender Total Security which means it's a Suite with a Firewall.  I can see the BitDefender firewall running in your log.

 

Please go ahead and go back to  Start ~> Control Panel ~> Windows Firewall
A new window will open.
Check the box that says Off (not recommended)

That should help with speed!  Only one firewall need be active.  More makes trouble    and a slow computer.

 

You've got good setup. A good amount of memory and sufficient hard drive space.  You've also got a lot going on. 
Looking here Looks like BitDefender is definitly one of the best AV's for XP.  Which is an added plus with the 'end of life no more updates status' Windows XP now has. BitDefender may use more resources, but it may be well worth it.   Security suites in general use more resources.  Now it's set up with only one firewall enabled, that should help.  I have Avast free on my XP machine, but I couldn't tell you if it's less of a resource hog as I've not tried Bit Defender paid. 
    

There is a list of free Antivirus programs here at GeekstoGo.  Remember only one Anti virus, make sure you completely uninstall one before installing another.  Microsoft Security Essentials says the XP operating system is outdated and it will not work on it.

 

Let's remove the tools.  Your logs look clean

 

1.
The following will implement some cleanup procedures as well as reset System Restore points:

Click Start ~> Run  and copy/paste the following bolded text into the Run box and click OK:

ComboFix /Uninstall

 

2.

Run OTL and click on the Cleanup button. That will remove the tools we used during this session including OTL itself.  This is so Fresh Tools are used if you need assistance again.

 

*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*
 
3.
Program Updates
 
Keep Installed Programs Up to Date

It's important to keep all other programs on your computer updated because they can also have security vulnerabilities exploited by the malware to infect you. Therefore, it is also a good idea to check for the latest versions of commonly installed applications to fix vulnerabilities, this can be done manually by using the Update feature included in most programs or you can use the following program to help you with this:
 
FileHippo Update Checker
 
 
*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*
 
4.
CryptoLocker Warning
 
There is a particularly nasty infection out there at the moment.
 
Go here for information about CryptoLocker Ransomeware. Learning about what is out there may help prevent infection. The main thing with this infection here ~ is Backup. If you're using an external, keep it unplugged to the computer when you're not backing up files or using it. This will prevent the infection from getting to your backed up files if you ever do come across it.
 
We suggest users to Download CryptoPrevent free for home use. It will help prevent CryptoLocker.
 
 
*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*
 
 
When installing\updating ANY program, make sure you always select Custom installation, so you can UN-check any possible "drive-by-install" (foistware), like toolbars etc., which may try to install along with the legitimate program. Do NOT click "Next" button without looking at any given page.
 
 
*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*
 
 
To find out more information about how you got infected in the first place and some great guidelines to follow to prevent future infections you can read this article by Miekiemoes.

Since we're pretty well finished here in the Malware Removal Forum ~ unless you have any other questions, if you'd like you can go over to the XP forum and have the Techs there have a look and see if they can help you more with speed.  Reference the post here if need be so they know you've been cleared

Surf Safe

[marqq]

Thank you so much, I truly appreciate all your help!

 

Mark

[23red]

You are very welcome!   

[Essexboy]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.