[PizzaGuy]

alright, the main problem is that my internet connection slowed down in the past 2 days, even though i have AV, Antispyware and a firewall - somehow i got like 15 connections to port 80 which is the reason i believe slows me down.
tried to remove it with ms antyspyware but i does not detect it, tried ad-aware SE but for some unknown reason it stops the scan at some point and i cant even view the results so i could delete the threats. I even re-installed windows but i keep getting alot of connections in port 80 when i only open IE.

please! i need help!

[Advertisements]

How do you connect to the internet? Dial up, cable, dsl? When did you reinstall Windows, before or after the internet slowdown? Post a HijackThis log and I'll take a look at it.

Johanna

[Johanna]

How do you connect to the internet? Dial up, cable, dsl? When did you reinstall Windows, before or after the internet slowdown? Post a HijackThis log and I'll take a look at it.

Johanna

[PizzaGuy]

i re-installed windows after the problem continued, though it didnt solve it. about the "highjackthis" log, how? i never heared aobut this term, ill be more then happy if you explain what is it
i got a dsl connection and i use a router

Edited by PizzaGuy, 01 October 2005 - 08:37 AM.

[Johanna]

Look for the HijackThis link on this page. Download the exe and run it- copy paste a log to a post, and I can see what is running on your computer. When you say "reinstall" do you mean "repair" or "reformat"? A "reformat" is when you need to reinstall all your programs and data files, a repair is done with your cd to rewrite Windows System files without harming (losing) your settings and data.
http://www.geekstogo..._Log-t2852.html
Johanna

Edited by Czarina, 01 October 2005 - 08:52 AM.

[PizzaGuy]

i meant that i formated C and reinstalled windows on that partition

[PizzaGuy]

alright here is the log
Logfile of HijackThis v1.99.1
Scan saved at 18:12:36, on 01/10/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\msiexec.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Felix\Desktop\HijackThis.exe

O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1128171116171
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1128171085358
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zone...canner37350.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

[Johanna]

Your logs are clean, so malware is not the issue.

Test speeds online:
http://www.pcpitstop.com/
&
http://www.dslreports.com/stest

Let us know how the speeds you test at compare to what your ISP says you should get.

What are your system specs?

Johanna

[PizzaGuy]

hmm ill check my speed but before i do that:
how can i tell if my log is clean?
whats system specs, my english isnt too good

btw, since you're already helping me (and im thankfull for that )
do u recommend any free av program or any at all?

Edited by PizzaGuy, 01 October 2005 - 09:37 AM.

[Johanna]

When the computer is online you need to have a firewall, at the bare minimum the built in XP one. There are a few free firewall/antivirus programs. You can go to the malware forum for recommendations.

System Specs (specifications) what model computer are you using? How much memory? Click Start>Run> type cmd> type systeminfo if you are not sure.

Let us know how your tested speeds compare, or if you have any questions.
Johanna

[PizzaGuy]

alright thanks,
one last thing - how can i tell if my logs are clean?

[Johanna]

Mostly I Google every running process that I'm not familiar with. You can use scanners like Panda, RAV, Spybot & AdAware etc to flag things for you, but I've found prevention is easier than a cure. That's why you need a good firewall. Firewalls prevent unauthorized internet activity.

Are you current on your MS Updates?

Johanna

[PizzaGuy]

Yes i am,
my major problem is that ad-aware wont run, it just jams always after few minutes or at a certain point...
and spybot SD wont update (says "bad checksum"),
and all these touble after the format!
omg im becoming deperate please help me

[Johanna]

Let us know how your tested upload and download speeds compare to what you expect.

Also, use your XP CD to perforn a System File Check.
Start > Run > cmd
sfc /scannow

sfc - system file checker, retrieves the correct version of the file from %Systemroot%\System32\Dllcache or the Windows installation source files, and then replaces the incorrect file. If you want to see what was replaced, right click My Computer > manage, expand event viewer > system. Scans and verifies the versions of all protected system files after you restart your computer.

Let me know if the computer won't complete the SFC either.

Johanna

[PizzaGuy]

uhm, what about ad-aware not working? any suggestions at all?

[Johanna]

I've made a number of suggestions and am waiting to hear your results before I make any more. Do the speed tests and the SFC first.

Johanna