A Virus??

[ianR]

Have you tried switching off the indexing service?

This is a service that indexes everything on your hard drive to make the search function easier. I think that's about all it does but it can use an enormous amount of memory and computing power as your large hard disk gets full, and especially if there are a lot of broken or mis(directed links links.

If you're having problems where the machine uses loads of CPU when you swith it on, or it takes a few seconds to load Word or acces a document, it could just be that. It really can make a hyge difference just turning it off.

Also, run a program like jv16powertoools and it'll clear out all the bad links and registry errors and with these two things, you might just find yourspeed problems solved.

This isn't in asnwer to the virus problem obiviously, I think that's been well covered.
Ian

 

[CUSIN BRUCIE]

Ian,
Thank you for your suggestions.

Have you tried switching off the indexing service?
This is a service that indexes everything on your hard drive to
make the search function easier. I think that's about all it does
but it can use an enormous amount of memory and computing power as
your large hard disk gets full, and especially if there are a lot
of broken or mis(directed links links.
If you're having problems where the machine uses loads of CPU when
you swith it on, or it takes a few seconds to load Word or acces a
document, it could just be that. It really can make a hyge
difference just turning it off.

How do you switch off the indexing service? I am not that technical.

Also, run a program like jv16powertoools and it'll clear out all
the bad links and registry errors and with these two things, you
might just find yourspeed problems solved.
This isn't in asnwer to the virus problem obiviously, I think
that's been well covered.
Ian

Right now my system has been back to normal since last night. I am hoping that it stays that way. I am going to be very careful in what I do with it so I don't have these problems again.
Do you have a link to jv16powertoools or should I just do a google search?
--
http://CusinBrucie.smugmug.com/gallery/1285864/1/60412211

http://borkofsky.ilovesuccess.net/

My Daughter's Art/Photo Site, Please have a look http://lipping.myexpose.com/gallery/
Nikon D200, 18-200mm VR lens

 

[CUSIN BRUCIE]

I forgot to ask. Since my system seems to be fairly stable at this point do you think I should go in and try to restore my registry or leave well enough alone?

--
http://CusinBrucie.smugmug.com/gallery/1285864/1/60412211

http://borkofsky.ilovesuccess.net/

My Daughter's Art/Photo Site, Please have a look http://lipping.myexpose.com/gallery/
Nikon D200, 18-200mm VR lens

 

[Guy Scharf]

Did you find your drwatson log file and any record of application
exceptions in it?

NO, where would it be located so I can do another search?

See http://forums.dpreview.com/forums/read.asp?forum=1004&message=20164014 for location of drwatson log file and also a request that you look in your system and application event log for any errors reported there.

Guy

 

[digitalshooter]

I you are happy, leave well enough alone.

But, go and turn off restore under contol panel/system. This will delete all restore points. Now reboot and go back and turn on restore so it creates a known working restore point.

--
Thanks,

Digitalshooter!

Member of the 7D and Beercan Cult!

The light at the end of the tunnel is becoming clearer and its calling me to the darkside!

 

[CUSIN BRUCIE]

I you are happy, leave well enough alone.

But, go and turn off restore under contol panel/system. This will
delete all restore points. Now reboot and go back and turn on
restore so it creates a known working restore point.

OK, I'll go in and do that.

By the way what do you think of Spyware Doctor. I have a trial version that has expired and it keeps coming up with spyware that it says I need to register the program for $29.95 in order to delete them.

--
Thanks,

Digitalshooter!

Member of the 7D and Beercan Cult!

The light at the end of the tunnel is becoming clearer and its
calling me to the darkside!

--
http://CusinBrucie.smugmug.com/gallery/1285864/1/60412211

http://borkofsky.ilovesuccess.net/

My Daughter's Art/Photo Site, Please have a look http://lipping.myexpose.com/gallery/
Nikon D200, 18-200mm VR lens

 

[digitalshooter]

What is it coming up with? what is the name? Please tel;l me and then go here and run this scanner:

http://housecall.trendmicro.com/

Sometimes spywares try to sell you something.

--
Thanks,

Digitalshooter!

Member of the 7D and Beercan Cult!

The light at the end of the tunnel is becoming clearer and its calling me to the darkside!

 

[digitalshooter]

did you ever download hijack this? If so run it also under normal mode, go to the link I gave you and analyze. Then post the link to the results.

I'm not convinced you are clean.

--
Thanks,

Digitalshooter!

Member of the 7D and Beercan Cult!

The light at the end of the tunnel is becoming clearer and its calling me to the darkside!

 

[CUSIN BRUCIE]

What is it coming up with? what is the name? Please tel;l me and

The prompt disappeared, I was going to copy and paste them. I will try to run the trial version and see what it comes up with .

then go here and run this scanner:

http://housecall.trendmicro.com/

Sometimes spywares try to sell you something.

I agree.

--
Thanks,

Digitalshooter!

Member of the 7D and Beercan Cult!

The light at the end of the tunnel is becoming clearer and its
calling me to the darkside!

--
http://CusinBrucie.smugmug.com/gallery/1285864/1/60412211

http://borkofsky.ilovesuccess.net/

My Daughter's Art/Photo Site, Please have a look http://lipping.myexpose.com/gallery/
Nikon D200, 18-200mm VR lens

 

[CUSIN BRUCIE]

did you ever download hijack this? If so run it also under normal
mode, go to the link I gave you and analyze. Then post the link to
the results.

Not yet but I will and then I'll run it and post the results.

I'm not convinced you are clean.

I hope that I am. So far the system has been running pretty close to normal. But I will run hijack this

--
Thanks,

Digitalshooter!

Member of the 7D and Beercan Cult!

The light at the end of the tunnel is becoming clearer and its
calling me to the darkside!

--
http://CusinBrucie.smugmug.com/gallery/1285864/1/60412211

http://borkofsky.ilovesuccess.net/

My Daughter's Art/Photo Site, Please have a look http://lipping.myexpose.com/gallery/
Nikon D200, 18-200mm VR lens



'I need a Shave and a Bananna, NOW!!!'

 

[CUSIN BRUCIE]

OK, I just downloaded and ran it. It created a logfile but I didn't see a link to the file online. So I'll paste it here. Also It didn't create a program icon on my desktop or even put the name in my program list so I had to unpack the downloaded file. Am I doing something wrong?

Here it is Sorry if it si so long( I have to break it in half as it is too long to post.

Pt1.

Logfile of HijackThis v1.99.1
Scan saved at 8:09:58 PM, on 9/25/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
D:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Upromise_Remind_U\UpromiseRemindU.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
D:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
D:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\PROGRA~1\SPYWAR~1\swdoctor.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
D:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\iPod\bin\iPodService.exe
D:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Upromise_Remind_U\u11050.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\SYSTEM32\taskmgr.exe
D:\PROGRA~1\MICROS~1\Office10\OUTLOOK.EXE
C:\Program Files\Messenger\msmsgs.exe
D:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\METAMA~1\METAMA~1\MMViewer.exe
C:\PROGRA~1\METAMA~1\Common\CmpgnSrv.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\WinRAR\WinRAR.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\CUSINB~1\LOCALS~1\Temp\Rar$EX00.797\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll

O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll

O2 - BHO: Metamail IEPlugin - {C09C9904-FD44-11D6-A711-00105AC8F168} - C:\PROGRA~1\METAMA~1\METAMA~1\IE\IEPlugIn.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O4 - HKLM\..\Run: [HP Software Update] "D:\Program Files\HP\HP Software Update\HPWuSchd2.exe"

O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"

O4 - HKLM\..\Run: [UpromiseRemindU] "C:\Program Files\Upromise_Remind_U\UpromiseRemindU.exe"

O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [NeroFilterCheck] "C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [iTunesHelper] "D:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Device Detector] DevDetect.exe -autorun
O4 - HKLM\..\Run: [AVG7_CC] "C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" STARTUP

O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay

O4 - HKLM\..\Run: [Adobe Photo Downloader] "D:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe"

O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" startintray
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [Spyware Doctor] "C:\PROGRA~1\SPYWAR~1\swdoctor.exe" Q

O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [AnyDVD] "D:\Program Files\SlySoft\AnyDVD\AnyDVD.exe"

O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office10\OSA.EXE

O8 - Extra context menu item: E&xport to Microsoft Excel - res: D:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000

O8 - Extra context menu item: Locate Spot on Map by GPS - D:\Program Files\Opanda\IExif 2.25\IExifMap.htm

O8 - Extra context menu item: RemindU. - file: C:\Program Files\Upromise_Remind_U\UpromisesRemindU\UpromisetRemindU\uproC0.htm

O8 - Extra context menu item: View Exif/GPS/IPTC with IExif - D:\Program Files\Opanda\IExif 2.25\IExifCom.htm

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

 

[CUSIN BRUCIE]

Pt. 2

O9 - Extra button: RemindU - {B48798CE-A2E0-4918-BC00-0F72FBA708E2} - file: C:\Program Files\Upromise_Remind_U\UpromisesRemindU\UpromisetRemindU\uproC0.htm (HKCU)

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1146196815828

O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.dotphoto.com/DPImageUploader.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - D:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe

O23 - Service: AVG Firewall (AVGFwSrv) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe

O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe

O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

 

[digitalshooter]

there is a button that says save analyst. Click on it and then copy the link and paste it here.

Did it alert you to anything?

--
Thanks,

Digitalshooter!

Member of the 7D and Beercan Cult!

The light at the end of the tunnel is becoming clearer and its calling me to the darkside!

 

[digitalshooter]

go to start/all program/startup folder

Tell me what is in it.

--
Thanks,

Digitalshooter!

Member of the 7D and Beercan Cult!

The light at the end of the tunnel is becoming clearer and its calling me to the darkside!

 

[CUSIN BRUCIE]

there is a button that says save analyst. Click on it and then
copy the link and paste it here.

It only had "Save Log" which I did but it didn't give me a link.
The program is version 1.99.1

Did it alert you to anything?

It has a whole list of things it came up with in the log. How about if I e-mail you the notepad file as an attachment?

--
Thanks,

Digitalshooter!

Member of the 7D and Beercan Cult!

The light at the end of the tunnel is becoming clearer and its
calling me to the darkside!

--
http://CusinBrucie.smugmug.com/gallery/1285864/1/60412211

http://borkofsky.ilovesuccess.net/

My Daughter's Art/Photo Site, Please have a look http://lipping.myexpose.com/gallery/
Nikon D200, 18-200mm VR lens



'I need a Shave and a Bananna, NOW!!!'

 

[digitalshooter]

once you run the program save the log file to a floppy or your desktop. Then goto the link to analyze it. upload the file and analyze, then save again on the webiste (button at bottom of page) and post the link.

--
Thanks,

Digitalshooter!

Member of the 7D and Beercan Cult!

The light at the end of the tunnel is becoming clearer and its calling me to the darkside!

 

[CUSIN BRUCIE]

go to start/all program/startup folder

Tell me what is in it.

Microsoft Office and
HP Digital Imaging Monitor

--
Thanks,

Digitalshooter!

Member of the 7D and Beercan Cult!

The light at the end of the tunnel is becoming clearer and its
calling me to the darkside!

--
http://CusinBrucie.smugmug.com/gallery/1285864/1/60412211

http://borkofsky.ilovesuccess.net/

My Daughter's Art/Photo Site, Please have a look http://lipping.myexpose.com/gallery/
Nikon D200, 18-200mm VR lens



'I need a Shave and a Bananna, NOW!!!'

 

[CUSIN BRUCIE]

once you run the program save the log file to a floppy or your
desktop. Then goto the link to analyze it. upload the file and
analyze, then save again on the webiste (button at bottom of page)
and post the link.

Sorry to be so dense but I do not see anything on the CNET Download.com website to do this and the control panal for the program only has these buttons:
Scan and Fix:
Scan/Save log (after scan) Fix Checked
Info on Selected item.

Other Stuff:
Info Config
Add checked to ignore list.

I don't see anything to analyze it.

--
Thanks,

Digitalshooter!

Member of the 7D and Beercan Cult!

The light at the end of the tunnel is becoming clearer and its
calling me to the darkside!

--
http://CusinBrucie.smugmug.com/gallery/1285864/1/60412211

http://borkofsky.ilovesuccess.net/

My Daughter's Art/Photo Site, Please have a look http://lipping.myexpose.com/gallery/
Nikon D200, 18-200mm VR lens



'I need a Shave and a Bananna, NOW!!!'

 

[digitalshooter]

ok you can right click and delete the office one.
--
Thanks,

Digitalshooter!

Member of the 7D and Beercan Cult!

The light at the end of the tunnel is becoming clearer and its calling me to the darkside!

 

[digitalshooter]

Scan/Save log (after scan) Fix Checked

--
Thanks,

Digitalshooter!

Member of the 7D and Beercan Cult!

The light at the end of the tunnel is becoming clearer and its calling me to the darkside!