Computer hard ware or vius problem.

• davidche

  27 Feb 07, 01:02

  Hello, M computer has been slow these days, with delayed opening of drives and files and lagging games.
  
  I suspect may be a virus but i found no weird entries in my task manager. Heres my hijackthis log just to make sure.
  
  I also know that i am running a old com. So it may be simply the hardwares stuffs needs replacing.
• davidche

  27 Feb 07, 01:05

  Logfile of HijackThis v1.99.1
  Scan saved at 1:03:40 AM, on 2/27/2007
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
  
  Running processes:
  C:\WINNT\System32\smss.exe
  C:\WINNT\system32\winlogon.exe
  C:\WINNT\system32\services.exe
  C:\WINNT\system32\lsass.exe
  C:\WINNT\system32\svchost.exe
  C:\WINNT\System32\svchost.exe
  C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
  C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
  C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
  C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
  C:\WINNT\system32\spoolsv.exe
  C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
  C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
  C:\Program Files\Norton AntiVirus\navapsvc.exe
  C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
  C:\WINNT\system32\nvsvc32.exe
  C:\WINNT\System32\svchost.exe
  C:\WINNT\System32\spool\DRIVERS\W32X86\3\HPZENG10.exe
  C:\WINNT\system32\WgaTray.exe
  C:\WINNT\Explorer.EXE
  C:\Program Files\Common Files\Symantec Shared\ccApp.exe
  C:\WINNT\system32\ctfmon.exe
  C:\PROGRA~1\COMMON~1\SYMANT~1\SECURI~1\NSCSRVCE.EXE
  C:\WINNT\System32\spool\DRIVERS\W32X86\3\HPZSTC10.exe
  C:\Program Files\MSN Messenger\usnsvc.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\WINNT\system32\wuauclt.exe
  E:\++++++DAVID++++++\hijackthis\HijackThis.exe
  
  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
  O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
  O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\system32\NvMcTray.dll,NvTaskbarInit
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINNT\system32\ctfmon.exe
  O4 - HKCU\..\Run: [VoipBuster] "C:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe" -nosplash -minimized
  O4 - HKCU\..\Run: [eMuleAutoStart] E:\eMule\eMule.exe -AutoStart
  O4 - HKCU\..\RunServices: [PcSync] PCsync.exe
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\OFFICE11\EXCEL.EXE/3000
  O8 - Extra context menu item: Žg—p FlashGet ‰º�Ú - C:\Program Files\FlashGet\jc_link.htm
  O8 - Extra context menu item: ‘S•”Žg—p FlashGet ‰º�Ú - C:\Program Files\FlashGet\jc_all.htm
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
  O9 - Extra 'Tools' menuitem: Sun Java ��D�}�}��x - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\OFFICE11\REFIEBAR.DLL
  O9 - Extra button: �}!�fo2a?N - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/ (file missing)
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O15 - Trusted Zone: http://*.lead.com.sg
  O15 - Trusted Zone: http://*.moreatonce.com
  O15 - Trusted Zone: http://schdnavdo.schooldna.com
  O15 - Trusted Zone: http://schdnaweb.schooldna.com
  O15 - Trusted Zone: http://schdnaweb1.schooldna.com
  O15 - Trusted Zone: http://schdnaweb2.schooldna.com
  O15 - Trusted Zone: http://www.schooldna.com
  O15 - Trusted Zone: http://*.schooldna.com
  O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
  O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by18fd.bay18.hotmail.msn.com/resources/MsnPUpld.cab
  O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1136900077500
  O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
  O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1136900523140
  O16 - DPF: {8C4A2492-3FED-41F2-BBAB-34E802844F8D} (IESettings Class) - http://schdnaweb.schooldna.com/schooldna/login/dnaClientIE.CAB
  O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab
  O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
  O20 - Winlogon Notify: WgaLogon - C:\WINNT\SYSTEM32\WgaLogon.dll
  O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINNT\system32\WPDShServiceObj.dll
  O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
  O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
  O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
  O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
  O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
  O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
  O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
  O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
  O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
  O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
  O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
  O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
  
• R3SsH|n

  27 Feb 07, 01:07

  first glance looks okie to me...
  should be hardware getting old.
• Herzog_Zwei

  27 Feb 07, 01:17

  Excess background programs?
• gigabyte14

  27 Feb 07, 01:23

  Originally posted by R3SsH|n:

  first glance looks okie to me...
  should be hardware getting old.

  ditto...
  comps go slow in time... its a fact.
  
  calling for mayi for more info~~
• manyu882

  27 Feb 07, 08:41

  ok, i assume u didn't install anything since before the lag begains.go to task manager and see which program is eating the most ram and cpu... if u see a program is in idle state, but then eating lots of cpu.. that may be the problem...
• davidche

  27 Feb 07, 15:16

  Originally posted by manyu882:

  ok, i assume u didn't install anything since before the lag begains.go to task manager and see which program is eating the most ram and cpu... if u see a program is in idle state, but then eating lots of cpu.. that may be the problem...

  all the entries in task manager eating up considerable amt of ram has been double checked by me(shld have no virus) Sometimes i close some of the non-impt ones to quicken com.
• davidche

  27 Feb 07, 15:17

  I am going to scan with avg spy and norton just to ensure.
• manyu882

  27 Feb 07, 18:03

  Originally posted by davidche:

  all the entries in task manager eating up considerable amt of ram has been double checked by me(shld have no virus) Sometimes i close some of the non-impt ones to quicken com.

  cpu leh
• ndmmxiaomayi

  27 Feb 07, 18:05

  Nothing wrong...
  
  Norton is one of the huge resource eaters... might be because of Norton...
• davidche

  2 Mar 07, 18:57

  Originally posted by ndmmxiaomayi:

  Nothing wrong...
  
  Norton is one of the huge resource eaters... might be because of Norton...

  NEWEST UPDATE: my com is freaking freaking slow the whole day. I ahve been using norton for so long liao. Never is my com so slow!!! What is the problem?
• ndmmxiaomayi

  2 Mar 07, 19:19

  Originally posted by davidche:

  NEWEST UPDATE: my com is freaking freaking slow the whole day. I ahve been using norton for so long liao. Never is my com so slow!!! What is the problem?

  Hmm...
  
  Let's see.
  
  1. How old is your PC?
  
  2. Have you changed any of the hardware?
  
  3. What is your computer specs? Use Belarc Advisor. It will generate a report for me. Post that here.
  
  4. When is the last time you defragment your hard disk?
  
  5. Any infections after scanning with antivirus and anti-spyware programs?
• davidche

  3 Mar 07, 07:24

  
  
  Hmm...
  
  Let's see.
  
  1. How old is your PC?
  rather old, not sure how long. I am using a com that is disposed by my company.
  
  2. Have you changed any of the hardware?
  
  Nope
  
  3. What is your computer specs? Use Belarc Advisor. It will generate a report for me. Post that here.
  
  How am i supposed to send the info to you?
  
  4. When is the last time you defragment your hard disk?
  
  2 weeks ago, i am doing it again now.
  
  5. Any infections after scanning with antivirus and anti-spyware programs?
  
  C:\WINNT\system32\cns.dll -> Adware.Cdn : No action taken.
  C:\WINNT\system32\cns.exe -> Adware.Cdn : No action taken.
  C:\WINNT\system32\drivers\CnsMinKP.sys -> Hijacker.CnsMin : No action taken.
  C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt -> TrackingCookie.Burstnet : No action taken.
  C:\Documents and Settings\Administrator\Cookies\administrator@realmedia[1].txt -> TrackingCookie.Realmedia : No action taken.
  
  i quarantined themexcept for the cookies which i deleted, but i have a feeling that they will still come back the next time i scan.
  
  
• davidche

  3 Mar 07, 10:21

  Logfile of HijackThis v1.99.1
  Scan saved at 10:20:25 AM, on 3/3/2007
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
  
  Running processes:
  C:\WINNT\System32\smss.exe
  C:\WINNT\system32\winlogon.exe
  C:\WINNT\system32\services.exe
  C:\WINNT\system32\lsass.exe
  C:\WINNT\system32\svchost.exe
  C:\WINNT\System32\svchost.exe
  C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
  C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
  C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
  C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
  C:\WINNT\system32\spoolsv.exe
  C:\WINNT\Explorer.EXE
  C:\Program Files\Common Files\Symantec Shared\ccApp.exe
  C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
  C:\WINNT\system32\ctfmon.exe
  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
  C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
  C:\Program Files\Norton AntiVirus\navapsvc.exe
  C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
  C:\WINNT\system32\nvsvc32.exe
  C:\WINNT\System32\svchost.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\PROGRA~1\COMMON~1\SYMANT~1\SECURI~1\NSCSRVCE.EXE
  C:\WINNT\system32\wuauclt.exe
  C:\Program Files\Norton AntiVirus\NAVW32.EXE
  C:\Program Files\Messenger\msmsgs.exe
  E:\++++++DAVID++++++\hijackthis\HijackThis.exe
  
  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
  O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
  O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\system32\NvMcTray.dll,NvTaskbarInit
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
  O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINNT\system32\ctfmon.exe
  O4 - HKCU\..\Run: [VoipBuster] "C:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe" -nosplash -minimized
  O4 - HKCU\..\Run: [eMuleAutoStart] E:\eMule\emule.exe -AutoStart
  O4 - HKCU\..\RunServices: [PcSync] PCsync.exe
  O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\OFFICE11\EXCEL.EXE/3000
  O8 - Extra context menu item: Žg—p FlashGet ‰º�Ú - C:\Program Files\FlashGet\jc_link.htm
  O8 - Extra context menu item: ‘S•”Žg—p FlashGet ‰º�Ú - C:\Program Files\FlashGet\jc_all.htm
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
  O9 - Extra 'Tools' menuitem: Sun Java ��D�}�}��x - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\OFFICE11\REFIEBAR.DLL
  O9 - Extra button: �}!�fo2a?N - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/ (file missing)
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O15 - Trusted Zone: http://*.lead.com.sg
  O15 - Trusted Zone: http://*.moreatonce.com
  O15 - Trusted Zone: http://schdnavdo.schooldna.com
  O15 - Trusted Zone: http://schdnaweb.schooldna.com
  O15 - Trusted Zone: http://schdnaweb1.schooldna.com
  O15 - Trusted Zone: http://schdnaweb2.schooldna.com
  O15 - Trusted Zone: http://www.schooldna.com
  O15 - Trusted Zone: http://*.schooldna.com
  O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
  O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by18fd.bay18.hotmail.msn.com/resources/MsnPUpld.cab
  O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1136900077500
  O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
  O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1136900523140
  O16 - DPF: {8C4A2492-3FED-41F2-BBAB-34E802844F8D} (IESettings Class) - http://schdnaweb.schooldna.com/schooldna/login/dnaClientIE.CAB
  O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab
  O16 - DPF: {C70E8BB2-849B-478E-828E-9F71729C86B2} (ATXWSM Control) - http://download.wayi.com.tw/download/WSM/ATXWSM.cab
  O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
  O20 - Winlogon Notify: WgaLogon - C:\WINNT\SYSTEM32\WgaLogon.dll
  O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINNT\system32\WPDShServiceObj.dll
  O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
  O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
  O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
  O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
  O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
  O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
  O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
  O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
  O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
  O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
  O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
  O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
  O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
  
• Ito_^

  3 Mar 07, 10:23

  format!
• manyu882

  3 Mar 07, 11:50

  disable these startup for once. restart com.. see got any effect
  
  O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\system32\NvMcTray.dll,NvTaskbarInit
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
  O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINNT\system32\ctfmon.exe
  O4 - HKCU\..\Run: [VoipBuster] "C:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe"; -nosplash -minimized
  O4 - HKCU\..\Run: [eMuleAutoStart] E:\eMule\emule.exe -AutoStart
  O4 - HKCU\..\RunServices: [PcSync] PCsync.exe
• kawasaki2

  3 Mar 07, 13:20

  Regarding this:
  O20 - Winlogon Notify: WgaLogon - C:\WINNT\SYSTEM32\WgaLogon.dll
  
  Read:
  http://en.wikipedia.org/wiki/Windows_Genuine_Advantage
  http://www.firewallleaktester.com/removewga.htm
• yongyong

  3 Mar 07, 14:15

  u have AVG oledi, y u still wanna use norton ?
  
  stop that stupid norton....
• ndmmxiaomayi

  3 Mar 07, 14:55

  C:\WINNT\system32\cns.dll -> Adware.Cdn : No action taken.
  C:\WINNT\system32\cns.exe -> Adware.Cdn : No action taken.
  C:\WINNT\system32\drivers\CnsMinKP.sys -> Hijacker.CnsMin : No action taken.[/quote]
  
  You sure you quarantined them? It says no action taken. They are still there.
  
  

  How am i supposed to send the info to you?

  Copy and paste the whole chunk here, or upload the file to myfile.sg
  
  [quote]Originally posted by kawasaki2:

  Regarding this:
  O20 - Winlogon Notify: WgaLogon - C:\WINNT\SYSTEM32\WgaLogon.dll
  
  Read:
  http://en.wikipedia.org/wiki/Windows_Genuine_Advantage
  http://www.firewallleaktester.com/removewga.htm

  They are part of Windows anti-piracy program. Nobody should remove them, whether you like it or not.
  
  

  Originally posted by yongyong:

  u have AVG oledi, y u still wanna use norton ?
  
  stop that stupid norton....

  He's using AVG Anti-Spyware, not antivirus, which is OK.
• ceecookie

  3 Mar 07, 15:01

  i wonder why davidche seems to have alot of problems here and there...
• davidche

  4 Mar 07, 08:29

  Originally posted by ndmmxiaomayi:

  .

  com has became faster, maybe its because of the defrag, maybe the spyware cleared.
  
  If i would post the balarc info, it would be raw and basically you wont be able to read it cos the 'numbers' wont be in line with the 'words'