another stij.exe thread, plus probably other things

Viruses and worms
1

I know there are probably a hundred of these, but my computer is being ridiculous lately. It keeps saying my CPU is at 100%, even when I’m only running like, two programs. Somehow, sweetpacks got installed onto my computer, how I have no clue.

Avast isn’t picking anything up. Like, at all. I’m scanning it now with MBAM, but it randomly shut down and I had to start again. It continued the scan, but it was still really weird.

I know that stij.exe shouldn’t be there. But MBAM keeps giving me the same notification that it blocked some other program, lmrn.dll. As I was typing this sentence, the same notification popped up 10 times. (It just showed up in the quarantine, and I deleted it, but I’m still getting notifications).

And I can’t post any logs yet because it hasn’t logged anything yet.

2

Follow the instructions and ATTACH the logs to your next post:
https://forum.avast.com/index.php?topic=53253.0

3

I’m still waiting for MBAM to finish the scan (it’s currently on the last part), but I have a question. How come I have to download all these different programs for the logs? I’m guessing each one reports something different?

4

Yes, there is no application that can detect/show all.
You may see it as car mechanics.
Some know more about trucks, others know more about family cars :wink:
They both are car mechanics, but each has its own specialty.

5

Ah, thank you! That makes sense.

I have the logs from MBAM and Farbar, but as I was doing the last one, my computer randomly crashed and rebooted before the scan was complete. I’m going to try running the scan again, but in the meantime, I’m attaching the other logs

6

Let me know how the computer is after this

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.certified-toolbar.com?si=41460&st=bs&tid=2938&ver=2.9&ts=1368291831051&tguid=41460-2938-1368291831051-D41D8CD98F00B204E9800998ECF8427E&q={searchTerms} SearchScopes: HKCU - {39DA7441-02DA-4F06-98B6-587E554EFE5B} URL = http://search.certified-toolbar.com?si=41460&st=bs&tid=2938&ts=1366654554402&tguid=41460-2938-1366654545855-203025&q={searchTerms} SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.certified-toolbar.com?si=41460&st=bs&tid=2938&ver=2.9&ts=1368291831051&tguid=41460-2938-1368291831051-D41D8CD98F00B204E9800998ECF8427E&q={searchTerms} SearchScopes: HKCU - {BBA3DB6D-6A22-4240-923B-D85AAEF7062B} URL = http://searchou.com/?q={searchTerms}&id=c25c4e880000000000001c659d835f80&r=493 Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File FF user.js: detected! => C:\Users\Sarah\AppData\Roaming\Mozilla\Firefox\Profiles\vchdyb0b.default\user.js FF user.js: detected! => C:\Users\Sarah\AppData\Roaming\Mozilla\Firefox\Profiles\zditrhaj.Fujiko\user.js FF SearchPlugin: C:\Users\Sarah\AppData\Roaming\Mozilla\Firefox\Profiles\vchdyb0b.default\searchplugins\SweetIM Search.xml FF Extension: No Name - C:\Users\Sarah\AppData\Roaming\Mozilla\Firefox\Profiles\vchdyb0b.default\Extensions\staged [2014-07-22] CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION 2014-07-22 17:36 - 2013-12-28 00:38 - 00000000 __SHD () C:\WINDOWS\SysWOW64\AI_RecycleBin C:\Users\Sarah\AppData\Local\Temp\rtd7pkww.dll CMD: bitsadmin /reset /allusers CMD: DEL %TEMP%\*.* /F /S /Q CMD: RD /S /Q %TEMP% REBOOT:

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.

7

Here are the logs. It still seems like it’s running pretty slow, though.

8

When is it slow during boot or when using the web ?

9

Whenever I try to open and run my adobe programs (Illustrator and photoshop). For example, when I’m trying to draw with my wacom tablet in PS, it lags. The marks I make don’t show up until a good bit later.

10

So it is graphic intensive programmes, do you the problem when using other programmes ?

11

I’m not sure since I actually don’t have internet at my house, so I have to take it places to connect. So, they’re really the only programs I actually use. I do have other stuff on here, like games and such, but I haven’t played them in ages.

12

OK right click the taskbar and select Task manager
Select the startup tab
Then right click and disable everything apart from your antivirus
Reboot and then see if the speed is better

13

Everything? What about “pximouse” and “Synaptics TouchPad Enhancements”? (I think the last one is my trackpad, but I’m not sure)

14

As I am on a desktop then anything that would be essential then keep. If need be you can then enable them the same way