I am trying to help my kids get their computer running. They keep having browser crashes and flash player crashes. The computer runs at -25 mph and the start-up time is extremely slow. Interesting also… the shutdown time seems to be even longer for them. I followed the basics for slow running computer etc and updated all the software. This is our older system and our kids do download lots of images (cartoon characters… screen savers, desktop themes, etc) But they are not even able to log on to webkinz or club penguin now because of the slow loading and crashes. (they are getting upset… those puffles need to be fed )
The scans are reporting process (aawservice.exe) memory block and around 75+ assorted win32: variants (trj, worms, dialers, tools, Expl) to many to list unless needed–please let me know ? if any are false positive, but something seems to be going on. MBAM did not show anything. Reports also have pages of files that cannot be scanned because they are password protected (we have not set up this)
OTL and ASW logs are attached.
Thank you so much for taking a look-- any help is appreciated. I would like to keep the system secure… don’t we all!
The scans are reporting process (aawservice.exe) memory block and around 75+ assorted win32: variants (trj, worms, dialers, tools, Expl) to many to list unless needed--please let me know
aawservice.exe is from Ad-Aware.... do you have that installed ?
was this a custom scan with "scan memory" selected ? this usually gives some strange scan result, often detecting unencrypted signatures from other security programs installed
i recomend using the default quick / full scan with default settings
MBAM did not show anything.
was it updated when you did the scan ?
Reports also have pages of files that cannot be scanned because they are password protected (we have not set up this)
files that can not be scanned are just that, does not mean they are infected....
if you tell us the file name and where they are located, we may be able to tell you what they are.... i am guessing they are from Ad-Aware!
you also seem to have lots of toolbars, and hostfile pointing to lots of b*** S*** search engines. There are also leftovers from almost every Antivirus program known to mankind ;D
anyway essexboy will clear this when he arrive…
[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
THEN
Download and Install CombofixDownload ComboFix from one of the following locations:
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop *
IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks
I closed out my browser to run OTL and AVAST came up with warning/detection of rootkit…
win32:rootkit.gen it said it was detected on the desktop file of OTL.exe so it removed it. OK???
So I guess I DL it again and run as you directed.
ok tried to DL again from link on this site. It was blocked again. Here is what came up:
grrr running in circles… disabled avast and ran OTL, but when it rebooted, AVAST restarted and automatically removed the OTL.exe from desktop before it even loaded up all the way.
I just completely turned off AVAST UGGH crossing my fingers… and will try again.
Thanks… I have tried my best so far! The OTL gave me a run for my money. I have attached the logs. Their computer is still very sluggish at start up and when loading a site.
Penguin update: I tried to feed of of my son’s puffles on club penguin: it was taking so long to load and I could see the food I had to click on and the darn puffle starts to look mad!! It wasn’t moving quick enough. I logged off quick because they do run away if you don’t take care of them. By the puffle index factor, still moving slow.
Clear Cache/Temp Files
Download TFC by OldTimer to your desktop
[*] Please double-click TFC.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
[*]It will close all programs when run, so make sure you have saved all your work before you begin.
[*]Click the Start button to begin the process. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two. Let it run uninterrupted to completion.
[*]Once it’s finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.
)