Lately my computer has been lagging and when checking the Task Manager I noticed that CPU usage is 100% and RAM is constantly high ( Ihave 512mb and normally at startup it’s at about 300mb). Most of memory is iexplore.exe (one browser open - 35,000 K), explorer.exe (28,000 K), and svchost (25, 000 K).
I just ran Adaware SE and Spybot 1.3 - ran fixed then rebooted computer - now ran Hijack This and here are the results:
f
Check out and use Eddy’s log file analyser at.
Eddy’s Website and click the “HiJackThis Section” and also the “Malware removal instructions and applications” section.
You can also try an on-line scan of your Hijackthis log file here [b]http://hijackthis.de/index.php[/b]
I notice from your log that you have norton A/V running and AOL . along with the problems you may have found through log analysis , you are always gonna suffer with these programs monopolising your resources. Some help sites actually refuse assistance to AOL users because of its heavy adware allocations.
Its your system but if you ever want it back, start by finding a new isp and a decent A/V. You might just save a few bucks as well ;D ;D ;D
I suggest to start with removing everything from loading at boottime that isn’t needed for the system to function.
This is the result of my HJT Log Analyzer:
You are using the latest version of HijackThis.
You are using the latest version of Internet Explorer.
No software firewall detected. If you are not using a
hardware firewall, it is highly recommended to install one.
\program files\msn apps\updater\01.02.3000.1001\en-us\msnappau.exe
\progra~1\verizo~1\suppor~1\smartb~1\motivesb.exe
\program files\verizon online\visual ip insight\ipmon32.exe
\program files\verizon online\visual ip insight\ipclient.exe
r1 - hkcu\software\microsoft\windows\currentversion\internet settings,proxyoverride = 127.0.0.1
o2 - bho: msntoolbandbho - {bdbd1dad-c946-4a17-adc1-64b5b4ff55d0} - c:\program files\msn apps\msn toolbar\01.02.3000.1001\en-us\msntb.dll
o3 - toolbar: msn - {bdad1dad-c946-4a17-adc1-64b5b4ff55d0} - c:\program files\msn apps\msn toolbar\01.02.3000.1001\en-us\msntb.dll
o4 - hklm..\run: [synchronization agent] “c:\program files\sync manager\agent\syncagent.exe”
o4 - hklm..\run: [motive smartbridge] c:\progra~1\verizo~1\suppor~1\smartb~1\motivesb.exe
o4 - hklm..\run: [ipinsightmonitor 01] “c:\program files\verizon online\visual ip insight\ipmon32.exe”
o4 - hklm..\run: [ipinsightlan 01] “c:\program files\verizon online\visual ip insight\ipclient.exe” -l
o4 - global startup: forget me not.lnk = ?
o4 - global startup: smart wizard wireless settings.lnk = ?
o4 - global startup: verizon online support center.lnk = c:\program files\verizon online\supportcenter\bin\matcli.exe
o9 - extra button: partypoker.com - {b7fe5d70-9aa2-40f1-9c6b-12a255f085e1} - c:\program files\partypoker\ieextension.dll
o9 - extra ‘tools’ menuitem: partypoker.com - {b7fe5d70-9aa2-40f1-9c6b-12a255f085e1} - c:\program files\partypoker\ieextension.dll
o16 - dpf: yahoo! dominoes - http://download.games.yahoo.com/games/clients/y/dot2_x.cab
o16 - dpf: yahoo! literati - http://download.games.yahoo.com/games/clients/y/tt0_x.cab
o16 - dpf: yahoo! spades - http://download.games.yahoo.com/games/clients/y/st2_x.cab
o16 - dpf: {0e5f0222-96b9-11d3-8997-00104bd12d94} (pcpitstop utility) - http://www.pcpitstop.com/pcpitstop/pcpitstop.cab
o16 - dpf: {14b87622-7e19-4ea8-93b3-97215f77a6bc} (messengerstatsclient class) - http://messenger.zone.msn.com/binary/messengerstatspaclient.cab31267.cab
o16 - dpf: {4a3cf76b-ec7a-405d-a67d-8dc6b52ab35b} (qdiagaolccupdateobj class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
o16 - dpf: {4c39376e-fa9d-4349-bacc-d305c1750ef3} (epuimagecontrol class) - http://tools.ebayimg.com/eps/wl/activex/epuwalcontrol_v1-0-3-12.cab
o16 - dpf: {65e7db1d-0101-4100-bd66-c5c78c917f93} (wtdmmpversion class) - http://install.wildtangent.com/bgn/partners/aolim/install.cab
o16 - dpf: {74d05d43-3236-11d4-bdcd-00c04f9a3b61} (housecall control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
o16 - dpf: {90c9629e-cd32-11d3-bbfb-00105a1f0d68} (installshield international setup player) - http://www.installengine.com/engine/isetup.cab
o16 - dpf: {a17e30c4-a9ba-11d4-8673-60db54c10000} (yahooymailto class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yse/ymmapi_416.dll
o16 - dpf: {a82c3a33-5c0e-466c-b020-71585433a7e4} (phxstudent.oesetup15) - https://mycampus.phoenix.edu/secure/phxstudent15.cab
o16 - dpf: {b8be5e93-a60c-4d26-a2dc-220313175592} (zoneintro class) - http://messenger.zone.msn.com/binary/zintro.cab31267.cab
o16 - dpf: {b91aedbe-93df-4017-8bb3-f1c300c0ec51} (installshield setup player 2k2) - http://www.futuredial.com/registration/installers/snapsync/setup.exe
o4 - hklm..\run: [roxioaudiocentral] “c:\program files\roxio\easy cd creator 6\audiocentral\rxmon.exe”
o4 - hklm..\run: [realtray] c:\program files\real\realplayer\realplay.exe systemboothideplayer
o4 - hklm..\run: [msnappau] “c:\program files\msn apps\updater\01.02.3000.1001\en-us\msnappau.exe”
o4 - hklm..\run: [mediaface integration] c:\program files\fellowes\mediaface 4.0\sethook.exe
o4 - hklm..\run: [gainward] c:\windows\tbpanel.exe /a
o4 - hklm..\run: [digstream] c:\program files\digstream\digstream.exe
o4 - hklm..\run: [roxiodragtodisc] “c:\program files\roxio\easy media creator 7\drag to disc\drgtodsc.exe”
o4 - hklm..\run: [sunjavaupdatesched] c:\program files\java\j2re1.4.2_05\bin\jusched.exe
o4 - hkcu..\run: [msmsgs] “c:\program files\messenger\msmsgs.exe” /background
o4 - global startup: microsoft office.lnk = c:\program files\microsoft office\office10\osa.exe
o4 - global startup: winzip quick pick.lnk = c:\program files\winzip\wzqkpick.exe
I appreciate all the advice and thank you guys for sharing your knowledge. I will delete and remove startups and see what happens.
Question … I am currently using a Netgear Wireless Router (bought about 6 months ago) as my main firewall and had disabled Windows Firewall … was that a big mistake?
The reason i disabled it was to use Remote Desktop and also use ftp folder on my comp
Another Question …
Is there a recommended antivirus software? I noticed Eddy’s website had AVG or Avast.
I am currently using Norton AntiVirus Professional 2004 - should I get rid of it?
Question .... I am currently using a Netgear Wireless Router (bought about 6 months ago) as my main firewall and had disabled Windows Firewall .. was that a big mistake?
A hardware firewall is better at blocking inbound threats then a software firewall is, but it does not block outbound threats, if you would like a both way software firewall protection, a good one to try would be Zonealarm, there is a free and paid version of it. 
Also it will work fine along side your hardware firewall.
Is there a recommended Antivirus software? I noticed Eddy's website had AVG or Avast.
Well you are on the Avast anti-virus forums :), so we would all suggest Avast (there is a free and paid version).
But its up to you if you swap it with Nortan, some people like Avast more then Norton, some don’t, it all comes down to personal preferences.
have a good day now
–lee
I once had this problem when I had a mega graphics file on my computer. When Internet Explorer would browse “My Documents” (which is where the file was located), computer performance went out the window. My CPU usage went to 100%, the computer crawled, and I couldn’t do anything. Also, if you looked at the amount of memory Internet Explorer was using, it kept growing and growing.
It took me quite a while to figure out that it was browsing that large graphic file that was causing the problem. Internet Explorer was trying (I presume) to create a thumb-nail image of the file and it was consuming everything my system had to attempt to make that thumbnail image.
My solution was this: Move that file to another folder and set that folder’s attributes so it did not create thumbnail images.
Perhaps you have a similar problem?
Brand new system last week, NAV preinstalled, on day one uninstalled it and put Avast on, that says it all 