• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.
  • Welcome to Free PC Help, a free PC Help forum to get help with your computer problems.

    Free PC Help is a community that offers free computer help and support for all users, all ages, worldwide.

    In order to start asking questions or contribute on someone else's post you will first need to register. Don't worry - it's quick and easy and once you have registered you will have instant access to the entire forum.

    If you do decide to join the forums you will not have the option to send Private Messages [ PMs ] or add a Signature until you have made 5 posts or more. This is an attempt to try to stop Spammers using the PM system or adding links to their Signature.

running slow

Joined
Jan 9, 2008
Messages
11
#1
hi hope someone can help my computer is running slow i have broadband but it is more like dail up .... it was fine a few weeks ago ... should i restore computer to when i bought it ? any advice would be helpfull thank you
 

AdvancedSetup

FPCH Long Term Member
Joined
Jan 9, 2008
Messages
819
Location
34° 12' 35" N, 118° 29' 21" W
#2
Hello and welcome to the board.

Do you have popups and or any other indication that some type of malware or spyware has been installed on your system?

What OS?
What CPU / RAM?
What browser?

One of the most common reasons for slow downs is malware on the PC, but there are other issues that can cause it.

Please provide a little more information so that we can better decide how to ***ist you.
 

RandyL

Administrator
Joined
Jan 22, 2003
Messages
4,878
Location
USA, Nebraska
PC Experience
Very Experienced
#3
Hi Johnny;
The usual causes are malware like viruses, trojans, spyware and adware. Of course it is possible it's something else.

Do you have an updated antiviruses program and antispyware program? If so which ones.
I ***ume you're running Windows XP.

Many downloaded programs come bundled with such malicious software. Screensavers and some games come to mind but there are others such as some file sharing programs.

"Should you restore?'" That depends on a lot of things. Let us know a littlle more as requested.

Have you made any changes or installed any new software since "a few weeks ago"?
Please get back to us;
RandyL
 
Joined
Jan 9, 2008
Messages
11
#4
hi i have the free avg security on my pc .. i am on xp . my computer has alot of programes instaled by my son wich most are not in use .. when i put avg scan my pc it found virus and it cleaned them.. thank u
 

Seth

FPCH Long Term Member
Joined
Dec 17, 2007
Messages
2,268
Location
Canada
Operating System
Windows Vista - Home Premium
#8
Although net speed degradation can be caused by a few things, I agree with the previous posts that malware is the most likely culprit.

I ***ure that if AVG is finding malware, then better scanners will find a heck of a lot more. It should also be noted that removal of malware is just as important as detection. From experience, I can tell you that AVG fails miserably in this department when compared to the competition.

Update and run a full scan with SAS as suggested by Advanced Setup, as well as an online scan with BitDefender:

http://www.bitdefender.com/

I would also recommend you post a HijackThis log to determine the state of your software:

http://www.spywareinfo.com/~merijn/programs.php#hijackthis
 
Joined
Jan 9, 2008
Messages
11
#9
hi thanks for all the replies i have run the superantispyware which found 203 threats and cleaned them then i run bitdefender which found threat but it said at the end my computer was still infected and my computer is still running dead slow... even when im not connected to the internet .. i took of a load of programes of pc but it is the same plus i keep getting a pop up saying virtual memory is low... thanks again
 

Seth

FPCH Long Term Member
Joined
Dec 17, 2007
Messages
2,268
Location
Canada
Operating System
Windows Vista - Home Premium
#10
The virtual memory message is an indicator that you have too many needless programs starting up when XP starts and/or further infection.

To address that, as well as other issues, we need to see a hijackthis log. Please download the executable version of HT from here:

http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

Double click the icon to run the program and then click Scan. Don't make any changes, just copy and paste the log back here.

Also run hard drive error checking on the system:

1) Start>Run>type in chkdsk /r (space between the K and the /) and press ok. Press Y at the black screen and restart the computer. The error checking will begin and the computer will start normally when it's complete.

Can you also please post the SuperAntiSpyware log? It's found in the program's Preferences>Logs.
 
Joined
Jan 9, 2008
Messages
11
#11
SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 01/14/2008 at 05:07 PM

Application Version : 3.9.1008

Core Rules Database Version : 3379
Trace Rules Database Version: 1373

Scan type : Quick Scan
Total Scan Time : 02:44:41

Memory items scanned : 543
Memory threats detected : 0
Registry items scanned : 948
Registry threats detected : 52
File items scanned : 29738
File threats detected : 180

Unclassified.Unknown Origin
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4D1C4E81-A32A-416b-BCDB-33B3EF3617D3}
HKCR\PROTOCOLS\Filter\text/html
HKCR\PROTOCOLS\Filter\text/html#CLSID
HKCR\CLSID\{4D1C4E89-A32A-416B-BCDB-33B3EF3617D3}
HKCR\CLSID\{4D1C4E89-A32A-416B-BCDB-33B3EF3617D3}\InprocServer32
HKCR\CLSID\{4D1C4E89-A32A-416B-BCDB-33B3EF3617D3}\InprocServer32#ThreadingModel
HKCR\CLSID\{4D1C4E89-A32A-416B-BCDB-33B3EF3617D3}\Programmable
HKCR\CLSID\{4D1C4E89-A32A-416B-BCDB-33B3EF3617D3}\TypeLib

MyWay Search ***istant Computers
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4D25F921-B9FE-4682-BF72-8AB8210D6D75}
HKCR\CLSID\{4D25F921-B9FE-4682-BF72-8AB8210D6D75}
HKCR\CLSID\{4D25F921-B9FE-4682-BF72-8AB8210D6D75}
HKCR\CLSID\{4D25F921-B9FE-4682-BF72-8AB8210D6D75}\InprocServer32
HKCR\CLSID\{4D25F921-B9FE-4682-BF72-8AB8210D6D75}\InprocServer32#ThreadingModel
HKCR\CLSID\{4D25F921-B9FE-4682-BF72-8AB8210D6D75}\Programmable
C:\PROGRAM FILES\MYWAYSA\SRCHASDE\DESRCAS.DLL
HKU\S-1-5-21-3895410828-1328422596-820460242-1006\Software\Microsoft\Internet Explorer\URLSearchHooks#{4D25F926-B9FE-4682-BF72-8AB8210D6D75}
HKCR\CLSID\{4D25F926-B9FE-4682-BF72-8AB8210D6D75}
HKCR\CLSID\{4D25F926-B9FE-4682-BF72-8AB8210D6D75}
HKCR\CLSID\{4D25F926-B9FE-4682-BF72-8AB8210D6D75}\InprocServer32
HKCR\CLSID\{4D25F926-B9FE-4682-BF72-8AB8210D6D75}\InprocServer32#ThreadingModel
HKCR\CLSID\{4D25F926-B9FE-4682-BF72-8AB8210D6D75}\Programmable

Unclassified.Oreans32
HKLM\System\ControlSet001\Services\oreans32
C:\WINDOWS\SYSTEM32\DRIVERS\OREANS32.SYS
HKLM\System\ControlSet003\Services\oreans32
HKLM\System\CurrentControlSet\Services\oreans32
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32#NextInstance
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Service
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Legacy
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#ConfigFlags
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Class
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#ClassGUID
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#DeviceDesc
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Capabilities
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000\LogConf
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000\Control
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000\Control#ActiveService
HKLM\SYSTEM\CurrentControlSet\Services\oreans32#Type
HKLM\SYSTEM\CurrentControlSet\Services\oreans32#Start
HKLM\SYSTEM\CurrentControlSet\Services\oreans32#ErrorControl
HKLM\SYSTEM\CurrentControlSet\Services\oreans32#ImagePath
HKLM\SYSTEM\CurrentControlSet\Services\oreans32#DisplayName
HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Security
HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Security#Security
HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Enum
HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Enum#0
HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Enum#Count
HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Enum#NextInstance

Adware.Tracking Cookie
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@atwola[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@ads.aol.co[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@revsci[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@questionmarket[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@fastclick[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@media.adrevolver[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@h.starware[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@ar.atwola[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@precisionclick[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@tribalfusion[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@anad.tacoda[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@ads.tarrobads[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@ehg-veohnetworksinc.hitbox[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@mywebsearch[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@hitbox[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@www.clash-media[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@ad.uk.tangozebra[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@partypoker[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@doubleclick[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@bs.serving-sys[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@advertising[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@www.googleadservices[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@ad.yieldmanager[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@wrigley.122.2o7[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@imrworldwide[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@www.virginmedia[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@tacoda[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@ads.veoh[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@adserver.mediarun[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@media.adrevolver[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@atdmt[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@tradedoubler[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@bluestreak[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@edge.ru4[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@a.websponsors[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@newsquestmedia.uk.smarttargetting[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@adtech[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@adopt.euroclick[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@adrevolver[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@2o7[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@www.googleadservices[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@rocku.adbureau[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@aoleusearch.122.2o7[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@stat.youku[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@serving-sys[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@apmebf[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@virginmedia[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@mediaplex[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@toplist[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@try.starware[2].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@counter.hitslink[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@xiti[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@aoluk.122.2o7[1].txt
C:\Documents and Settings\johnny kerr\Cookies\johnny_kerr@search.virginmedia[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@122.2o7[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@247realmedia[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@2o7[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@ad.yieldmanager[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@adcycle.footymad[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@adknowledge[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@adopt.hbmediapro[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@ads.addynamix[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@ads.aol.co[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@ads.itv[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@ads.pointroll[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@ads.realtechnetwork[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@ads.telegraph.co[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@ads.tripod.lycos[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@ads1.revenue[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@adtech[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@adultfriendfinder[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@advertising[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@adverts.digitalspy.co[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@aff.primaryads[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@apmebf[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@as-us.falkag[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@atdmt[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@atwola[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@backend.businesstraffic[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@belnk[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@bestoffersnetworks[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@bluestreak[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@bs.serving-sys[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@btg.btgrab[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@burstnet[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@c3.gostats[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@c5.zedo[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@casalemedia[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@cassava[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@click.cashengines[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@clickbank[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@cliks[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@counter11.sextracker[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@counter12.sextracker[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@counter13.sextracker[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@counter14.sextracker[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@counter15.sextracker[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@counter3.sextracker[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@counter4.sextracker[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@counter5.sextracker[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@counter6.sextracker[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@counter7.sextracker[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@counter9.sextracker[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@cs.sexcounter[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@cz6.clickzs[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@cz7.clickzs[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@data3.perf.overture[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@dist.belnk[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@doubleclick[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@ehg-bskyb.hitbox[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@ehg-maniatv.hitbox[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@ehg-tfl.hitbox[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@etype.adbureau[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@fastclick[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@focalex[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@free.wegcash[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@gettyimages.122.2o7[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@gostats[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@h.starware[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@hc2.humanclick[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@hitbox[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@hotbar[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@hotlog[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@i.screensavers[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@ibuytraffic[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@image.masterstats[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@interclick[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@mediaplex[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@movie-clips.just-a-****[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@offeroptimizer[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@paycounter[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@perf.overture[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@premiumtv.122.2o7[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@qksrv[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@questionmarket[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@rb4.worldsex[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@realmedia[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@revenue[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@revsci[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@roiservice[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@sel.as-us.falkag[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@serving-sys[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@sextracker[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@spylog[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@starware[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@statcounter[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@stats.channel4[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@stats1.reliablestats[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@statse.webtrendslive[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@tacoda[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@toplist[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@tradedoubler[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@tribalfusion[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@tripod.lycos[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@valueclick[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@vip.clickzs[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@webcams.adultsexblogs[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@webpower[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@winfixer[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@www.5isex[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@www.clickhere4hardcore[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@www.interracialporno[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@www.penisbot[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@www.screensavers[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@www.sexmaxx[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@www.smartadserver[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@www.starware[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@www.utmedia.co[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@www.winfixer[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@www.xxx69[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@www.xxxvogue[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@xiti[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@xml.bravenetmedianetwork[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@xxxbookies[2].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@xxxcounter[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@z1.adserver[1].txt
C:\Documents and Settings\johnny kerr\Local Settings\Temp\Cookies\johnny kerr@zedo[2].txt

Adware.MyWay
HKCR\CLSID\{014DA6C9-189F-421A-88CD-07CFE51CFF10}
HKCR\CLSID\{014DA6C9-189F-421A-88CD-07CFE51CFF10}\InprocServer32

Adware.IST/SaferScan
HKU\S-1-5-21-3895410828-1328422596-820460242-1006\Software\SaferScan

Adware.IST/ISTBar (Slotch Bar)
HKU\S-1-5-21-3895410828-1328422596-820460242-1006\Software\Microsoft\Internet Explorer\Main#BandRest [ ]
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main#BandRest [ ]

Adware.Best Offers Network
C:\DOCUMENTS AND SETTINGS\JOHNNY KERR\TBONWND.EXE
 

Seth

FPCH Long Term Member
Joined
Dec 17, 2007
Messages
2,268
Location
Canada
Operating System
Windows Vista - Home Premium
#12
Please update SAS and run it again. But this time, do a Complete scan, not a quick scan.

Then go to the following and run an online scan (put a check in both options when they appear)

http://www.eset.com/onlinescan/

Doing the above should clear up the infections. Once that is done, you can work on the other stuff from post #10 and we'll take it from there.
 

Seth

FPCH Long Term Member
Joined
Dec 17, 2007
Messages
2,268
Location
Canada
Operating System
Windows Vista - Home Premium
#14
You're not dumb. We all have different talents.

Besides, that was my fault as I should have explained it better. The online scanner will give you two options for additional types of malware to scan for. Select both if the option arises.
 
Joined
Jan 9, 2008
Messages
11
#15
hi seth done full sas scan but got stuck on 7 hours but it has fixed my pc its back to normal speed so thank you so much for your help very good of u thanks
 

Seth

FPCH Long Term Member
Joined
Dec 17, 2007
Messages
2,268
Location
Canada
Operating System
Windows Vista - Home Premium
#16
You're welcome.

7 hours? Wow. I've never seen a complete scan take more than 2 hours. That could mean the hard drive has errors on it, so if you haven't already, run the chkdsk /r from one of my previous posts.

Thanks for the update!