I'm back, team. Have been having freeze up problems with my laptop: Compaq Presario laptop CQ60, AMD Athlon processor, 2 GB ram, 280HD, using Firefox. I did a MBAM scan today after updating the MBAM. Threats were detected, which I quarantined. Here Is the log.
Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 7/27/2014
Scan Time: 1:02:44 PM
Logfile: MBAM log.txt
Administrator: Yes
Version: 2.00.2.1012
Malware Database: v2014.07.27.05
Rootkit Database: v2014.07.17.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled
OS: Windows Vista Service Pack 2
CPU: x86
File System: NTFS
User: mary ann
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 283518
Time Elapsed: 22 min, 44 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled
Processes: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Registry Keys: 0
(No malicious items detected)
Registry Values: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Folders: 7
PUP.Optional.MyFreeze.A, C:\Program Files\My.Freeze.com NetAssistant, , [2e531d873e3d072fb5d1744b43bf29d7],
PUP.Optional.IWin.A, C:\ProgramData\iWin Games, , [265bc4e00972b48257854282dd25db25],
PUP.Optional.IWin.A, C:\ProgramData\iWin Games\drm, , [265bc4e00972b48257854282dd25db25],
PUP.Optional.IWin.A, C:\ProgramData\iWin Games\drm\data, , [265bc4e00972b48257854282dd25db25],
PUP.Optional.IWin.A, C:\ProgramData\iWin Games\firefox, , [265bc4e00972b48257854282dd25db25],
PUP.Optional.IWin.A, C:\ProgramData\iWin Games\firefox\chrome, , [265bc4e00972b48257854282dd25db25],
PUP.Optional.IWin.A, C:\ProgramData\iWin Games\opal, , [265bc4e00972b48257854282dd25db25],
Files: 10
PUP.Optional.MyFreeze.A, C:\Program Files\My.Freeze.com NetAssistant\EULA.url, , [2e531d873e3d072fb5d1744b43bf29d7],
PUP.Optional.MyFreeze.A, C:\Program Files\My.Freeze.com NetAssistant\freeze.url, , [2e531d873e3d072fb5d1744b43bf29d7],
PUP.Optional.MyFreeze.A, C:\Program Files\My.Freeze.com NetAssistant\INSTALL.LOG, , [2e531d873e3d072fb5d1744b43bf29d7],
PUP.Optional.MyFreeze.A, C:\Program Files\My.Freeze.com NetAssistant\netassist_version.txt, , [2e531d873e3d072fb5d1744b43bf29d7],
PUP.Optional.MyFreeze.A, C:\Program Files\My.Freeze.com NetAssistant\Privacy_Policy.url, , [2e531d873e3d072fb5d1744b43bf29d7],
PUP.Optional.IWin.A, C:\ProgramData\iWin Games\firefox\chrome.manifest, , [265bc4e00972b48257854282dd25db25],
PUP.Optional.IWin.A, C:\ProgramData\iWin Games\firefox\install.rdf, , [265bc4e00972b48257854282dd25db25],
PUP.Optional.IWin.A, C:\ProgramData\iWin Games\firefox\iWinArcadeLauncher.exe, , [265bc4e00972b48257854282dd25db25],
PUP.Optional.IWin.A, C:\ProgramData\iWin Games\firefox\version, , [265bc4e00972b48257854282dd25db25],
PUP.Optional.IWin.A, C:\ProgramData\iWin Games\firefox\chrome\iwinarcade.jar, , [265bc4e00972b48257854282dd25db25],
Physical Sectors: 0
(No malicious items detected)
(end)
Please provide the requested logs in Log Posting Instructions (http://www.landzdown.com/analysis-and-malware-removal/log-posting-instructions/) and we'll see what else shows up.
Thank you.
Microsoft® Windows Vista™ Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 3/6/2009 1:29:29 AM
System Uptime: 7/27/2014 4:48:04 PM (2 hours ago)
.
Motherboard: Wistron | | 303C
Processor: AMD Athlon Dual-Core QL-62 | Socket A | 2000/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 222 GiB total, 113.041 GiB free.
D: is FIXED (NTFS) - 11 GiB total, 1.818 GiB free.
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
.
==== Installed Programs ======================
.
Update for Microsoft Office 2007 (KB2508958)
Acrobat.com
Activation Assistant for the 2007 Microsoft Office suites
ActiveCheck component for HP Active Support Library
Adobe AIR
Adobe Flash Player 14 ActiveX
Adobe Flash Player 14 Plugin
Adobe Shockwave Player
AIM Toolbar
Amazon Cloud Player
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Atheros Driver Installation Program
AVG 2014
Big Fish Games: Game Manager
blinkx beat
Bonjour
Cake Mania Main Street
Canon MP Navigator EX 1.0
Canon MX310 series
Canon MX310 series User Registration
Canon My Printer
Canon Utilities Easy-PhotoPrint EX
Canon Utilities Solution Menu
Cisco EAP-FAST Module
Cisco LEAP Module
Cisco PEAP Module
Compatibility Pack for the 2007 Office system
Conexant HD Audio
Coupon Printer for Windows
CyberLink DVD Suite
Deal or No Deal - Secret Vault Games
ESU for Microsoft Vista
Facebook Plug-In
Family Feud (remove only)
Google Update Helper
HDAUDIO Soft Data Fax Modem with SmartCP
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
HP Active Support Library
HP Customer Experience Enhancements
HP Doc Viewer
HP DVD Play 3.7
HP Games
HP Help and Support
HP Quick Launch Buttons 6.40 H2
HP Total Care Advisor
HP Update
HP User Guides 0118
HP Wireless Assistant
HPAsset component for HP Active Support Library
HPNetworkAssistant
HPTCSSetup
iDFX
iTunes
LabelPrint
LightScribe System Software 1.14.17.1
Malwarebytes Anti-Malware version 2.0.2.1012
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4.5.1
Microsoft Live Search Toolbar
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (English) 2007
Microsoft Office File Validation Add-In
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft Works
MotoConnect 1.1.31
Motorola Mobile Drivers Installation 4.7.1
Move Media Player
Mozilla Firefox 30.0 (x86 en-US)
Mozilla Maintenance Service
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
muvee Reveal
NetWaiting
NVIDIA Drivers
OGA Notifier 2.0.0048.0
ooVoo
PIXMA Extended Survey Program
Power2Go
PowerDirector
Presto! PageManager 7.15.16
PVSonyDll
QuickTime
Realtek USB 2.0 Card Reader
ScanSoft OmniPage SE 4
SCRABBLE
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2840629)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2861697)
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596825) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597973) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760411) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760415) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760585) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760591) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2817330) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2827326) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2850022) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2878233) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2880507) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2880508) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2880513) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2881069) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2827324) 32-Bit Edition
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2880515) 32-Bit Edition
Skype web features
Skype™ 6.11
SPORE Creature Creator Trial Edition
Sure Cuts A Lot 2.029
Synaptics Pointing Device Driver
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Visual Studio 2012 x86 Redistributables
VLC media player 2.1.2
Wedding Dash
WorldWinner Games
.
==== End Of File ===========================
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16561
Run by mary ann at 18:23:44 on 2014-07-27
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.1790.683 [GMT -4:00]
.
AV: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: AVG Anti-Virus Free *Disabled/Updated* {0C939084-9E57-CBDB-EA61-0B0C7F62AF82}
SP: AVG Anti-Virus Free *Disabled/Updated* {B7F27160-B86D-C455-D0D1-307E04E5E53F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
.
============== Running Processes ================
.
c:\PROGRA~1\AVG\AVG2014\avgrsx.exe
C:\Program Files\AVG\AVG2014\avgcsrvx.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\Dwm.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG2014\avgidsagent.exe
C:\Program Files\AVG\AVG2014\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\ProgramData\OfficeGuardianV2N\UACProxy.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
C:\Program Files\Motorola\MotoConnectService\MotoConnectService.exe
C:\Program Files\SMINST\BLService.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\ProgramData\OfficeGuardianV2N\Reminder\SacNetAgent.exe
C:\Program Files\Motorola\MotoConnectService\MotoConnect.exe
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\AVG\AVG2014\avgnsx.exe
C:\Program Files\AVG\AVG2014\avgemcx.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe
C:\Windows\System32\spool\drivers\w32x86\3\WrtMon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\AVG\AVG2014\avgui.exe
C:\Windows\System32\spool\drivers\w32x86\3\WrtProc.exe
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Program Files\ooVoo\ooVoo.exe
C:\ProgramData\OfficeGuardianV2N\Reminder\SacReminder.exe
C:\Users\mary ann\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\ctfmon.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.yahoo.com/
mStart Page = hxxp://www.google.com
uURLSearchHooks: AIM Toolbar Search Class: {03402f96-3dc7-4285-bc50-9e81fefafe43} - c:\program files\aim toolbar\aimtb.dll
mURLSearchHooks: AIM Toolbar Search Class: {03402f96-3dc7-4285-bc50-9e81fefafe43} - c:\program files\aim toolbar\aimtb.dll
BHO: AIM Toolbar Loader: {b0cda128-b425-4eef-a174-61a11ac5dbf8} - c:\program files\aim toolbar\aimtb.dll
BHO: Microsoft Live Search Toolbar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn\toolbar\3.0.0541.0\msneshellx.dll
TB: AIM Toolbar: {61539ECD-CC67-4437-A03C-9AACCBD14326} - c:\program files\aim toolbar\aimtb.dll
TB: Microsoft Live Search Toolbar: {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\program files\msn\toolbar\3.0.0541.0\msneshellx.dll
TB: AIM Toolbar: {61539ecd-cc67-4437-a03c-9aaccbd14326} - c:\program files\aim toolbar\aimtb.dll
uRun: [HPAdvisor] c:\program files\hewlett-packard\hp advisor\HPAdvisor.exe autorun=AUTORUN
uRun: [oovoo.exe] c:\program files\oovoo\oovoo.exe /minimized
uRun: [AVG-Secure-Search-Update_0913a] c:\users\mary ann\appdata\roaming\avg 0913a campaign\AVG-Secure-Search-Update-0913a.exe /PROMPT --mid 36370af645e65b16b18c941e1116b748-969a7225267dc17e441b61148ef273c84c89902b --CMPID 0913a
uRun: [SacReminderHDDV2N] c:\programdata\officeguardianv2n\reminder\SacReminder.exe
uRun: [AVG-Secure-Search-Update_1113a] c:\users\mary ann\appdata\roaming\avg 1113a campaign\AVG-Secure-Search-Update-1113a.exe /PROMPT /mid=36370af645e65b16b18c941e1116b748-969a7225267dc17e441b61148ef273c84c89902b /CMPID=1113a
uRun: [Amazon Cloud Player] "c:\users\mary ann\appdata\local\amazon cloud player\Amazon Music Helper.exe"
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [QPService] "c:\program files\hp\quickplay\QPService.exe"
mRun: [UpdateLBPShortCut] "c:\program files\cyberlink\labelprint\muitransfer\muistartmenu.exe" "c:\program files\cyberlink\labelprint" updatewithcreateonce "software\cyberlink\labelprint\2.5"
mRun: [UpdatePSTShortCut] "c:\program files\cyberlink\dvd suite\muitransfer\muistartmenu.exe" "c:\program files\cyberlink\dvd suite" updatewithcreateonce "software\cyberlink\PowerStarter"
mRun: [QlbCtrl.exe] c:\program files\hewlett-packard\hp quick launch buttons\QlbCtrl.exe /Start
mRun: [UpdateP2GoShortCut] "c:\program files\cyberlink\power2go\muitransfer\muistartmenu.exe" "c:\program files\cyberlink\power2go" updatewithcreateonce "software\cyberlink\power2go\6.0"
mRun: [UpdatePDIRShortCut] "c:\program files\cyberlink\powerdirector\muitransfer\muistartmenu.exe" "c:\program files\cyberlink\powerdirector" updatewithcreateonce "software\cyberlink\powerdirector\7.0"
mRun: [HP Health Check Scheduler] c:\program files\hewlett-packard\hp health check\HPHC_Scheduler.exe
mRun: [hpWirelessAssistant] c:\program files\hewlett-packard\hp wireless assistant\HPWAMain.exe
mRun: [CanonSolutionMenu] c:\program files\canon\solutionmenu\CNSLMAIN.exe /logon
mRun: [CanonMyPrinter] c:\program files\canon\myprinter\BJMyPrt.exe /logon
mRun: [SSBkgdUpdate] "c:\program files\common files\scansoft shared\ssbkgdupdate\SSBkgdupdate.exe" -Embedding -boot
mRun: [OpwareSE4] "c:\program files\scansoft\omnipagese4\OpwareSE4.exe"
mRun: [WrtMon.exe] c:\windows\system32\spool\drivers\w32x86\3\WrtMon.exe
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [AVG_UI] "c:\program files\avg\avg2014\avgui.exe" /TRAYONLY
mRunOnce: [Malwarebytes Anti-Malware (cleanup)] "c:\programdata\malwarebytes\malwarebytes anti-malware\mbamdor.exe" "c:\programdata\malwarebytes\Malwarebytes Anti-Malware"
uPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
mPolicies-Explorer: NoDrives = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - <orphaned>
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
TCP: NameServer = 192.168.2.1 24.229.54.212 216.144.187.199 204.186.80.229
TCP: Interfaces\{2B1F2E8F-3C9A-485F-9F8A-D41BE44E6BF3} : DHCPNameServer = 192.168.2.1 24.229.54.212 216.144.187.199 204.186.80.229
TCP: Interfaces\{A14EF26A-61FF-4731-9929-9797EAE1222D} : DHCPNameServer = 172.168.37.1
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg8\avgpp.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg
mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\program files\common files\lightscribe\LSRunOnce.exe"
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\mary ann\appdata\roaming\mozilla\firefox\profiles\zni3qowh.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.yahoo.com/
FF - plugin: c:\program files\google\update\1.3.24.15\npGoogleUpdate3.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.30514.0\npctrlui.dll
FF - plugin: c:\program files\worldwinner.com, inc\worldwinner games\npwwload.dll
FF - plugin: c:\users\mary ann\appdata\roaming\facebook\npfbplugin_1_0_1.dll
FF - plugin: c:\users\mary ann\appdata\roaming\facebook\npfbplugin_1_0_3.dll
FF - plugin: c:\users\mary ann\appdata\roaming\move networks\plugins\npqmp071500000347.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_14_0_0_145.dll
FF - ExtSQL: !HIDDEN! 2009-08-14 10:39; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2014-6-17 147736]
R0 Avglogx;AVG Logging Driver;c:\windows\system32\drivers\avglogx.sys [2014-6-17 241944]
R0 AvgMfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2014-6-17 98584]
R1 Avgdiskx;AVG Disk Driver;c:\windows\system32\drivers\avgdiskx.sys [2014-6-17 121624]
R1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [2014-6-17 199960]
R1 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [2014-6-17 21272]
R1 AvgLdx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2014-6-17 188696]
R1 AvgTdiX;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2014-6-17 197400]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2014\avgidsagent.exe [2014-6-27 3241488]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg2014\avgwdsvc.exe [2014-6-17 289328]
R2 CFUACProxy_officeguardianv2n;CFUACProxy_officeguardianv2n;c:\programdata\officeguardianv2n\UACProxy.exe [2013-10-7 83792]
R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504]
R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes anti-malware\mbamscheduler.exe [2014-7-27 1809720]
R2 MBAMService;MBAMService;c:\program files\malwarebytes anti-malware\mbamservice.exe [2014-7-27 860472]
R2 MotoConnect Service;MotoConnect Service;c:\program files\motorola\motoconnectservice\MotoConnectService.exe [2010-6-24 91456]
R2 Recovery Service for Windows;Recovery Service for Windows;c:\program files\sminst\BLService.exe [2008-10-25 365952]
R2 SacNetAgentService_C57C4F854F53;SacNetAgentService_C57C4F854F53;c:\programdata\officeguardianv2n\reminder\SacNetAgent.exe [2013-10-7 163664]
R3 Com4QLBEx;Com4QLBEx;c:\program files\hewlett-packard\hp quick launch buttons\Com4QLBEx.exe [2008-10-25 193840]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-7-27 23256]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2014-7-27 110296]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2014-7-27 51928]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-10-23 172192]
.
=============== Created Last 30 ================
.
2014-07-27 17:02:12 110296 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-07-27 16:59:48 74456 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-07-27 16:59:48 51928 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-07-27 16:59:48 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-07-27 16:59:48 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2014-07-13 22:53:44 -------- d-----w- c:\users\mary ann\appdata\local\Canon Easy-PhotoPrint EX
2014-07-09 22:14:36 983552 ----a-w- c:\program files\windows journal\JNTFiltr.dll
2014-07-09 22:14:36 965120 ----a-w- c:\program files\windows journal\JNWDRV.dll
2014-07-09 22:14:36 937472 ----a-w- c:\program files\common files\microsoft shared\ink\journal.dll
2014-07-09 22:14:36 1218048 ----a-w- c:\program files\windows journal\NBDoc.DLL
2014-07-09 22:14:29 2051072 ----a-w- c:\windows\system32\win32k.sys
2014-07-09 22:14:29 149504 ----a-w- c:\program files\common files\microsoft shared\ink\tabskb.dll
2014-07-09 22:14:29 1305088 ----a-w- c:\program files\common files\microsoft shared\ink\tipskins.dll
2014-07-09 22:14:29 114688 ----a-w- c:\program files\common files\microsoft shared\ink\TipBand.dll
2014-07-09 22:14:26 506880 ----a-w- c:\windows\system32\qedit.dll
2014-07-09 22:14:23 273408 ----a-w- c:\windows\system32\drivers\afd.sys
.
==================== Find3M ====================
.
2014-07-09 00:13:16 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-07-09 00:13:16 699056 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-06-17 20:22:02 188696 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2014-06-17 20:21:22 197400 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2014-06-17 20:18:00 241944 ----a-w- c:\windows\system32\drivers\avglogx.sys
2014-06-17 20:17:58 147736 ----a-w- c:\windows\system32\drivers\avgidshx.sys
2014-06-17 20:06:40 199960 ----a-w- c:\windows\system32\drivers\avgidsdriverx.sys
2014-06-17 20:06:38 121624 ----a-w- c:\windows\system32\drivers\avgdiskx.sys
2014-06-17 20:06:20 21272 ----a-w- c:\windows\system32\drivers\avgidsshimx.sys
2014-06-06 23:12:01 1810432 ----a-w- c:\windows\system32\jscript9.dll
2014-06-06 23:03:02 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2014-06-06 23:02:16 1129472 ----a-w- c:\windows\system32\wininet.dll
2014-06-06 22:57:04 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2014-06-06 22:56:20 421376 ----a-w- c:\windows\system32\vbscript.dll
2014-06-06 22:52:42 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2014-06-06 22:51:59 11776 ----a-w- c:\windows\system32\mshta.exe
.
============= FINISH: 18:25:30.10 ===============
Results of screen317's Security Check version 0.99.86
Windows Vista Service Pack 2 x86 (UAC is enabled)
Internet Explorer 9
Internet Explorer 8
``````````````Antivirus/Firewall Check:``````````````[/u]
Windows Firewall Enabled!
AVG AntiVirus Free Edition 2014
AVG Anti-Virus Free
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````[/u]
Adobe Flash Player 14.0.0.145
Mozilla Firefox (30.0)
````````Process Check: objlist.exe by Laurent````````[/u]
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbam.exe
AVG avgwdsvc.exe
AVG avgrsx.exe
AVG avgnsx.exe
AVG avgemc.exe
Malwarebytes Anti-Malware mbamscheduler.exe
`````````````````System Health check`````````````````[/u]
Total Fragmentation on Drive C: 2 % Defragment your hard drive soon! (Do NOT defrag if SSD!)
````````````````````End of Log``````````````````````[/u]
Please download Adware Cleaner (http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner) by Xplode. Please save it to your
desktop!
- Close all open programs and internet browsers.
- Double-click AdwCleaner.exe to run the tool.
Note: Windows Vista, Windows 7/8 users right-click and select Run As Administrator (http://windows.microsoft.com/en-US-windows7/How-do-I-run-an-application-once-with-a-full-administrator-access-token).
- Click the Scan button.
- AdwCleaner will begin. Be patient as the scan may take some time to complete.
- After the scan has finished, click the Report button. A logfile (AdwCleaner[R0].txt) will open in Notepad for review.
- Copy and paste the contents of that logfile in your next reply.
- A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
# AdwCleaner v3.301 - Report created 29/07/2014 at 11:25:27
# Updated 28/07/2014 by Xplode
# Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Username : mary ann - MARYANN-PC
# Running from : C:\Users\mary ann\Desktop\adwcleaner_3.301.exe
# Option : Scan
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Found : C:\Users\mary ann\AppData\Roaming\Mozilla\Firefox\Profiles\gvvo0xw7.default\Extensions\staged\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}
***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Found : HKCU\Software\AVG SafeGuard toolbar
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Found : HKLM\Software\AVG SafeGuard toolbar
Key Found : HKLM\Software\AVG Security Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
***** [ Browsers ] *****
-\\ Internet Explorer v9.0.8112.16561
-\\ Mozilla Firefox v30.0 (en-US)
[ File : C:\Users\mary ann\AppData\Roaming\Mozilla\Firefox\Profiles\gvvo0xw7.default\prefs.js ]
[ File : C:\Users\mary ann\AppData\Roaming\Mozilla\Firefox\Profiles\zni3qowh.default\prefs.js ]
Line Found : user_pref("extensions.irmysearch.aflt", "dsites");
Line Found : user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1QzutDtDtByEtB0BzyyDyDzztDzytDyD0ByEtN0D0Tzu0SyBtDyBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R");
Line Found : user_pref("extensions.irmysearch.cr", "728447292");
Line Found : user_pref("extensions.irmysearch.instlRef", "");
-\\ Google Chrome v
*************************
AdwCleaner[R0].txt - [27552 octets] - [08/12/2013 20:17:20]
AdwCleaner[R1].txt - [23042 octets] - [08/12/2013 20:26:52]
AdwCleaner[R2].txt - [1930 octets] - [29/07/2014 11:25:27]
AdwCleaner[S0].txt - [4395 octets] - [08/12/2013 20:25:19]
AdwCleaner[S1].txt - [22875 octets] - [08/12/2013 20:28:11]
########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [2111 octets] ##########
Yes, some remnants and other adware/browser hijacks, although not likely to be causing the "freezing" issue you mentioned. However, let's remove them and see how things progress.
1. Double-click
AdwCleaner.exe to run the tool again.
- Click the Scan button.
- AdwCleaner will begin to scan your computer like it did before.
Note: Windows Vista, Windows 7/8 users right-click and select Run As Administrator (http://windows.microsoft.com/en-US/windows7/How-do-I-run-an-application-once-with-a-full-administrator-access-token).
- After the scan has finished,
- This time click on the Clean button.
- Press OK when asked to close all programs and follow the onscreen prompts.
- Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
- After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
- Copy and paste the contents of that logfile in your next reply.
- A copy of that logfile will also be saved in the C:\AdwCleaner folder.
2. This tool often finds additional bits so please download Junkware Removal Tool (http://www.bleepingcomputer.com/download/junkware-removal-tool/dl/131/) to your desktop. <-Note: Direct download link.
- Disable your protection software now to avoid potential conflicts.
- Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select "Run as Administrator".
- The tool will open and start scanning your system.
- Please be patient as this can take a while to complete depending on your system's specifications.
- On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
- Post the contents of JRT.txt into your next message.
# AdwCleaner v3.301 - Report created 29/07/2014 at 18:55:03
# Updated 28/07/2014 by Xplode
# Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Username : mary ann - MARYANN-PC
# Running from : C:\Users\mary ann\Desktop\adwcleaner_3.301.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\Users\mary ann\AppData\Roaming\Mozilla\Firefox\Profiles\gvvo0xw7.default\Extensions\staged\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}
***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Key Deleted : HKCU\Software\AVG SafeGuard toolbar
Key Deleted : HKLM\Software\AVG SafeGuard toolbar
Key Deleted : HKLM\Software\AVG Security Toolbar
***** [ Browsers ] *****
-\\ Internet Explorer v9.0.8112.16561
-\\ Mozilla Firefox v30.0 (en-US)
[ File : C:\Users\mary ann\AppData\Roaming\Mozilla\Firefox\Profiles\gvvo0xw7.default\prefs.js ]
[ File : C:\Users\mary ann\AppData\Roaming\Mozilla\Firefox\Profiles\zni3qowh.default\prefs.js ]
Line Deleted : user_pref("extensions.irmysearch.aflt", "dsites");
Line Deleted : user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1QzutDtDtByEtB0BzyyDyDzztDzytDyD0ByEtN0D0Tzu0SyBtDyBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R");
Line Deleted : user_pref("extensions.irmysearch.cr", "728447292");
Line Deleted : user_pref("extensions.irmysearch.instlRef", "");
-\\ Google Chrome v
*************************
AdwCleaner[R0].txt - [27552 octets] - [08/12/2013 20:17:20]
AdwCleaner[R1].txt - [23042 octets] - [08/12/2013 20:26:52]
AdwCleaner[R2].txt - [2191 octets] - [29/07/2014 11:25:27]
AdwCleaner[R3].txt - [2251 octets] - [29/07/2014 18:53:18]
AdwCleaner[S0].txt - [4395 octets] - [08/12/2013 20:25:19]
AdwCleaner[S1].txt - [22875 octets] - [08/12/2013 20:28:11]
AdwCleaner[S2].txt - [2194 octets] - [29/07/2014 18:55:03]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [2254 octets] ##########
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows Vista (TM) Home Premium x86
Ran by mary ann on Tue 07/29/2014 at 19:19:08.63
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\mary ann\AppData\Roaming\mozilla\firefox\profiles\zni3qowh.default\minidumps [214 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 07/29/2014 at 19:30:53.27
Can you describe what you are doing when your laptop freezes, please. Is it when playing games, when surfing, on particular websites?
I'm mainly just surfing the www. There are sites that I check every day, but the freeze ups don't seem to be partial to any one in particular. I sometimes get a window saying that Shockwave Flash may be busy or have stopped working. I have noticed that once I get online there is sort of a warmup period that it freezes up very frequently for a few minutes, then sort of loosens up and the freeze ups are less frequent, but still happen throughout my time online. Hope that answers your question.
Thank you.
First, let's take care of removing the tools used: Please download Delfix from here (http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/9-delfix).
Ensure the following boxes are checked:
- Remove disinfection tools
- Create registry backup
- Purge system restore
(https://www.landzdown.com/proxy.php?request=http%3A%2F%2Fwww.hdrcgb.org.uk%2Fg2g%2Fdelfix.jpg&hash=430c0d18b39654835cac5f1633ed1b23348d76f1)
- Click Run
The program will run for a few moments and then notepad will open with a log. Please paste the log in your next reply.
Now about the freeze ups. When it comes to Flash Player, that has been a long-standing problem. One of the most common causes is hardware acceleration. Instructions are available in the "Disable hardware acceleration in Flash" section, right after the "Update Flash" on this page: https://support.mozilla.org/en-US/kb/adobe-flash-plugin-has-crashed
Since you are using Firefox, you may want to see if SpeedyFox (http://www.crystalidea.com/speedyfox) helps. It is simple to run, just download the version for Windows and double-click it to run. When it launches, your profile will be checked. To continue, click the Optimize! button. If Firefox is still open, you will be prompted to close it.
# DelFix v10.8 - Logfile created 01/08/2014 at 18:32:38
# Updated 29/07/2014 by Xplode
# Username : mary ann - MARYANN-PC
# Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
~ Removing disinfection tools ...
Deleted : C:\Qoobox
Deleted : C:\Combofix
Deleted : C:\AdwCleaner
Deleted : C:\log.txt
Deleted : C:\Users\mary ann\Desktop\adwcleaner_3.301.exe
Deleted : C:\Users\mary ann\Desktop\ComboFix.exe
Deleted : C:\Users\mary ann\Desktop\dds.scr
Deleted : C:\Users\mary ann\Desktop\dds.txt
Deleted : C:\Users\mary ann\Desktop\FSS.txt
Deleted : C:\Users\mary ann\Desktop\JRT.txt
Deleted : C:\Users\mary ann\Desktop\JRT_NEW.exe
Deleted : C:\Users\mary ann\Desktop\SecurityCheck.exe
Deleted : C:\Users\mary ann\Documents\Downloads\dds(1).scr
Deleted : C:\Users\mary ann\Documents\Downloads\dds(2).scr
Deleted : C:\Users\mary ann\Documents\Downloads\dds.scr
Deleted : C:\Users\mary ann\Documents\Downloads\Extras.Txt
Deleted : C:\Users\mary ann\Documents\Downloads\RogueKiller.exe
Deleted : C:\Users\mary ann\Documents\Downloads\SecurityCheck(1).exe
Deleted : C:\Users\mary ann\Documents\Downloads\SecurityCheck.exe
Deleted : C:\Users\mary ann\Documents\Downloads\TFC.exe
Deleted : C:\Windows\grep.exe
Deleted : C:\Windows\PEV.exe
Deleted : C:\Windows\NIRCMD.exe
Deleted : C:\Windows\MBR.exe
Deleted : C:\Windows\SED.exe
Deleted : C:\Windows\SWREG.exe
Deleted : C:\Windows\SWSC.exe
Deleted : C:\Windows\SWXCACLS.exe
Deleted : C:\Windows\Zip.exe
Deleted : HKCU\console_combofixbackup
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Swearware
Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe
Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart
Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys
Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart
Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys
~ Creating registry backup ... OK
~ Cleaning system restore ...
Deleted : RP #615 [Scheduled Checkpoint | 06/26/2014 02:57:10]
Deleted : RP #616 [Scheduled Checkpoint | 07/01/2014 17:08:03]
Deleted : RP #617 [Scheduled Checkpoint | 07/02/2014 22:04:08]
Deleted : RP #618 [Scheduled Checkpoint | 07/05/2014 01:36:00]
Deleted : RP #619 [Scheduled Checkpoint | 07/08/2014 23:48:19]
Deleted : RP #620 [Windows Update | 07/10/2014 14:02:47]
Deleted : RP #621 [Scheduled Checkpoint | 07/12/2014 02:21:07]
Deleted : RP #622 [Scheduled Checkpoint | 07/14/2014 02:56:37]
Deleted : RP #623 [Scheduled Checkpoint | 07/14/2014 23:54:21]
Deleted : RP #624 [Scheduled Checkpoint | 07/16/2014 00:32:32]
Deleted : RP #625 [Scheduled Checkpoint | 07/17/2014 02:43:50]
Deleted : RP #626 [Scheduled Checkpoint | 07/18/2014 16:38:42]
Deleted : RP #627 [Scheduled Checkpoint | 07/20/2014 19:52:06]
Deleted : RP #628 [Scheduled Checkpoint | 07/21/2014 16:35:47]
Deleted : RP #629 [Scheduled Checkpoint | 07/25/2014 01:20:20]
Deleted : RP #630 [Windows Update | 07/25/2014 14:38:29]
Deleted : RP #631 [Scheduled Checkpoint | 07/27/2014 17:56:46]
Deleted : RP #632 [Scheduled Checkpoint | 07/29/2014 01:51:46]
Deleted : RP #633 [Scheduled Checkpoint | 07/30/2014 20:11:12]
Deleted : RP #634 [Installed AVG 2014 | 08/01/2014 02:13:24]
New restore point created !
########## - EOF - ##########
Will do the rest soon.
I was just about to ask you. :) Let us know how you make out.
I will. I shampooed the carpet in my computer room on Wed. Now my back is sore. I can only sit at the computer for a little while. Since I don't know how long the rest of the procedure will take, I'll wait till the back is less sore.
It won't take long but it is best to wait until you're comfortable so you can concentrate on what you're doing. They are just attempts to get to the bottom of the problem; that is, if we can. I run into the reverse situation. Rather than when I first go online, after having the browser open for many hours, opening and closing numerous tabs, it starts "stuttering" so I have to close and reopen it.
I'm finally back. I disabled hardware acceleration in Flash a while ago, it didn't seem to improve the freeze ups. I just downloaded and ran the "Speedy Fox". It's too soon to see affects yet. I'll be back to let you know what's happening. Thanks for your patience.
No problem. Keep us updated on how things go.
Went a couple of days without a single freeze up. Had 1 yesterday and 1 today. Much improved from how it was performing before. I wanted to get this laptop working well before I switch over to my new Toshiba laptop. I'll be using this Compaq for a back up.
Granted, this computer has over 100 GiB of free space but you would need more space than that to serve a a system backup. In addition, I would not be comfortable using or recommending a 5.5 year old computer that has had issues as a backup. You would do better backing up pictures and documents to OneDrive and purchasing an external drive for system backups.
If you want to use the Compaq as an alternate computer rather than as a system backup, it wouldn't hurt to check whether it is overheating, which can also cause system crashes. Please go to http://www.almico.com/sfdownload.php and download SpeedFan 4.50. Although the image below is for an older version, you will find the download link for 4.50 similarly as shown:
(https://www.landzdown.com/proxy.php?request=http%3A%2F%2Fsecuritygarden.googlepages.com%2FSpeedFanDL.gif&hash=94d87f6b02cf69aa0e1194651a370daac873729d)
Install SpeedFan 4.50 and launch it from the desktop link.
Do not make any changes to any of the settings. After you launch SpeedFan, leave your computer alone for a few minutes so that it is idle. You will see a screen like below. Either note down all the information in the second box (that has the temperatures) or save a screen copy and post a link to the image.
(https://www.landzdown.com/proxy.php?request=http%3A%2F%2Fsecuritygarden.googlepages.com%2FTemp.gif&hash=06306f0220686b6da03dd02766c41c3e06cf6c62)
After a few minutes, go and do something on the computer. For example browse the Internet so that the CPU starts to work again. As you are doing this, keep an eye on the temperatures. Write down the temperatures while you are working on the computer. Please post both sets of information.
Also in SpeedFan, click the 'S.M.A.R.T' tab. Click the dropdown menu and select your main hard drive (C:). Hit the button that says 'Perform in-depth online analysis of this hard disk'. On the page that opens, look for something simliar to this:
QuoteThe overall fitness for this drive is 93%.
The overall performance for this drive is 93%.
Please post the results.
Sorry I wasn't clear. I plan to use this Compaq as a spare, not a backup. I have an external hard drive that I keep updated to back up my computer. I did the SpeedFan test, pre surfing GPU 77C, HDO 53C, Temp 1-63C, Temp 2-63C, Core 71C. After Surfing GPU 93C, HDO 52C, Temp 1-80C, Temp 2-79C, Core 92C. The laptop does become very warm, I have an external fan under it at all times.
Here are the results of Hard Disc analysis.
Hard disk health and reliability analysis
Almost every EIDE or SATA hard disk includes S.M.A.R.T. data. That information is collected by the drive itself and contains data that the manufacturer considered relevant to check reliability. The data is made up of several attributes that have a current value, a worst one, a threshold, some raw data, and some flags. Basically, when any attribute's current value is below its threshold, the hard disk is considered unreliable and likely to fail. By using several techniques, this report tries to give a wider range of information, basing its analysis on advanced comparisons with normal values based on real hard disks and on expert-like checks. The final results are not to be taken as an absolute truth, but they are almost as good as a professional expert advice about your hard disk status.
Your hard disk is a ST9250320AS with firmware HP07.
The average temperature for this hard disk model is 40°C (min=26°C max=55°C) and yours is 52°C.
Attribute Current Raw
Raw Read Error Rate 120 000000206091
Spin Up Time 99 000000000000
Start/Stop Count 98 000000000AEA
Reallocated Sector Count 100 000000000000
Seek Error Rate 83 00000D748B12
Power On Hours Count 97 000000000D42
Spin Retry Count 100 000000000000
Power Cycle Count 98 000000000A99
End To End Error Count 100 000000000000
Reported Uncorrectable Errors 57 00000000002B
Command Time Out 100 000100010006
High Fly Writes 100 000000000000
GSense Error Rate 100 0000000003E2
Power Off Retract Count 100 000000000000
Load Cycle Count 100 0000000006AC
Hardware ECC Recovered 48 000000206091
Reallocated Event Count 100 000000000000
Current Pending Sector 100 000000000000
Offline Uncorrectable Sector Count 100 000000000000
Ultra DMA CRC Error Rate 200 000000000000
Free fall protection 100 000000000000
Troubled attributes:
Attribute Airflow Temperature failed in the past. Its current value is 48, the worst value was 35 and the threshold is 45. According to the manufacturer, this is an advisory condition.
The overall fitness for this drive is 85%.
The overall performance for this drive is 98%.
QuoteTroubled attributes:
Attribute Airflow Temperature failed in the past. Its current value is 48, the worst value was 35 and the threshold is 45. According to the manufacturer, this is an advisory condition.
Although the external fan may help a bit, that laptop is running very hot, which is most likely the reason for the problems. Have you cleaned the laptop recently? Before Microsoft retired the "Microsoft at Home" website, I copied several of my favorite help articles. Please see the article preserved at Tidbits: How to clean your computer (http://savedtidbits.blogspot.com/2013/06/how-to-clean-your-computer.html).
I'm unable to oopen the laptop's case, I tried once before, to replace the monitor. The scrtrews are installed at an angle and are frozen in place.
I now apparently have a bad virus, can't do anything. Tried to do Mbam and AVG scans. MBAM wouldn't get out of preliminary scans, AVG finished, but when I click on "remove threats" which are Trojan horse sheur 4,ccbm, nothinbg happens. Is there anything I can do besides using the recovery discss?
Forgot to ask which free antivirus is best?
All I can say for certain is that I'm glad you have a new, dependable computer particularly if you cannot do something to lower the temperature.
As to this machine, you could try scanning in safe mode. Update both MBAM and AVG to ensure you have the latest definitions and then restart your computer in
SafeMode by doing the following:
- Restart your computer
- After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
- Instead of Windows loading as normal, a menu should appear
- Select the first option, to run Windows in Safe Mode.
If Safe Mode doesn't work, AVG does provide instructions for SHeur (http://www.avgthreatlabs.com/virus-and-malware-information/info/sheur/). However, since nothing happened with AVG when you clicked "remove threats", was that because it stopped working (locked up)? AVG does have a PC Rescue and Repair Toolkit (http://www.avg.com/us-en/avg-rescue-cd). Instructions are available here: https://www.youtube.com/watch?v=meCZfrvE1gg
That said, you may want to get a second opinion. Following are the instructions to run an on-line scan from ESET.
- Note: It is easiest if you use Internet explorer for this scan. (If you use an alternate browser, it will be necessary to download the ESET Smart Installer)
- Hold down Control and click on this link (http://www.eset.com/us/online-scanner-popup/) to open ESET OnlineScan in a new window so you can refer to these instructions.
- Click the green ESET Online Scanner box.
- For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
- Click on esetsmartinstaller_enu.exe (http://download.eset.com/special/eos/esetsmartinstaller_enu.exe) to download the ESET Smart Installer. Save it to your desktop.
- Double click on the Eset Smart Installer icon on your desktop.
- Check "YES, I accept the Terms of Use."
- Click the Start button.
- Accept any security warnings from your browser.
- Under scan settings, check "Scan Archives" and "Remove found threats"
- Click Advanced settings and select the following:
- Scan potentially unwanted applications
- Scan for potentially unsafe applications
- Enable Anti-Stealth technology
- ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
- When the scan completes, click List Threats
- Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
- Click the Back button.
- Click the Finish button.
As to the "best" free antivirus, no product is perfect and I wouldn't pick any as the "best". Everything depends on a combination of the product, the status of computer updates and also the computer operator's surfing habits. The only free antivirus I've used in a number of years is Microsoft Security Essentials. ESET is the only paid/licensed antivirus I've used. I've never had a virus or trojan on any of my computers whether with the free product or licensed product.
Quote from: Corrine on September 17, 2014, 02:25:02 AM
As to the "best" free antivirus, no product is perfect and I wouldn't pick any as the "best". Everything depends on a combination of the product, the status of computer updates and also the computer operator's surfing habits. The only free antivirus I've used in a number of years is Microsoft Security Essentials. ESET is the only paid/licensed antivirus I've used. I've never had a virus or trojan on any of my computers whether with the free product or licensed product.
Same two for my computers, none have ever been infected. :Win73:
After I did the MBAM and AVG scans it seemed to be working as well as it did before the current problems, until I got a window popping up incessantly wanting to upgrade adobe flash, which I upgraded recently. When I finally allowed it, it did nothing, but still kept popping up, making it impossible to do anything.
You can expect Adobe Flash Player updates the second Tuesday of the month for this computer. For your new Windows 8.1 laptop, IE will be updated automatically as part of the second Tuesday of the month updates but you'll need to update Flash Player manually for Firefox on the laptop.
For this machine (Windows Vista): The current version of Flash Player is 15.0.0.152. Go to the About Flash Player page (http://www.adobe.com/products/flash/about/) with both Firefox and IE to check the installed version. If not the current release, download the following and install:
For Firefox: http://download.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_15_plugin.exe
For Internet Explorer: http://download.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_15_active_x.exe
After spending a lot of time getting the new Toshiba straightened out and set up to my liking, I finally turned my attention to the old Compaq. When I restarted, there was no window for the Adobe update. I checked with Firefox and IE and both seem to have the most recent version. It seems to working as well as it did before the most recent problem, which isn't saying much. That Compaq always ran hot. It was my 1st laptop, so I thought that was normal. You're probably right about the heat factoring into all the problems it has had. The Toshiba is cool as a cumber. I plan to keep the Compaq for emergencies. What will happen if I just let it sit with no updates being done?
If you let it sit with no updates, it will be vulnerable if you need it in an emergency. Considering the state of the hard drive, I hope you aren't putting too much faith in it for that purpose.
That said, security updates are issued once a month. You could at least power up the old machine and update then (including antivirus and any other programs).
Thanks. I'll have to set up some kind of reminder to do that.
Microsoft security updates are published the second Tuesday of each month. If you have an Outlook.com account (MSN.com > Hotmail > Live > Outlook.com) the built in calendar is great. Just open the Calendar, click on the 2nd Tuesday (or a day or two following that), type the name (e.g., PC Updates!), click View Details. Under "How Often", select monthly. That section will expand and you can then click the option for the second Tuesday of the month (or Wednesday, etc., whatever you prefer). Make sure it shows "never ends". Indicate a time period for email reminder and you're all set.
All done. Another thank you.
You are most welcome!