Slow for months - now trouble accessing internet

[Corrine]

Hi, Blue55.

You're correct.  With a computer with so little RAM compared to what modern computers have, there isn't much else that can be done beyond keeping temp files cleaned, uninstalling unused programs, controlling programs at start-up and an occasional defrag.

As to AOL, if she uses AOL, then leave it, please.  Please leave the Qoobox folder.  We'll take care of that in a minute.  The gobble-de-gook folder is a dynamic index.  Leave it as well.

You can delete Security Check from the desktop and then do the following to implement cleanup procedures and also to reset System Restore points:

Click Start > Run and copy/paste the following bold text into the Run box and click OK:

ComboFix /Uninstall

Note: In the event you wish to contribute to the ongoing development of ComboFix, the developer is accepting donations via PayPal.


To check if the system is missing security updates or has insecure applications, install Secunia Personal Software Inspector or, alternatively, visit http://secunia.com/software_inspector/ .  The Secunia Software Inspector runs through your browser with no installation or download required and does the following:

• Detects insecure versions of applications installed
  
• Verifies that all Microsoft patches are applied
  
• Assists you in updating your system and applications
  

Install and update SpywareBlaster to prevent the installation of spyware and other potentially unwanted software: http://www.javacoolsoftware.com/spywareblaster.html

My favorite security software is WinPatrol which includes the features described at http://www.winpatrol.com/features.html.  If you have questions about WinPatrol, we have a forum here at LzD:  WinPatrol Help & Information.

Please let me know if you have any additional questions.

[Blue55]

I am also posting the results from MSE. It found 4 things

   -   -   -   -   -   MicrosoftSecurityEssentials results 1:35am – 4:38am  4 found

TrojanDownloader:ASX/Wimad.DI  -Severe  -Removed

Category: Trojan Downloader

Description: This program is dangerous and downloads other programs.

Recommended action: Remove this software immediately.

Security Essentials detected programs that may compromise your privacy or damage your computer. You can still access the files that these programs use without removing them (not recommended). To access these files, select the Allow action and click Apply actions. If this option is not available, log on as administrator or ask the security administrator for help.

Items:
containerfile:C:\Documents and Settings\Owner\Desktop\vin's folder\kattie perry calaforna girls (good).wma
file:C:\Documents and Settings\Owner\Desktop\vin's folder\kattie perry calaforna girls (good).wma->(ASF_Script_Commands)
-   ~   -   ~    -   ~   -   ~    -   ~   -   ~    -   ~   -   ~    -   ~   -   ~   

BrowserModifier:Win32/Zwangi -Medium  -Quarantined

Category: Browser Modifier

Description: This program changes various Web browser settings without adequate consent.

Recommended action: Permit this detected item only if you trust the program or the software publisher.

Security Essentials detected programs that may compromise your privacy or damage your computer. You can still access the files that these programs use without removing them (not recommended). To access these files, select the Allow action and click Apply actions. If this option is not available, log on as administrator or ask the security administrator for help.

Items:
file:C:\System Volume Information\_restore{1FB45D71-A412-4771-9CD0-2BC64912A8EF}\RP2024\A0345810.dll
file:C:\System Volume Information\_restore{1FB45D71-A412-4771-9CD0-2BC64912A8EF}\RP2024\A0345811.exe
-   ~   -   ~    -   ~   -   ~    -   ~   -   ~    -   ~   -   ~    -   ~   -   ~   


Program:Win32/Starware  -Low  -Quarantined

Recommended action: Review the alert details to see why the software was detected. If you do not like how the software operates or if you do not recognize and trust the publisher, consider blocking or removing the software.

Security Essentials detected programs that may compromise your privacy or damage your computer. You can still access the files that these programs use without removing them (not recommended). To access these files, select the Allow action and click Apply actions. If this option is not available, log on as administrator or ask the security administrator for help.

Items:
containerfile:C:\Program Files\Dell\recipes.exe
file:C:\Program Files\Dell\recipes.exe->(nsis-6-"Starware.dll")
-   ~   -   ~    -   ~   -   ~    -   ~   -   ~    -   ~   -   ~    -   ~   -   ~   

Program:Win32/PowerRegScheduler  -Medium  -Quarantined

Category: Potentially Unwanted Software

Description: This program has potentially unwanted behavior.

Recommended action: Review the alert details to see why the software was detected. If you do not like how the software operates or if you do not recognize and trust the publisher, consider blocking or removing the software.

Security Essentials detected programs that may compromise your privacy or damage your computer. You can still access the files that these programs use without removing them (not recommended). To access these files, select the Allow action and click Apply actions. If this option is not available, log on as administrator or ask the security administrator for help.

Items:
containerfile:C:\Program Files\Sonic\RecordNow!\LeaderReg.EXE
file:c:\documents and settings\owner\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe
file:C:\Program Files\Sonic\RecordNow!\LeaderReg.EXE->[RSRCEmb]
startup:c:\documents and settings\owner\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe

                          -   ~   -   ~    -   ~   end  -   ~    -   ~   -   ~    - 

[Blue55]

Corrine,

Did MSE get it all of what it found off ?
What does it mean by
    "Security Essentials detected programs that may compromise your privacy or damage your computer. You can still access the files that these programs use without removing them (not recommended). To access these files, select the Allow action and click Apply actions."   ?
Should I be worried about WMA/ Windows Media Audio items there ?

Ooops, I deleted Combofix from the desktop.
I put a copy back on the desktop, then ran the uninstall.
It looked like it was actually running but then said it was uninstalled so I don't think I screwed it up to bad, ... Yes?

And now this is really important, how to I change LandZDown so it isn't tagging all posts as an hour off ?
(Where do I say that I'm Eastern time zone?)

Thank you sooo much for your help again.
She said that her laptop is doing the same stuff so as soon as I swap her for this, I'll be back.

Carol

[Corrine]

Hi, Blue55.

The uninstall process of ComboFix takes care of removing old  System Restore points, so any old restore points have been cleaned -- including anything MSE found.

The full system scan of MSE should have taken care of anything that wasn't visible in the logs.   

See you in a new topic for the laptop!

[winchester73]

And now this is really important, how to I change LandZDown so it isn't tagging all posts as an hour off ?
(Where do I say that I'm Eastern time zone?)

Go to your profile: http://www.landzdown.com/profile/?u=101

Click on "Modify Profile", then "Look and Layout".  Where you see the "time offset" you can manually set it to -4, or you can click "auto detect"

[Corrine]

Thanks, Winchester73.  :hug:  I forgot about that question.