Member Avatar for Mady

Would you be so kind to help me get rid of the problems?

Here is Hjt log:

Logfile of HijackThis v1.99.1
Scan saved at 20:04:18, on 19/02/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\WINDOWS\System32\keyhook.exe
C:\Program Files\iPodHE\iPodHE.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\HJT\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ynet.co.il/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local.,
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\System32\keyhook.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [iPodHE SystemTray] C:\Program Files\iPodHE\iPodHE.exe /tray
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: iPodHE.exe
O4 - Startup: LivePerson.lnk = C:\Program Files\LivePerson\hc.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll/search.htm
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: *.apple.com
O15 - Trusted Zone: http://www.softpedia.com
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Unknown owner - C:\Program Files\Eset\nod32krn.exe (file missing)

  • 4 Contributors
  • 4 Replies
  • 191 Views
  • 1 Week Discussion Span
  • Latest Post Latest Post by 'Stein

Dani AI

Generated

Quick summary: ultimately fixed the problem by reformatting, which is the fastest reliable cure for deep system corruption or persistent infections but also destroys installed programs and any data that wasn’t backed up. Earlier suggestions from (remove the broken Winsock/Bonjour entry and the MSN toolbar context hook) were appropriate diagnostics; was right to point out those items were only part of a bigger picture.

Why this can cause “too slow / gets stuck”: orphaned DLLs, missing service files and conflicting security products can produce long timeouts during startup, broken Winsock entries cause network hangs, and many background autostart programs (media helpers, toolbars, multiple AV engines) raise memory and CPU pressure. Missing-file service or Winlogon notify entries often slow logon while Windows repeatedly looks for a file that isn’t there.

Practical, non‑destructive checklist (use in this order):

  • Backup important data first.
  • Boot Safe Mode and run up‑to‑date on‑access and on‑demand scanners.
  • Reset networking hooks: netsh winsock reset then reboot.
  • Repair disk and system files: chkdsk /r and sfc /scannow.
  • Use msconfig to disable non‑Microsoft startup items temporarily; use Autoruns (Sysinternals) to inspect and remove orphaned startup/service entries rather than blind deletion.
  • If a DLL belongs to a legitimate app (Bonjour, iPod, AV), reinstall or uninstall that app cleanly so its registry/service entries are corrected.
  • Test hardware if problems persist: run Memtest for RAM and a SMART HDD test for the disk.

Cautions and prevention: editing the registry or deleting services can render a system unbootable—only remove entries you can identify or after a backup/image. After recovery, keep the system patched, run a single reputable real‑time AV, avoid toolbars/extra browsers, and maintain regular backups. Formatting solves the symptom fast, but the checklist above helps repair and prevent the same issues without a full reinstall.

Recommended Answers

All 4 Replies

Member Avatar for tayspen

Hi, I would remove this

O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll

and this


O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll/search.htm

I am just a beginner at HJT readings...so you may want to let someone like DMR come along and finish it up. But for now scan again and remove that.

Member Avatar for conspiringfate

I agree... but I think thats the least of your problems

Mike

Member Avatar for Mady

Well, I formated the computer :mrgreen:
No more problems for now.

Thank you.

Member Avatar for 'Stein

Heh, if ya formatted, could ya please mark the thread as 'solved' (its a link near the top).

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.