Registry clean fix?

December 16, 2009

Today the computer infected the virus which is called the Registry clean fix . It can not delete by anti virus. Moreover I try to click system return. It means that computer back to before virus infected. Finally the computer has back to normal and fully function.

any free registry cleaning dowloads?

December 5, 2009

ive just reinstalled my XP and my PC has become very slow. I am let to believe that i need to do a registry clean. Does anybody know of a free downlaod that enables me to do a cleanup.

Not a free Scan… not a free quote..

A free download that is maybe open source.

thanks for reading

CPU usage 90-100% Windows vista?

December 4, 2009

Lately ive been on my laptop and my CPU has gone up to 100%,ive done virus scans,registry clean ups,CCleaner,Spybot and AVG.

And it dosent come up with any virus or anything just cookies,also my laptop is starting to get really hot and overheat and i use a program to moniter how hot it gets and it reaches from 70-95.

Heres the log file from hijackthis:

Running processes:
C:\Windows\system32\taskeng.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\RegCure\RegCure.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\MessengerDiscovery 2\MessengerDiscovery 2.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\ManyCam 2.4\ManyCam.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 – HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 – HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 – HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 – Hosts: ::1 localhost
O2 – BHO: Adobe PDF Reader Link Helper – {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} – C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 – BHO: RealPlayer Download and Record Plugin for Internet Explorer – {3049C3E9-B461-4BC5-8870-4C09146192CA} – C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 – BHO: WormRadar.com IESiteBlocker.NavFilter – {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} – C:\Program Files\AVG\AVG8\avgssie.dll
O2 – BHO: Search Helper – {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} – C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 – BHO: Windows Live ID Sign-in Helper – {9030D464-4C02-4ABF-8ECC-5164760863C6} – C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 – BHO: BHO – {BF8292B6-699B-45c7-B412-1A5CF2C51C6B} – C:\Windows\system32\winbhsdll.dll
O2 – BHO: Ask Toolbar BHO – {D4027C7F-154A-4066-A1AD-4243D8127440} – C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 – BHO: Java(tm) Plug-In 2 SSV Helper – {DBC80044-A445-435b-BC74-9C25C1C588A9} – C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 – BHO: Windows Live Toolbar Helper – {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} – C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 – HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 – HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 – HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 – HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 – HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘LOCAL SERVICE’)
O4 – HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘LOCAL SERVICE’)
O4 – HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘NETWORK SERVICE’)
O4 – .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\TOSHIBA\TRDCReminder\TRDCReminder.exe (User ‘Default user’)
O4 – Global Startup: Process Manager for Windows 1.6.192.lnk = C:\Program Files\Process Manager for Windows 1.6.192\Arif-Process-Manager.exe
O6 – HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O9 – Extra button: Send to OneNote – {2670000A-7350-4f3c-8081-5663EE0C6C49} – C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 – Extra ‘Tools’ menuitem: S&end to OneNote – {2670000A-7350-4f3c-8081-5663EE0C6C49} – C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 – Extra button: eBay.co.uk – Buy It Sell It Love It – {76577871-04EC-495E-A12B-91F7C3600AFA} – http://rover.ebay.com/rover/1/710-44557-9400-3/4 (file missing)
O9 – Extra button: Amazon.co.uk – {8A918C1D-E123-4E36-B562-5C1519E434CE} – http://www.amazon.co.uk/exec/obidos/redirect-home?tag=Toshibaukbholink-21&site=home (file missing)
O9 – Extra button: Research – {92780B25-18CC-41C8-B9BE-3C9C571A8263} – C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 – Gopher Prefix:
O18 – Protocol: linkscanner – {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} – C:\Program Files\AVG\AVG8\avgpp.dll
O18 – Protocol: skype4com – {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} – C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 – Service: AVG Free8 E-mail Scanner (avg8emc) – AVG Technologies CZ, s.r.o. – C:\PROGRA~1\AVG\AVG8\avgemc

How do I fix my Windows XP Pro/my registry after removing virus?

October 26, 2009

I had the Total Security/Anti-Virus Pro_2010 rogue virus which I have removed with mulitple programs and then did a registry clean with COMODO but now my Autoplay camera wizard is not automatically popping up like it always has in the past. I ran an Avast scan which found no infected files but also could not scan 44 files. Before this virus Avast always could scan all my files and never showed these "unscannable" files. On a forum I saw that someone provided a forum moderator specialist who was helping them remove their virus the same list of files as mine (in the same order too) from some type of file check they do to figure out how they want to attack and remove the virus. This fact makes me sure that this must be part of my problem. Any info on how to fix this situation would be greatly appreciated. Here are the unscannable files:

C:\WINDOWS$hf_mig$\KB947864\KB947864
C:\WINDOWS\addins\addins
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP15B.tmp\ZAP15B.tmp
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP238.tmp\ZAP238.tmp
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP263.tmp\ZAP263.tmp
C:\WINDOWS\assembly\temp\temp
C:\WINDOWS\assembly\tmp\tmp
C:\WINDOWS\Config\Config
C:\WINDOWS\Connection Wizard\Connection Wizard
C:\WINDOWS\CSC\d1\d1
C:\WINDOWS\CSC\d2\d2
C:\WINDOWS\CSC\d3\d3
C:\WINDOWS\CSC\d4\d4
C:\WINDOWS\CSC\d5\d5
C:\WINDOWS\CSC\d6\d6
C:\WINDOWS\CSC\d7\d7
C:\WINDOWS\CSC\d8\d8
C:\WINDOWS\ime\imeip\applets\applets
C:\WINDOWS\ime\imeip98\imeip98
C:\WINDOWS\ime\imkr6_1\dicts\dicts
C:\WINDOWS\Installer$PatchCache$\Managed{content}DC1503A46F231838AD88BCDDC8E8F7C.2.30729.2.30729
C:\WINDOWS\Installer$PatchCache$\Managed\DC3BF90CC0D3D2F398A9A6D176270F3.2.30729.2.30729
C:\WINDOWS\java\classes\classes
C:\WINDOWS\java\trustlib\trustlib
C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\TemporaryASP.NET Files\Bind Logs\Bind Logs
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TemporaryASP.NET Files\Temporary ASP.NET Files
C:\WINDOWS\msapps\msinfo\msinfo
C:\WINDOWS\pchealth\ERRORREP\QHEADLES\QHEADLES
C:\WINDOWS\pchealth\helpctr\BATCH\BATCH
C:\WINDOWS\pchealth\helpctr\Config\CheckPoint\CheckPoint
C:\WINDOWS\pchealth\helpctr\HelpFiles\HelpFiles
C:\WINDOWS\pchealth\helpctr\InstalledSKUs\InstalledSKUs
C:\WINDOWS\pchealth\helpctr\System\DFS\DFS
C:\WINDOWS\pchealth\helpctr\System_OEM\System_OEM
C:\WINDOWS\pchealth\helpctr\Temp\Temp
C:\WINDOWS\Registration\CRMLog\CRMLog
C:\WINDOWS\SoftwareDistribution\AuthCabs\AuthCabs
C:\WINDOWS\SoftwareDistribution\Download5f788b6de8a3ec79e9aa172e6317f1\backup\backup
C:\WINDOWS\SoftwareDistribution\SelfUpdate\Registered\Registered
C:\WINDOWS\Sun\Java\Deployment\Deployment
C:\WINDOWS\Temp\_avast4_\_avast4_
C:\WINDOWS\WinSxS\InstallTemp\InstallTemp