gerry7

Thanks for every thing. Gerry..

A thousand apologies! I was looking through the log and suddenly saw and realised that I had misspelled msconfig ( See my posts 66 & 68). Have now obeyed your post 65 instructions. Thanks again Gerry

Log: ystemLook 30.07.11 by jpshortstuffLog created at 18:40 on 02/03/2014 by AlAdministrator - Elevation successful ========== filefind ========== Searching for "msconfig.exe"C:\WINDOWS\$NtServicePackUninstall$\msconfig.exe -----c- 169984 bytes [15:39 26/04/2009] [00:34 27/09/2005] 3C60AEFA68EFA2C4D13AB6B68FE82B81C:\WINDOWS\$NtUninstallKB906569$\msconfig.exe -----c- 158208 bytes [18:10 16/10/2007] [12:00 04/08/2004] 4FD22142F54692463A7B98B7DE175573C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe --a---- 169984 bytes [23:07 04/04/2005] [00:12 14/04/2008] A81135541C9D4EBCE43EFA8AD31395B4C:\WINDOWS\ServicePackFiles\i386\msconfig.exe ------- 169984 bytes [02:49 16/02/2009] [00:12 14/04/2008] A81135541C9D4EBCE43EFA8AD31395B4C:\WINDOWS\system32\dllcache\msconfig.exe --a--c- 169984 bytes [23:07 04/04/2005] [00:12 14/04/2008] A81135541C9D4EBCE43EFA8AD31395B4 Searching for " "No files found. -= EOF =-

No. Run box opens as before. Now message reads "Windows cannot find misconfig.exe...."

I just get message "Windows cannot find misconfig...." Gerry

Thanks for all your help - one last thing. I now get the attached message on start up.Should I revert to normal mode now? Startup warning.bmp

Thanks: No HKCU:Run AdobeARM Adobe Systems Incorporated "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"Yes HKCU:Run AVG-Secure-Search-Update_0214c C:\Documents and Settings\Al.YOUR-5511792FEB\Application Data\AVG 0214c Campaign\AVG-Secure-Search-Update-0214c.exe /PROMPT /mid=e409b6cc904347d1b912d1191024e9fb-b602d594afd2b0b327e07a06f36ca6a7e42546d0 /CMPID=0214cNo HKCU:Run eraser - C:\Program Files\Eraser\eraser.exe -hideNo HKCU:Run GoogleToolbarNotifier Google Inc. "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"No HKCU:Run GoogleUpdate Google Inc. "C:\Documents and Settings\Al.YOUR-5511792FEB\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /cNo HKCU:Run Kies C:\Program Files\Samsung\Kies\Kies.exe /preloadNo HKCU:Run KiesPDLR C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe RunNo HKCU:Run msmsgs Microsoft Corporation "C:\Program Files\Messenger\msmsgs.exe" /backgroundNo HKCU:Run SsAAD SONY Corporation C:\PROGRA~1\Sony\SONICS~1\SsAAD.exeNo HKCU:Run SUPERAntiSpyware SUPERAntiSpyware C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exeNo HKLM:Run AdobeARM Adobe Systems Incorporated "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"No HKLM:Run avgui AVG Technologies CZ, s.r.o. "C:\Program Files\AVG\AVG2014\avgui.exe" /TRAYONLYNo HKLM:Run dumprep 0 -u %systemroot%\system32\dumprep 0 -uNo HKLM:Run EfreeSoft Boss Key C:\Program Files\Mgboss\mgboss.exe -minNo HKLM:Run EuWatch "K:\Todo Backup\bin\EuWatch.exe"No HKLM:Run jusched "C:\Program Files\Java\jre7\bin\jusched.exe"No HKLM:Run mm_tray Musicmatch, Inc. "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe"Yes HKLM:Run MSConfig Microsoft Corporation C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE /autoNo HKLM:Run realsched RealNetworks, Inc. "C:\program files\real\realplayer\update\realsched.exe" -osbootNo HKLM:Run sprtcmd SupportSoft, Inc. "C:\Program Files\TalkTalk\bin\sprtcmd.exe" /P TalkTalkNo HKLM:Run TrayNotify "K:\Todo Backup\bin\TrayNotify.exe"

I already have the full (free) version of Ccleaner and use it frequently- as I did before receiving your reply. Shall I still follow your direction? Gerry

I was logged on as administrator, checked the boxes as instructed; when I got to Services tab."Click to select the Hide All Microsoft Services check box.Click Disable All, and then click OK" and did that, a grey box popped up saying (to the effect) Access Denied you must be logged on as administrator. I attach a screen shot of the top third of the services pane, after restart. Some running, some stopped and Hide All Microsoft Services not checked. Gerry.services screen shot.doc

At restart came up with "access denied" although I was logged in as administrator. Gerry.

Many thanks Gerry

Sorry - to these forums. Gerry

I want to change my password. Having forgotten it, I was sent a new one as a string of letters and numbers. I complete the form (without putting in a new e-mail address which I do not wish to change) and get the message "you must complete the entire form". Can someone tell me the way out of this please?

Thanks for all your patient help. I take it that the remaining issues cannot be solved in this forum (computer running slow.) Perhaps (like me) it is nearing the end of its useful life! A friend who has a pay pal account is sending a modest donation on my behalf.

Boot up seemed a bit faster on reboot thanks. Log . All processes killed========== FILES ==========C:\Documents and Settings\Guest\Local Settings\Application Data\Mysearchdial\1.8.21.0\bh folder moved successfully.C:\Documents and Settings\Guest\Local Settings\Application Data\Mysearchdial\1.8.21.0 folder moved successfully.C:\Documents and Settings\Guest\Local Settings\Application Data\Mysearchdial folder moved successfully.========== COMMANDS ========== [EMPTYTEMP] User: Administrator->Temp folder emptied: 0 bytes->Temporary Internet Files folder emptied: 0 bytes User: Al->Temporary Internet Files folder emptied: 0 bytes User: Al.YOUR-5511792FEB->Temp folder emptied: 573955 bytes->Temporary Internet Files folder emptied: 51156 bytes->Java cache emptied: 0 bytes->FireFox cache emptied: 0 bytes->Google Chrome cache emptied: 11273691 bytes->Flash cache emptied: 0 bytes User: All Users User: Default User->Temporary Internet Files folder emptied: 0 bytes->Flash cache emptied: 0 bytes User: Guest->Temp folder emptied: 0 bytes->Temporary Internet Files folder emptied: 67 bytes->Java cache emptied: 0 bytes->FireFox cache emptied: 0 bytes->Google Chrome cache emptied: 0 bytes->Flash cache emptied: 0 bytes User: LocalService->Temp folder emptied: 0 bytes->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService->Temp folder emptied: 0 bytes->Temporary Internet Files folder emptied: 33170 bytes User: Ric->Temp folder emptied: 0 bytes->Temporary Internet Files folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes%systemroot% .tmp files removed: 0 bytes%systemroot%\System32 .tmp files removed: 0 bytes%systemroot%\System32\dllcache .tmp files removed: 0 bytes%systemroot%\System32\drivers .tmp files removed: 0 bytesWindows Temp folder emptied: 876 bytes%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytesRecycleBin emptied: 5142205 bytes Total Files Cleaned = 16.00 mb OTM by OldTimer - Version 3.1.21.0 log created on 02262014_132656 Files moved on Reboot... Registry entries deleted on Reboot...

I've just noticed that the last attachment was a tiny file and cannot be correct. I found this one which I think is the one you need. zoek-results.log

Apologies.I tried to save it in order to attach it but notepad did not allow this. The one I sent was in Word. This attachment is direct from the location you kindly gave. zoek-results2014-02-26-083404.log

Thank you for all this. Chrome does not crash now but computer still seems to be very slow. Please find new scan attached. Gerry Zoek26 .830.doc

Sorry. I Thought only necessary to disable AVG & Firewall. I will rerun tomorrow.

Found it - totally different to what appeared on screen too long to paste -attached: Thanks. zoek-results.log

Sorry - don't know how that happened chrome keeps crashing and could not save this as notepad. Zoek.exe v5.0.0.0 Updated 19-February-2014Tool run by Al on 25/02/2014 at 12:11:01.47.Microsoft Windows XP Home Edition 5.1.2600 Service Pack 3 x86Running in: Normal Mode Internet Access DetectedLaunched: C:\Documents and Settings\Al.YOUR-5511792FEB\Desktop\zoek.exe [scan all users] [script inserted] ===== Runcheck 12:17:09.08 ===== --- Create Environment Variables 12:17:15.51 --- Create System Restore Point 12:17:33.66 --- Checking Input 12:17:51.65 --- AU AppData Check 12:18:03.58 --- Remove From Windows Installer 12:18:12.97 --- IE Startpage Check 12:26:00.99 --- Program Files DB Check 12:28:32.65 --- C:\Documents and Settings\Administrator\Application Data DB Check 12:29:46.35 --- C:\Documents and Settings\Al\Application Data DB Check 12:29:46.35 --- C:\Documents and Settings\Al.YOUR-5511792FEB\Application Data DB Check 12:29:46.35 --- C:\Documents and Settings\Default User\Application Data DB Check 12:29:46.35 --- C:\Documents and Settings\Guest\Application Data DB Check 12:29:46.35 --- C:\Documents and Settings\LocalService\Application Data DB Check 12:29:46.35 --- C:\Documents and Settings\NetworkService\Application Data DB Check 12:29:46.35 --- C:\Documents and Settings\Ric\Application Data DB Check 12:29:46.35 --- C:\WINDOWS\system32\config\systemprofile\Application Data DB Check 12:29:46.35 --- C:\Documents and Settings\Al.YOUR-5511792FEB DB Check 12:33:53.07 --- C:\DOCUME~1\ALLUSE~1\APPLIC~1 DB Check 12:34:21.79 --- C:\Documents and Settings\Administrator\Local Settings\Application Data DB Check 12:34:24.32 --- C:\Documents and Settings\Al\Local Settings\Application Data DB Check 12:34:24.32 --- C:\Documents and Settings\Al.YOUR-5511792FEB\Local Settings\Application Data DB Check 12:34:24.32 --- C:\Documents and Settings\Default User\Local Settings\Application Data DB Check 12:34:24.32 --- C:\Documents and Settings\Guest\Local Settings\Application Data DB Check 12:34:24.32 --- C:\Documents and Settings\LocalService\Local Settings\Application Data DB Check 12:34:24.32 --- C:\Documents and Settings\NetworkService\Local Settings\Application Data DB Check 12:34:24.32 --- C:\Documents and Settings\Ric\Local Settings\Application Data DB Check 12:34:24.32 --- C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data DB Check 12:34:24.32 --- C:\Documents and Settings\All Users\Start Menu\Programs DB Check 12:37:07.44 --- C:\Documents and Settings\Al.YOUR-5511792FEB\Start Menu\Programs DB Check 12:37:21.21 --- Tasks DB Check 12:37:28.65 --- Tasks2 DB Check 12:37:33.55 --- Documents DB Check 12:38:04.27 --- Documents2 DB Check 12:38:12.11 --- C:\Documents and Settings\AL914F~1.YOU\Application Data\Mozilla\Firefox\Profiles\ahl85p3s.default DB Check 12:38:15.46 --- C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\qhtum3h7.default DB Check 12:38:15.46 --- C:\Documents and Settings\All Users\Desktop DB Check 12:38:25.60 --- C:\Documents and Settings\Al.YOUR-5511792FEB\Desktop DB Check 12:38:30.82 --- Services DB Check 12:38:48.52 --- FF prefs.js DB Check 12:40:33.07 --- Emptyclsid 12:43:00.30 --- Del by CLSID 12:43:26.33 --- Installed Programs 12:57:02.94 --- Processes 12:57:47.72 --- Delete Services 12:57:49.38 --- Firefox Fix 12:58:30.08 --- Delete files\folders 12:59:02.33 --- Create Backups 12:59:02.88 --- System Specs 13:01:49.65 --- Recently Created 13:02:11.19 --- StartUp Information 13:08:09.93 --- Firefox Extensions 13:10:12.47 --- Firefox Plugins 13:10:16.43 --- Create Backups 13:24:20.94 --- Chrome Look 13:25:51.43 --- Create Backups 13:27:56.82 --- Chrome Fix 13:27:59.58 --- IEdefaults 13:27:59.93 --- Reset Chrome 13:28:34.26 --- Del by CLSID 13:28:37.49 --- Del from Uninstall List 13:34:42.24 --- msconfig check 13:43:52.97 --- Deleting Registry Keys 13:44:12.68 --- HiJackThis 13:44:12.85 --- Sysinternals Autoruns 13:45:23.55 --- Empty IE Cache 13:46:12.26 --- Empty FF Cache 13:48:27.38 --- Empty CHR Cache 13:48:31.51 --- Empty Flash Cache 13:48:35.15 --- Empty Java Cache 13:48:40.77 --- C:\zoek_backups Content 13:48:46.69 --- Empty Temp 13:48:56.22 --- Ask for Reboot 13:49:03.54 I was not asked for reboot ,have now done it.

Thanks for this, here is the log: Zoek.exe v5.0.0.0 Updated 19-February-2014Tool run by Al on 25/02/2014 at 12:11:01.47.Microsoft Windows XP Home Edition 5.1.2600 Service Pack 3 x86Running in: Normal Mode Internet Access DetectedLaunched: C:\Documents and Settings\Al.YOUR-5511792FEB\Desktop\zoek.exe [scan all users] [script inserted] ===== Runcheck 12:17:09.08 ===== --- Create Environment Variables 12:17:15.51 --- Create System Restore Point 12:17:33.66 --- Checking Input 12:17:51.65 --- AU AppData Check 12:18:03.58 --- Remove From Windows Installer 12:18:12.97 --- IE Startpage Check 12:26:00.99 --- Program Files DB Check 12:28:32.65 --- C:\Documents and Settings\Administrator\Application Data DB Check 12:29:46.35 --- C:\Documents and Settings\Al\Application Data DB Check 12:29:46.35 --- C:\Documents and Settings\Al.YOUR-5511792FEB\Application Data DB Check 12:29:46.35 --- C:\Documents and Settings\Default User\Application Data DB Check 12:29:46.35 --- C:\Documents and Settings\Guest\Application Data DB Check 12:29:46.35 --- C:\Documents and Settings\LocalService\Application Data DB Check 12:29:46.35 --- C:\Documents and Settings\NetworkService\Application Data DB Check 12:29:46.35 --- C:\Documents and Settings\Ric\Application Data DB Check 12:29:46.35 --- C:\WINDOWS\system32\config\systemprofile\Application Data DB Check 12:29:46.35 --- C:\Documents and Settings\Al.YOUR-5511792FEB DB Check 12:33:53.07 --- C:\DOCUME~1\ALLUSE~1\APPLIC~1 DB Check 12:34:21.79 --- C:\Documents and Settings\Administrator\Local Settings\Application Data DB Check 12:34:24.32 --- C:\Documents and Settings\Al\Local Settings\Application Data DB Check 12:34:24.32 --- C:\Documents and Settings\Al.YOUR-5511792FEB\Local Settings\Application Data DB Check 12:34:24.32 --- C:\Documents and Settings\Default User\Local Settings\Application Data DB Check 12:34:24.32 --- C:\Documents and Settings\Guest\Local Settings\Application Data DB Check 12:34:24.32 --- C:\Documents and Settings\LocalService\Local Settings\Application Data DB Check 12:34:24.32 --- C:\Documents and Settings\NetworkService\Local Settings\Application Data DB Check 12:34:24.32 --- C:\Documents and Settings\Ric\Local Settings\Application Data DB Check 12:34:24.32 --- C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data DB Check 12:34:24.32 --- C:\Documents and Settings\All Users\Start Menu\Programs DB Check 12:37:07.44 --- C:\Documents and Settings\Al.YOUR-5511792FEB\Start Menu\Programs DB Check 12:37:21.21 --- Tasks DB Check 12:37:28.65 --- Tasks2 DB Check 12:37:33.55 --- Documents DB Check 12:38:04.27 --- Documents2 DB Check 12:38:12.11 --- C:\Documents and Settings\AL914F~1.YOU\Application Data\Mozilla\Firefox\Profiles\ahl85p3s.default DB Check 12:38:15.46 --- C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\qhtum3h7.default DB Check 12:38:15.46 --- C:\Documents and Settings\All Users\Desktop DB Check 12:38:25.60 --- C:\Documents and Settings\Al.YOUR-5511792FEB\Desktop DB Check 12:38:30.82 --- Services DB Check 12:38:48.52 --- FF prefs.js DB Check 12:40:33.07 --- Emptyclsid 12:43:00.30 --- Del by CLSID 12:43:26.33 --- Installed Programs 12:57:02.94 --- Processes 12:57:47.72 --- Delete Services 12:57:49.38 --- Firefox Fix 12:58:30.08 --- Delete files\folders 12:59:02.33 --- Create Backups 12:59:02.88 --- System Specs 13:01:49.65 --- Recently Created 13:02:11.19 --- StartUp Information 13:08:09.93 --- Firefox Extensions 13:10:12.47 Gerry

Thanks, I think that you have cured the original problem; over the last couple of days I have had no further problem with the invader. However, has mentioned in post 35, my computer is running very much more slowly for most functions. When using Google chrome the pages quickly become unresponsive. Do you think that is anything to do with the various processes please?

All seemed fine until I opened the browser in guest user when myspeeddialler appeared in the address bar again. This does not happen in administrator mode.[ post 19]. Also the computer appears to be running more slowly than it did after using OTM.