HELP PLEASE - PC problems

ksh123

aliEnRIK wrote: »

Cr*p
I wasnt expecting a 64 bit log - theyre near impossible to work through

May as well check for infection whilst I get to it (im busy cleaning up turkey blood out of my toolbox! - shes officially dead when she gets in from work)

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM QUICK SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds
If anything was found then do the exact same but run a FULL scan

Here it is, nothing found, :T
Malwarebytes' Anti-Malware 1.50.1.1100
https://www.malwarebytes.org

Database version: 5405

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18999

28/12/2010 01:27:59
mbam-log-2010-12-28 (01-27-59).txt

Scan type: Quick scan
Objects scanned: 151915
Time elapsed: 6 minute(s), 9 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

ksh123

aliEnRIK wrote: »

Id say this is the problem -
AVG\AVG PC Tuneup 2011\BoostSpeed.exe

I await the malwarebytes log

Sorry I am making you work so hard :embarasse although getting turkey blood out of your toolbox can't be much fun either. I really don't want to think about how it got there ........
C:\Program Files (x86)\AVG\AVG PC Tuneup 2011\BoostSpeed.exe is listed on the copied log under "running processes" but on the log on the actual program "running processes" are not shown. And this file is nowhere else to be seen. I've sent myself blind going through it umpteen times and it is definitely not there.:question::question::question:

I did uninstall AVG tho, at the beginning of all this process before I installed Avast.

ksh123

closed wrote: »

also uninstall rapport

F2 - REG:system.ini: UserInit=userinit.exe looks unusual, maybe a 64bit hjt anomaly, have you had an infection in the past?

Hi Can you tell me why I need to uninstall Rapport? Its a propgram linked to my bank and seems quite useful.

Yes there was an infection in the distant past, maybe a year or so ago. My darling daughter accidentally visited some very iffy sites.
So is this one: F2 -Reg.... ok to leave where it is?

ksh123

aliEnRIK: on the hijackthis log some items are highlighted in blue. Are these things I need to fix?

thanks again,,,,

aliEnRIK

ksh123 wrote: »

aliEnRIK: on the hijackthis log some items are highlighted in blue. Are these things I need to fix?

thanks again,,,,

No, you must NOT fix things without being asked to

aliEnRIK

Open malwarebytes
Goto MORE TOOLS
then RUN TOOL
Manually destroy the file -
C:\Program Files (x86)\AVG\AVG PC Tuneup 2011\BoostSpeed.exe

aliEnRIK

ksh123 wrote: »

Hi Can you tell me why I need to uninstall Rapport? Its a propgram linked to my bank and seems quite useful.

Rapport seems to randomly slow computers down
personally I wouldnt touch it with a bargepole

ksh123

aliEnRIK wrote: »

Open malwarebytes
Goto MORE TOOLS
then RUN TOOL
Manually destroy the file -
C:\Program Files (x86)\AVG\AVG PC Tuneup 2011\BoostSpeed.exe

iTS GONE - thanks

ksh123

What shall I do about :F2 - REG:system.ini: UserInit=userinit.exe l chop or not chop?

ksh123

aliEnRIK wrote: »

Rapport seems to randomly slow computers down
personally I wouldnt touch it with a bargepole

am in process of trying to get rid of rapprt however trustee techs insisting on doing tests abd seeing if they can stop it interfering with browser etc.....


thanks so much for all your help. things seem to be going more smoothly now tho its difficult to understand what was going wrong