Total computer mess-please help

ampersand

Gosh, I'm overwhelmed by all these replies. Thankyou, each and everyone of you for taking the time to respond.
I am now going to take action on each as suggested. then post update.

Thankyou all again{btw, have now watched Great British Bake-Off, which began these shenanigans :-)]

ampersand

Right - this is this morning's version of the hijack thing:
[although at first I kept hitting the link because nothing was happening as prev. Then I saw tabs lining up along the bottom of the screen, but at no time can I get a proper window. Anyway, I've managed at last.
#################
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:03:30, on 30/09/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Google\Update\1.3.21.69\GoogleCrashHandler.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\PROGRA~1\TELEVI~2\bar\1.bin\64brmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\APPS\skype\Phone\Skype.exe
C:\Program Files\BBC iPlayer Desktop\BBC iPlayer Desktop.exe
\Documents and Settings\Hansen\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
\Documents and Settings\Hansen\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
\Documents and Settings\Hansen\My Documents\Downloads\HijackThis (6).exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com/?ctid=CT2769726
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
R3 - URLSearchHook: SearchElf 1.2 Toolbar - {f4e6547e-325b-403c-a3bb-ad29ed37a92f} - C:\Program Files\SearchElf_1.2\prxtbSea2.dll (file missing)
R3 - URLSearchHook: (no name) - {0696f815-a3a9-490a-bb14-9ec3350b1276} - C:\Program Files\TelevisionFanatic\bar\1.bin\64SrcAs.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: Search Assistant BHO - {5d79f641-c168-40df-a32f-bacea7509e75} - C:\Program Files\TelevisionFanatic\bar\1.bin\64SrcAs.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll
O2 - BHO: Toolbar BHO - {cb41fc95-f1b3-4797-8bb6-1012ff62abba} - C:\PROGRA~1\TELEVI~2\bar\1.bin\64bar.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: ChromeFrame BHO - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files\Google\Chrome Frame\Application\15.0.874.54\npchrome_frame.dll
O2 - BHO: SearchElf 1.2 - {f4e6547e-325b-403c-a3bb-ad29ed37a92f} - C:\Program Files\SearchElf_1.2\prxtbSea2.dll (file missing)
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: Sammsoft Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: SearchElf 1.2 Toolbar - {f4e6547e-325b-403c-a3bb-ad29ed37a92f} - C:\Program Files\SearchElf_1.2\prxtbSea2.dll (file missing)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: TelevisionFanatic - {c98d5b61-b0ea-4d48-9839-1079d352d880} - C:\Program Files\TelevisionFanatic\bar\1.bin\64bar.dll
O4 - HKLM\..\Run: [EPSON Stylus Photo RX430 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CP.EXE /P31 "EPSON Stylus Photo RX430 Series" /O5 "LPT1:" /M "Stylus Photo RX430"
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P31 "EPSON Stylus Photo RX420 Series" /O6 "USB001" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [TelevisionFanatic Browser Plugin Loader] C:\PROGRA~1\TELEVI~2\bar\1.bin\64brmon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\APPS\skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Google Update] "D:\Documents and Settings\Hansen\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: BBC iPlayer Desktop.lnk = C:\Program Files\BBC iPlayer Desktop\BBC iPlayer Desktop.exe
O8 - Extra context menu item: &Search - http://tbedits.televisionfanatic.com/one-toolbaredits/menusearch.jhtml?s=100000415&p=XPxdm017YYgb&si=CLvr1sm-mKsCFbEntAodaFNduA&a=9FAF3181-4D12-4F06-A257-4FEEA327419B&n=2011091216
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\uk.htm
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1255525128906
O16 - DPF: {BF6BBE9A-0656-4598-A0CD-32DAC03959B5} (Image Uploader 3.0 Control) - http://www.tescophoto.com/wpp/tesco/app/opcuploader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0BB0D0FE-E799-4ECD-9887-71CB41856E55}: NameServer = 212.139.132.42 212.139.132.41
O18 - Protocol: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files\Google\Chrome Frame\Application\15.0.874.54\npchrome_frame.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Google Update Service (gupdate1c96c41517b9f20) (gupdate1c96c41517b9f20) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: TelevisionFanaticService - COMPANYVERS_NAME - C:\PROGRA~1\TELEVI~2\bar\1.bin\64barsvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
O24 - Desktop Component 0: (no name) - http://sg.royalmail.com/images/pricingcalc/rm/man_walking.gif
O24 - Desktop Component 1: (no name) - http://www.lidl.co.uk/C1256C790050C7BC/files/SYS/$file/bg_reiternavibw2.gif
O24 - Desktop Component 2: (no name) - http://www.speedferries.com/speed_images/070307/middle_promo.gif
O24 - Desktop Component 3: (no name) - http://www.where2search.co.uk/images/bak2.gif
O24 - Desktop Component 4: (no name) - http://www.speedferries.com/speed_images/bg_all.jpg

--
End of file - 13005 bytes

##############
I notice those speedferries mentions near the end. Why are they there? I used to use Speedferries by choice all the time, but they went belly-up several years ago.

ampersand

closed wrote: »

having trouble understanding what the problem is.

post a fresh hijackthis log if you want help with the speed.

if things aren't right with chrome, reinstall it - but it will use more ram than ie

router/modem - is the box between pc and the net.

###########
Sorry to pain you with further idiocy, but [a] don't know whether or not things are 'right' with chrome, as I don't known how to tell.
re:router/modem - is the box between pc and the net I will google 'show me a router' and 'show me a modem' to answer.

Another thing that is a 'loss' for me is in typing this. Where I have wished to italicise and red-type your quoted words, it does not happen instantly as previously. merely adds bracketed instructions for each change. This does not allow me to see if it's the effect I seek instantly.
Secondly, I was always able to select a phrase and it would appear above in the google toolbar, all ready for me to hit Enter, or the adjacent arrow, to effect a Search. I don't have any search or toolbars now, with this format.
It a feels and looks big, clunky, clumsy.

ampersand

Well, that's infuriating.

I just typed a long post, only for it to disappear, and without any toolbars now, I can't find where I was or refresh anything.

I googled 'router' and 'modem' images, but the pictures which came up are unlike anything I have.

I had written that i have no way of knowing whether not google chrome is running correctly. If it is responsible for this slight fuzziness greyscale type and enlarged tabs at bottom of screen, I don't like it. Even the time/date thing on the lower rhc, isn't as before. It now adds 'Friday' and, as prev. stated, the zoom % has gone, which was useful.

This is what I have-

LCD monitor
Wired keyboard
Logitech wirelsss mouse, whose green light sometimes changes to red, or goes off entirely - to me, this is random.
Tesco ARC410 'phone.
Big box below at right knee. I upload pix from this and have used discs to install things[rare]. I haven't got round to using it for dvd's or cds, but suppose this is what I would use.
Speedtouch 330 black box with 2 wires leading[lhs]to a small white Speedtouch ADSL filter and [rhs]to back of big black box, where it plugs in[is this called USB, small rectangular plug?] When all is working, this Speedtouch 330 box has 2 green lights showing continuously. It measures W7cm x L11cm x maxH2cm[curves slightly down at green lights front end].
Because i have skype I have a pair of decent logitech speakers and a logitech sphere/wand camera.

Everything used to be fine if increasingly slow[and I had been away since July],
so resolved to seek a speed-up solution, when the i-player problem arose.

I would like to have IE properly back, with the google toolbar below as a 1st search resource. I also had the green pair of Refresh arrows, which I used in that IE top line. I had a slender lower screen line, containing Start, quick google search bar. turbolister all lower left. Lower right were speedtouch connection double monitor logo, skype, i-player and a few other things, esp, the 100/125/150% thing, time. This lower line is now 1cm high, prev 50mm. On the right, the line of symbols now includes ATI which cursor causes to reveal screen details.

Gunjack - I followed your tips and my screen resolution and colours are spot on and were never altered by me.

That's all, full circle.
###########
The only other annoyance started about a year ago, when I'd find my keyboard light didn't always come on. When I checked the troubleshooter for it, it said to unplug and replug the lead at the back of the black box, before retrying. It's the lead which has a slightly rounded lilac end and I now do this as a matter of course, before switching on.
It does the trick.
To not do so results in fury at time lost, when it takes so long to start up.

rmg1

I'm not as techie as some, but you seems to have a lot of stuff running at startup (Skype, MSN, QuickTime, Adobe (which is also out of date), etc).
Do you really need all of these running when the computer first boots?
If not, switch them off (and update the Adobe reader to the latest version).

Have you tried changing the batteries in the wireless keyboard/mouse?

santer_2

See what start up lite says

http://www.malwarebytes.org/products/startuplite

ampersand

Dear santer, thankyou again.

I have clicked your link and all that happens is a small msg along that 1cm thick lower line saying This type of file can harm your computer etc.etc.,with Keep/Discard options. Why won't it just open in a normal window? Apart from this, when I hit keep, nothing happens.

rmg1 - I don't even know what quicktime is. As for the others, I thought they just came on automatically. Occasional msgs pop up telling me to update adobe, which i thought i had, to 10.3{as per earlier i-player query posts] I don't really even know what adobe does. How do I sort this please?

santer_2

Maybe we can sneak it on

https://www.yousendit.com/dl?phi_action=app/orchestrateDownload&rurl=https%253A%252F%252Fwww.yousendit.com%252Ftransfer.php%253Faction%253Dbatch_download%2526send_id%253D1240877912%2526email%253Ddc08debb65acbcf2d1b504947a53a3da&s=19105&cid=tx-02002208350200000000

Click to download and then unzip it, then hopefully it will run

You can use this if you do not have anything to unzip it

http://www.7-zip.org/download.html

32-bit x86 7-Zip for 32-bit Windows

ampersand

Thankyou again santer - I now have a box with 3 things listed[but annoyingly cannot keep it on here to copy for you, so have to flit back and forth. This is such a stupid way to be operating]
QuickTime Task, CTFMON.EXE, swg - there's a brief description of function below each, then alongside 3 further box options: disable/remove/no action.

All are ticked for Remove. There's a Continue box next, but i won't do anything until you tell me.

santer_2

Choose disable, then you can undo it, you may then need to restart the PC to notice anything