Computer not responding

[tom982]

Copy and past the following into the custom scans/fixes box in OTL, then press run fix:

:OTL
IE - HKCU\..\URLSearchHook: {1E315374-71A5-471A-B683-4C4ADB5C588B} - Reg Error: Key error. File not found
O2 - BHO: (SMTTB2009 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - Reg Error: Value error. File not found
O3 - HKLM\..\Toolbar: (HyperCam Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - Reg Error: Value error. File not found
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: 111222.cn ([list1] http in Trusted sites)
O15 - HKCU\..Trusted Domains: pps.tv ([kan] http in Trusted sites)
O15 - HKCU\..Trusted Domains: pps.tv ([list1] http in Trusted sites)
O15 - HKCU\..Trusted Domains: pps.tv ([tvguide] http in Trusted sites)
O15 - HKCU\..Trusted Domains: pps.tv ([vodguide] http in Trusted sites)
O15 - HKCU\..Trusted Domains: ppstream.com ([list1] http in Trusted sites)
O15 - HKCU\..Trusted Domains: ppstream.com ([notice] http in Trusted sites)
O15 - HKCU\..Trusted Domains: ppstream.com ([xml1] http in Trusted sites)
O15 - HKCU\..Trusted Domains: ppstream.com ([xml2] http in Trusted sites)
O15 - HKCU\..Trusted Domains: ppstream.com ([xml3] http in Trusted sites)
O15 - HKCU\..Trusted Domains: ppstream.net ([list1] http in Trusted sites)
O15 - HKCU\..Trusted Domains: ppstv.com ([list1] http in Trusted sites)
O15 - HKCU\..Trusted Domains: ppstv.net ([list1] http in Trusted sites)
O15 - HKCU\..Trusted Domains: security_PPStream.exe ([]about in Trusted sites)
O15 - HKCU\..Trusted Ranges: Range1 ([http] in Local intranet)

:Files
C:\Users\Alex Liu\AppData\Local\5tp0jtoe6u6hrfanp5a74iam6f2067y4l/D
C:\ProgramData\5tp0jtoe6u6hrfanp5a74iam6f2067y4l /D
C:\Windows\KMService.exe /D
ipconfig /flushdns /c

:Commands
[purity]
[resethosts]
[emptytemp]
[emptyflash]
[Reboot]

A log should open upon completion, I need the contents of this log AND a fresh OTL log please

Tom

P.S. Your KMService is now gone

 

[poolwizard]

i tried opening OTL after running the fix, and this came up.


[EMPTYTEMP]

User: Alex Liu
->Temp folder emptied: 39953770 bytes
->Temporary Internet Files folder emptied: 394642 bytes
->Java cache emptied: 69288628 bytes
->FireFox cache emptied: 41785394 bytes
->Flash cache emptied: 1242 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32768 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2176609 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 147.00 mb


[EMPTYFLASH]

User: Alex Liu
->Flash cache emptied: 0 bytes

User: All Users

User: Default

User: Default User

User: Public

User: UpdatusUser

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.26.1 log created on 08032011_182906

Files\Folders moved on Reboot...
File\Folder C:\Users\Alex Liu\AppData\Local\Temp\OICE_E1E6FB77-5DC3-42CD-BDEC-720B81E522F2.0\9CE80093. not found!

Registry entries deleted on Reboot...



i will now try scan again.

 

[poolwizard]

here you go

 

[tom982]

Copy and paste the following in to the OTL custom scans/fixes box and press Run Fix:

:OTL
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - No CLSID value found.
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found

:FILES
C:\Users\Alex Liu\AppData\Local\5tp0jtoe6u6hrfanp5a74iam6f2067y4l /D

A log will open upon completion, copy and paste its contents into your next post

 

[poolwizard]

Copy and paste the following in to the OTL custom scans/fixes box and press Run Fix:

:OTL
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - No CLSID value found.
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found

:FILES
C:\Users\Alex Liu\AppData\Local\5tp0jtoe6u6hrfanp5a74iam6f2067y4l /D

A log will open upon completion, copy and paste its contents into your next post

========== OTL ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{338B4DFE-2E2C-4338-9E41-E176D497299E} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{338B4DFE-2E2C-4338-9E41-E176D497299E}\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\\BootExecute:autocheck autochk * deleted successfully.
========== FILES ==========
C:\Users\Alex Liu\AppData\Local\5tp0jtoe6u6hrfanp5a74iam6f2067y4l deleted successfully.

OTL by OldTimer - Version 3.2.26.1 log created on 08032011_185308

 

[tom982]

One last scan, just to make sure you're all good to go again:

Malwarebytes Anti-Malware

Download and install MBAM from here
Run a full scan and attach the log with your next post for me to analyse

Tom

 

[tom982]

Can you do the same procedure for making the fix.bat, but this time I want you to do it with this text:

sc delete "Norton Internet Security"

Tom

 

[poolwizard]

ok, done the norton thing, now running the full scan, after, i'll get off safe mode and see if i can actually go on the computer without any problems

 

[tom982]

You are using an outdated version of Java, you need to remove ALL older versions by using this tutorial:

How do I uninstall Java on my Windows computer ?

Then install the latest version from this link:

http://javadl.sun.com/webapps/download/AutoDL?BundleId=49024

Tom

 

[poolwizard]

i cant uninstall programs in safe mode.. and it's still frozen when i load onto the desktop, i have to go now, so i may not reply for 1-3 hours, sorry about this. the log for malwarebytes was clean, i have no infected files, want me to attach it anyway?

 

[tom982]

i cant uninstall programs in safe mode.. and it's still frozen when i load onto the desktop, i have to go now, so i may not reply for 1-3 hours, sorry about this. the log for malwarebytes was clean, i have no infected files, want me to attach it anyway?

Just remember to do it when we get you up and running again

That's fine, I understand that people have other time commitments

Nope, there's no point, you've told me all I need to know

Have you got a Vista installation DVD?

Tom

 

[poolwizard]

no, i don't think i was given a Vista installation CD when i purchased my computer, if i was, i must have lost it since i've looked everywhere, and can't find it :@

 

[tom982]

Okay, not to worry. Can you please explain any current problems that you have?

Tom

 

[poolwizard]

Okay, not to worry. Can you please explain any current problems that you have?

Tom

ok, on my computer, when i start it up, when it gets to the vista welcome screen, it takes several seconds, maybe as long as 20 seconds to get to the desktop, whereas before it loaded in 1-3 seconds onto my desktop. Then my desktop is completely empty, with a black wallpaper, and then takes another few seconds to load my wallpaper and icons, e.g. My Computer, CCleaner.. Then when everything is loaded, the computer seems to freeze momentarily, where i can only press the vista button on the bottom left and open My Computer. trying to open the Mozilla Firefox doesn't work, and my internet connection has a red X on it, (on the bottom right of the screen) and well as nothing loading there. e.g. avast antivirus etc..., only my safely remove hardware thing is there, then thats it, my computer is frozen after a few minutes.

 

[tom982]

Have you tried this previously suggested idea?

http://www.vistax64.com/general-discussion/291441-computer-not-responding.html#post1340324

And do this:

SFC Scan

1. Open the start menu
2. In the search box, type cmd
3. Right click on cmd and select Run as administrator
4. In command prompt, type:

sfc /scannow

5. Let it run and let me know if it finds any Integrity Violations

Tom

 

[poolwizard]

the first tip seemed to work... for now, i scan it tommorow.

 

[tom982]

Well in that case, thank you Rich

That's great news! What was the culprit?

Tom