My whole computer moving chopy,video and audio also is choppy?

[Reezy]

The problem started out of nowhere.I have windows xp and I noticed that my whole computer is been running kinda choppy.I noticed when I play audio files the audio is choppy and skipping words.same thing when I play videos,i can barely hear anything.
This problem just happened outta nowhere.my computer is also movin slower,but surprisingly my internet is still moving fast with no problem(i have a cable modem).
I scanned my computer with avira antivir spybot and ad-aware.it found problems,got rid of them but Im still having the same problems with my computer.my mouse pointer is also moving very choppy
Does anybody have any idea whats wrong with my computer?Does anybody have any suggestions for me?

[Evans]

Download HiJackThis, put it in a folder on your desktop, then run it and paste the log file in your next post. Can also attach the text file, too.

http://www.merijn.org/files/HiJackThis_v2.exe

[Reezy]

aight,I attached the file.please reply when you get a chance

[Evans]

Do you have Norton antivirus AND Antivir running together?

Anyway, I didn't see anything overly important, but you can always remove the lines that contain (no file) at the end.

O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
O2 - BHO: (no name) - {33E6D540-1486-3255-A338-6AE33798ADED} - (no file)
O2 - BHO: (no name) - {F4002052-AB29-4B33-8C8D-0E99084564EC} - (no file)
O3 - Toolbar: (no name) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - (no file)

[skullpoker]

You sound like you already know most of what is in Panda Mans Maintenance Guide( first sticky in this forum) so I won't refer you to that. Since I really have nothing to add, Adios.

[Panda Man]

Ok first off, download and run these(if this is XP, use both. If its Vista, ONLY the first one)

Baku - http://www.softpedia.com/progDownloa...oad-61169.html

RegscrubXP - http://www.majorgeeks.com/download.php?det=2048

Also, toss norton using this tool, its just a resource hog

http://service1.symantec.com/SUPPORT...05033108162039

Now open msconfig (start > Run > "cmd" ), go to the startup tab and disable the following, they're just taking up resources and are not needed:

TkBellExe - realsched.exe

SunJavaUpdateSched - jusched.exe

SiS Windows KeyHook - keyhook.exe

YSearchProtection - SearchProtection.exe

Anything else you think you don't need, disable it. You can always re-enable it Ok, now reboot and see if its any faster. Also, delete what evans said, and also remove the proxy unless you REALLY need it

Download Links:
Links are hidden from guests. Please register to be able to view these links. And what is crawler search? if you don't know, I'd remove it, its just an extra menu item anyways.

Download Links:
Links are hidden from guests. Please register to be able to view these links. Also, this looks kind of suspicious. If you know who worldwinner is and trust them, leave this here. else, remove it.

Download Links:
Links are hidden from guests. Please register to be able to view these links. Ok, reboot again and post another hijackthis log after all that, and we'll see what polobunnez says

EDIT - Also, defrag just for good measure. I recommend downloading and running this -

http://www.softpedia.com/get/System/...agmenter.shtml

Run Power Defragmenter GUI in the power defrag mode on all you hard drives

[maca]

The problem is

O20 - Winlogon Notify: rqrqqom - C:\WINDOWS\

It shows you have some kind of trojan in your windows folder.

You should run Panda's online scan, so you can see for sure what's on your system and save the report, which you should post here or at a dedicated spyware forum, along with a new hijackthis log.
http://www.pandasecurity.com/homeuse...ns/activescan/

Before you run that online scan, it's best to install CCleaner and use it to clean your temp files to cut down what Panda's scan finds.

[Reezy]

Do you have Norton antivirus AND Antivir running together?

Anyway, I didn't see anything overly important, but you can always remove the lines that contain (no file) at the end.

O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - (no file)
O2 - BHO: (no name) - {33E6D540-1486-3255-A338-6AE33798ADED} - (no file)
O2 - BHO: (no name) - {F4002052-AB29-4B33-8C8D-0E99084564EC} - (no file)
O3 - Toolbar: (no name) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - (no file)

I checked those boxes and click fix checked.I think they are gone now but Im not too sure.my computer is still running funny though,still having the same problems.I do have avira antivirus and norton on my computer but I cut norton's auto protection off.I ketp it just in case antivir wasnt as good,since I heard that norton is one of the best.

Ok first off, download and run these(if this is XP, use both. If its Vista, ONLY the first one)

Baku - http://www.softpedia.com/progDownloa...oad-61169.html

RegscrubXP - http://www.majorgeeks.com/download.php?det=2048

Also, toss norton using this tool, its just a resource hog

http://service1.symantec.com/SUPPORT...05033108162039

Now open msconfig (start > Run > "cmd" ), go to the startup tab and disable the following, they're just taking up resources and are not needed:

TkBellExe - realsched.exe

SunJavaUpdateSched - jusched.exe

SiS Windows KeyHook - keyhook.exe

YSearchProtection - SearchProtection.exe

Anything else you think you don't need, disable it. You can always re-enable it Ok, now reboot and see if its any faster. Also, delete what evans said, and also remove the proxy unless you REALLY need it

Download Links:
Links are hidden from guests. Please register to be able to view these links. And what is crawler search? if you don't know, I'd remove it, its just an extra menu item anyways.

Download Links:
Links are hidden from guests. Please register to be able to view these links. Also, this looks kind of suspicious. If you know who worldwinner is and trust them, leave this here. else, remove it.

Download Links:
Links are hidden from guests. Please register to be able to view these links. Ok, reboot again and post another hijackthis log after all that, and we'll see what polobunnez says

EDIT - Also, defrag just for good measure. I recommend downloading and running this -

http://www.softpedia.com/get/System/...agmenter.shtml

Run Power Defragmenter GUI in the power defrag mode on all you hard drives

I downloaded Baku but when I tried to run it,it said that it can only run if i have the requirements which is .Net framework version 2.0.50727.it prompts me to install it but I dont know what it is so I left it alone.another question,
how do i get rid of the files you was talkin about: Download Links:
Links are hidden from guests. Please register to be able to view these links. Download Links:
Links are hidden from guests. Please register to be able to view these links. and Download Links:
Links are hidden from guests. Please register to be able to view these links. I have no idea what these files is myself lol.I also been trying to figure out what crawler search is.where do I go or which folder do I go to,to delete these?

The problem is

O20 - Winlogon Notify: rqrqqom - C:\WINDOWS\

It shows you have some kind of trojan in your windows folder.

You should run Panda's online scan, so you can see for sure what's on your system and save the report, which you should post here or at a dedicated spyware forum, along with a new hijackthis log.
http://www.pandasecurity.com/homeuse...ns/activescan/

Before you run that online scan, it's best to install CCleaner and use it to clean your temp files to cut down what Panda's scan finds.

I had a feeling it was some kind of trojan messing up my computer.I already have CCleaner though.when I use ccleaner should I check all the boxes that it has?how do I get rid of that trojan you are talkin about?I'm bout to try and run that panda onlinescan and the power defragment and see what happens.I posted my new hijack log too.
So what should I do next yall?

[Evans]

To delete the entries Panda Man mentioned, you do it with HiJackThis. Run a scan, tick the boxes, and select "fix checked items", or whatever it says on the button.

NEVER use two antiviruses at the same time. Either use Norton or Antivir. As far as I'm concerned, Norton's shit. If you wanna get rid of it, use the tool Panda linked you to.

Tick and remove:
R3 - URLSearchHook: (no name) - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - (no file)
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Administrator\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)

When did this start happening, btw?

EDIT: You didn't disable Norton auto protection:
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe

[Reezy]

To delete the entries Panda Man mentioned, you do it with HiJackThis. Run a scan, tick the boxes, and select "fix checked items", or whatever it says on the button.

NEVER use two antiviruses at the same time. Either use Norton or Antivir. As far as I'm concerned, Norton's shit. If you wanna get rid of it, use the tool Panda linked you to.

Tick and remove:
R3 - URLSearchHook: (no name) - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - (no file)
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Administrator\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)

When did this start happening, btw?

I tried running the panda activescan multiple times and after it finish and it gave me an error message saying:
Possible causes of this error are:

Not allowing the application's ActiveX control to be downloaded.

Problems with the Internet connection.

The error could be due to a download error or an installation error due to lack of hard disk space, privileges etc.,...

when it prompted me to install the activex controls antivirus guard came up saying a virus or unwanted program.here;s what the antivir said:Virus or unwanted program 'W95/Blumblebee.1738 [W95/Blumblebee.1738]'
detected in file 'C: \WINDOWS\system32\ActiveScan\SET2B.tmp.
Action performed: Deny access

I denied that because I aint know what it was.what should I do now?I ran panda activescan on internet explorer.should I try running it on mozilla firefox?



Edit:I meant to mention another problem that I'm having.my audio has a lot of static in itwhen I watch videos or play music the audio has static along with the choppiness.

All these problems happened with my computer yesterday morning

[Evans]

W95/Blumblebee.1738 [W95/Blumblebee.1738] is a false positive. Meaning that it's a false alert. Allow it the next time you see the pop up.

Did you install anything yesterday morning? Browse a porn site? Anything?

[maca]

Download this program.

http://www.techsupportforum.com/sect...s/ComboFix.exe
Double click combofix.exe & follow the prompts.
When finished. Post that log

[Cyber Puppet]

The choppiness is probably from something hogging up you CPU. Open up the task manager and go under process, scroll down and see if anything is taking up more the 75% CPU.

If you really believe this is from a trojan or some other harmful software I suggest you get a-squared, it's free and although it take a while to scan it can find tons of things.

[Reezy]

W95/Blumblebee.1738 [W95/Blumblebee.1738] is a false positive. Meaning that it's a false alert. Allow it the next time you see the pop up.

Did you install anything yesterday morning? Browse a porn site? Anything?

lol honestly I did,the other night before yesterday morning.when I got on my computer yesterday thats when I noticed all the problems.my comp also moves slow when opening and closing applications.everytime I run panda activescan it still giving me this error:"Not allowing the application's ActiveX control to be downloaded.

Problems with the Internet connection.

The error could be due to a download error or an installation error due to lack of hard disk space, privileges etc.,... "

I tried deactivating antivir guard and it's still giving me this same message.It'll scan and after it finishes it gives me that error message I just mentioned.Another thing when I scanned my computer yesterday with antivir It found this:Found a virus or unwanted program 'TR/Crypt.ULPM.Gen' [trojan]
in file 'C:\WINDOWS\system32\O0FPtRe5.exe'.
Action taken:
The file was moved to "470c164f.qua"!

I have no idea where those files is at and im not sure if it removed the trojan,it was in the quarantine section but now its completely dissappeared.

Download this program.

http://www.techsupportforum.com/sect...s/ComboFix.exe
Double click combofix.exe & follow the prompts.
When finished. Post that log

I attached all 3 files,I wasnt sure which one u wanted me to post.

The choppiness is probably from something hogging up you CPU. Open up the task manager and go under process, scroll down and see if anything is taking up more the 75% CPU.

If you really believe this is from a trojan or some other harmful software I suggest you get a-squared, it's free and although it take a while to scan it can find tons of things.

aight if i cant get this panda activescan to work then Im try that program and see if it works or not.

Edit: Evans,I tried to get rid of that norton(O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - CProgram Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe)
from the hijack but when I scaned it again it came right back.I cant seem to get rid of it,it just keeps coming back.another thing some symantec security alert window keeps popping up now telling me virus protection is off and I cant get rid of this window either.when I click ok,the window comes right back

[maca]

Combofix deleted a lot of shit. I think that file youre talking about is still there too. Try this and then try run Panda again.

Go to Internet Options - Security - Internet, press 'default level', then
OK.
Now press "Custom Level."

In the ActiveX section, set the first two options (Download signed and
unsigned ActiveX controls) to 'prompt', and 'Initialize and Script ActiveX
controls not marked as safe" to 'disable'.