Member Panel

tblaine · 07:49 PM

I used to have a quite decent transfer speed between my hard drive and DVD drive and could back-up a DVD in about 25 minutes. I then installed Easy CD and DVD creator which installed a CD-ROM emulator and now it takes up to an hour or more to back up my DVDs. I have uninstalled Roxio's software but the emulator is still there. No matter how many times I remove it upon rebooting it reappears. Can anyone help? This is a copy of the Hijackthis log

joe5 · 07:50 PM

Hya Tblaine , welcome to PCHF.

I dont see anything related to an emulator in there , but i do see severall malware problems in there. Lets get rid of those first.

Go to add/remove programs and uninstall SKIn2000 if present. If not then Navigate to C:\Program Files\SKIn2000 and double-click uninst.exe.

Disable the windows messenger service:

Please download Shoot The Messenger

Download and run the small (22 kbyte) "ShootTheMessenger.exe" utility. It will display the current status of your system's Messenger Service. The button near the bottom of its window will allow you to set the service to whichever state — running or disabled — that you desire.

If, for any reason, you should ever choose to re-enable the Windows Messenger Service, simply re-run ShootTheMessenger to do so.

Then boot in safemode (hit f8 when booting up) and fix these with hjt:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,,powexch .exe
O4 - HKLM\..\Run: [WIN95DEFVIEW] C:\WINDOWS\system32\csmrs.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE

And manually delete the file in bold.

Also it seems you have no firewall , have a look in our download section for some free ones.

And i see you have Messenger plus installed , that often comes with an LOP infection. To check that please follow the instructions here for Ewido:

http://www.pchelpforum.com/118557-post2.html

When done please post the Ewido log , and a new hjt log.

tblaine

Joe5, thanks for the welcome. I am sorry if I posted this in the wrong thread originally.

Go to add/remove programs and uninstall SKIn2000 if present. If not then Navigate to C:\Program Files\SKIn2000 and double-click uninst.exe.

I removed SKIN2000 the same day I installed it, although I did have to manually remove the directory.

Disable the windows messenger service:

Also it seems you have no firewall

I will disable the messenger service this evening, and I have no firewall as this system is never on the Internet or my home network.

I will run Ewido tonight and remove

O4 - HKLM\..\Run: [WIN95DEFVIEW] C:\WINDOWS\system32\csmrs.exe

tonight and post another reply tomorrow.

Though back to the original problem, the only change in my system has been the installation of Roxio's software and subsequent removal, though the SCSI controller and CD-ROM emulator in Device Manager refuses to be removed and reappears upon every reboot.

tblaine

Here is the new HijackThis log and Ewido scan. I ran ShootTheMessenger and have disabled it. Any help you can give would be greatly appreciated.

Thanks, Tim

joe5

I see you only removed the one entry with hjt , please run hjt again and fix these 3 aswell:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,,powexch .exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE

There was one entry in bold , because that file had to be manually deleted from youre pc. But all entrys have to be fixed with hjt.

When done , post a new hjt log please.

tblaine

Here is the new Hijackthis Log

joe5

Looks great to me

, its all gone.

Do you still have any problems with youre pc?

Member Panel

Sponsors and Ads

Noticeboard