Friday, January 09, 2009   
  Search   
 
Register  Login  
Forums  
     Minimize  

Welcome to MeraWindows forums.

Thank you for being at the Microsoft Windows Community Site. You may have to register before posting in forums. It's absolutely free. After registering, you can get all the benefits available to our registered members, you can access our Downloads section, you can participate in contests, etc. You can post in forums in English as well as in Hindi, in fact we encourage you to use Hindi in your posts. If you have any problem with registration or login, please contact us.

     
  


 
  Microsoft Windows Forums  Other Windows V...  Windows XP  MyPC is dead slow .. log file here ..suggestions needed
Previous Previous
 
Next Next
New Post 3/17/2008 12:00 AM
User is offline soumya
2917 posts
feelwindows.blogspot.com/
Forum Guru








Re: MyPC is dead slow .. log file here ..suggestions needed  
Modified By soumya  on 3/17/2008 12:02:33 AM)

 Ramesh wrote

O23 - Service: FCI - Unknown owner - C:\WINDOWS\system32\fci.exe

What about it ?

I am sure it is a malware . Seema, Please update the Spybot Search and Destroy program and run a scan! Or you can delete the startup entry and the file manually

 


 
New Post 3/17/2008 12:05 AM
User is offline soumya
2917 posts
feelwindows.blogspot.com/
Forum Guru








Re: MyPC is dead slow .. log file here ..suggestions needed  

Have a look at this tutorial :-

How to remove these infections

We have finally arrived at the section you came here for. You are most likely reading this tutorial because you are infected with some sort of malware and want to remove it. With this knowledge that you are infected, it is also assumed that you examined the programs running on your computer and found one that does not look right. You did further research by checking that program against our Startup Database or by searching in Google and have learned that it is an infection and you now want to remove it.

If you have identified the particular program that is part of the malware, and you want to remove it, please follow these steps.

  1. Download and extract the Autoruns program by Sysinternals to C:\Autoruns

  2. Reboot into Safe Mode so that the malware is not started when you are doing these steps. Many malware monitor the keys that allow them to start and if they notice they have been removed, will automatically replace that startup key. For this reason booting into safe mode allows us to get past that defense in most cases.
  3. Navigate to the C:\Autoruns folder you created in Step 1 and double-click on autoruns.exe.

  4. When the program starts, click on the Options menu and enable the following options by clicking on them. This will place a checkmark next to each of these options.

    1. Include empty locations
    2. Verify Code Signatures
    3. Hide Signed Microsoft Entries
  5. Then press the F5 key on your keyboard to refresh the startups list using these new settings.
  6. The program shows information about your startup entries in 8 different tabs. For the most part, the filename you are looking for will be found under the Logon or the Services tabs, but you should check all the other tabs to make sure they are not loading elsewhere as well. Click on each tab and look through the list for the filename that you want to remove. The filename will be found under the Image Path column. There may be more than one entry associated with the same file as it is common for malware to create multiple startup entries. It is important to note that many malware programs disguise themselves by using the same filenames as valid Microsoft files. it is therefore important to know exactly which file, and the folder they are in, that you want to remove. You can check our Startup Database for that information or ask for help in our computer help forums.
  7. Once you find the entry that is associated with the malware, you want to delete that entry so it will not start again on the next reboot. To do that right click on the entry and select delete. This startup entry will now be removed from the Registry.
  8. Now that we made it so it will not start on boot up, you should delete the file using My Computer or Windows Explorer. If you can not see the file, it may be hidden. To allow you to see hidden files you can follow the steps for your operating system found in this tutorial:

    How to see hidden files in Windows
  9. When you are finished removing the malware entries from the Registry and deleting the files, reboot into normal mode as you will now be clean from the infection.

http://www.bleepingcomputer.com/tutorials/tutorial101.html


 
New Post 3/17/2008 12:10 AM
User is offline soumya
2917 posts
feelwindows.blogspot.com/
Forum Guru








How to protect yourself in the future 

In order to protect yourself from this happening again it is important that take proper care and precautions when using your computer. Make sure you have updated antivirus and spyware removal software running, all the latest updates to your operating system, a firewall, and only open attachments or click on popups that you know are safe. These precautions can be a tutorial unto itself, and luckily, we have one created already:

Simple and easy ways to keep your computer safe and secure on the Internet

Please read this tutorial and follow the steps listed in order to be safe on the Internet. Other tutorials that are important to read in order to protect your computer are listed below.

Understanding Spyware, Browser Hijackers, and Dialers

Understanding and Using Firewalls

Safely Connecting a Computer to the Internet

Using Spybot - Search & Destroy to remove Spyware from Your Computer

Using Ad-Aware SE to remove Spyware & Hijackers from Your Computer

Using SpywareBlaster to protect your computer from Spyware, Hijackers, and Malware

Using IE-Spyad to enhance your privacy and Security


 
New Post 3/17/2008 2:58 AM
User is offline Vishal Gupta
6458 posts
www.AskVG.com
Ultimate Member








Re: MyPC is dead slow .. log file here ..suggestions needed  

Yep. Its a trojan. Seema pls fix following entry:

O23 - Service: FCI - Unknown owner - C:\WINDOWS\system32\fci.exe


Tweaking with Vishal

How to Use Smiley Code in Forum?
Promote MeraWindows at Your Blog / Site
Read Forum Guidelines
 
New Post 3/17/2008 9:46 AM
User is offline seema
34 posts
Member


Re: MyPC is dead slow .. log file here ..suggestions needed  

Thank you  .

Now it is working fine ...but i want to know abt this particular application

O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

b coz earlier i didnt noticed this in my OS.

 
Previous Previous
 
Next Next
  Microsoft Windows Forums  Other Windows V...  Windows XP  MyPC is dead slow .. log file here ..suggestions needed


   Get Your Own E-Mail Account @MeraWindows.com Minimize  
New Page 1 New Page 1
Show your cool quotient with @merawindows.com email account