Remove this entry
O23 - Service: perfmons Service (perfmons) - Unknown owner - C:\WINDOWS\system32\perfs.exe
Close all applications and browser windows before you click "fix checked".
copy text below and paste in notepad
sc stop perfmons
sc delete perfmons
save as all files to your desktop and name it fix.bat and then run it.
Please
download the
OTMoveIt by OldTimer.
- Save it to your desktop.
- Please double-click OTMoveIt.exe to run it.
- Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):
Quote:
C:\WINDOWS\system32\perfs.exe - Return to OTMoveIt, right click on the "Paste List of Files/Folders to be moved" window and choose Paste.
- Click the red Moveit! button.
- Close OTMoveIt
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose
Yes. Now post a new hijackthis log