Problem With Task Manager, Malware Problem?

[fullbug]

I started a thread about this problem last week here- http://www.computerhope.com/forum/index.php/topic,97578.0.html
and it was suggested it may be a malware problem and to run through Patio's steps so here I am.....

To recap, I'm on a Windows XP Home Toshiba laptop, SP3 and some problems seem to be creeping up....

If a program get stuck and I launch the task manager it doesnt run right, if I choose to close a program it closes it, but then another 15-20 task manager windows appear, and the button to close them disappears, the only way I can close them is to right click the window on the bottom of the page and close the group, that sometime works but restarts Windows Explorer...

Sometimes that wont work at all and I have to use a program called 'Kill Process' to do the job....

In another issue, if I put my laptop in 'standby' mode, for example by closing the lid, it will not come of out standby after that, the only thing I can do is reboot....

When I posted the other thread I hadnt found anything with my scans, this time I ran them in safe mode and it found a few things, so the logs are below, also after finishing the problems are still there so.....



[Saving space, attachment deleted by admin]

[cat-bomb]

Please rerun malware bytes and take action.

[fullbug]

Please rerun malware bytes and take action.

Why? Also I notice you arent a malware expert......

[cat-bomb]

C:\System Volume Information\_restore{EA10BEA4-2D2C-494D-9EF3-5EC8A5B65143}\RP722\A0763025.exe (Malware.Tool) -> No action taken.

That line was in your malware bytes log. It says you did not delete it so I am asking you to rerun malware bytes and take action so that piece of malware will be removed.

[fullbug]

Ran Malwarebytes again, didnt pick up anything though....


[Saving space, attachment deleted by admin]

[harry 48]

Why? Also I notice you arent a malware expert......

you will find 2 or 3 of us who can help a little here but are not experts and we are not allowed to help with major items or trouble  mbam is ok but wait for expert help with your hjt log , harry

[fullbug]

you will find 2 or 3 of us who can help a little here but are not experts and we are not allowed to help with major items or trouble  mbam is ok but wait for expert help with your hjt log , harry

Thanx harry....

[SuperDave]

Hello fullbug and welcome to Computer Hope Forum. My name is Superdave but you can just call me SD. I will be helping you out with your particular problem on your computer. I am working under the guidance of one of the specialist of this forum so it may take a bit longer to process your logs.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

Download Disable/Remove Windows Messenger to the desktop to remove Windows Messenger.

Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.

Unzip the file on the desktop. Open the MessengerDisable.exe and choose the bottom box - Uninstall Windows Messenger and click Apply.

Exit out of MessengerDisable then delete the two files that were put on the desktop.

Open HijackThis and select Do a system scan only

Place a check mark next to the following entries: (if there)

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - .DEFAULT User Startup: IEHOME.LNK = C:\Documents and Settings\Default User\Local Settings\Temp\iehome.bat (User \'Default user\')
O4 - HKLM\..\Run: [SunJavaUpdateSched] \"C:\Program Files\Java\jre6\bin\jusched.exe\"
(Description: Sun Java update scheduler. Checks for updates. Not necessary. Removing this entry will free up a small amount of system resources.)
O4 - Startup: PowerReg Scheduler V3.exe
O16 - DPF: {1D082E71-DF20-4AAF-863B-596428C49874} (TPIR Control) - http://www.worldwinner.com/games/v50/tpir/tpir.cab
O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://www.worldwinner.com/games/shared/wwlaunch.cab
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O24 - Desktop Component 0: (no name) - (no file)

Important: Close all open windows except for HijackThis and then click Fix checked.

Once completed, exit HijackThis.

Download ComboFix by sUBs from one of the below links.  Be sure to save it to the Desktop.

link # 1
link #2

Close any open web browsers (Firefox, Internet Explorer, etc) before starting ComboFix.

Temporarily disable your anti-virus, and any anti-spyware real-time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them.

Vista users Right-click combofix.exe and select Run as Administrator and follow the prompts.
Double-click combofix.exe and follow the prompts.
When finished, ComboFix will produce a log for you.
Post the ComboFix log and a new HijackThis log in your next reply.

NOTE: Do not mouseclick ComboFix's window while it is running. That may cause it to stall.

Remember to re-enable your anti-virus and anti-spyware protection when ComboFix is complete.

[fullbug]

Thanx Superdave, I will get right oin doing that stuff now.....