Windows XP Home Edition - Running really slow! 3 logs provided

[cj85]

Download to your desktop ISeeYouXP.exe by ShadowPuterDude

I can't seem to get the link to load, it says Internet Explorer cannot display the webpage.

Not sure why it's doing that?

[evilfantasy]

It took a few seconds but I got it to load.

Please try again. http://downloads.malwareteks.com/ISeeYouXP.exe

[evilfantasy]

If not try to get it here. http://www.filedropper.com/iseeyouxp

[cj85]

Okay that worked, but now my AntiAvir is going nuts. It keeps saying this:

C:\Documents and Settings\Owner\Desktop\ISeeYouXP.exe

Contains recognition pattern of the WORM/KillProc.C worm

[cj85]

Okay, finally have the log for you.

Hopefully this will tell us some kind of some thing. LOL

Here it is...

Also, just so you know the alert for that post I just posted is still happening. Is that a bad thing?

[recovering disk space -- attachment deleted by admin]

[evilfantasy]

You can delete ISeeYouXP.exe now. We are done with it.

It will take a while to look through this log.....

[cj85]

I do have a question. I was wondering if you have a link to where I can download Spybot Search and Destroy, for some reason it's been removed but the files and folder in start menu are still there. Strange if you ask me.

[cj85]

Disregard that please. I'm running spybot S&D right now.

[evilfantasy]

No problem.

I got busy with other things and had to step out for a but but am looking at the log now....finally.

[cj85]

Okay, I hate to bug about this right when your looking at the log file. But I went into my task manager, and was hoping you could tell me if this is okay to run this much:

System Idle Process  CPU/99 and it goes into the range of 70 and bounces back up to 99 but it tends to stay in the 90's most of the time.

Also, just curious how do I check my CPU temp?


PS: I will be back in a bit, definately. I want to get this computer back to top shape. LOL Try to anyways ha ha.

[evilfantasy]

Maybe some of the next steps will help with the task manager running high.

SpeedFan is a freeware program that monitors fan speeds, temperatures and voltages in computers with hardware monitoring chips. http://www.majorgeeks.com/download337.html

----------

Download ViewpointKiller.zip

• Unzip the program and all of the contents of ViewpointKiller.zip to a location such as your desktop.
  
• Double click the ViewpointKiller icon to run ViewpointKiller.exe.
  
• Select the File menu, and select Check to see if you have Viewpoint installed.
  
• If ViewpointKiller indicates that any of the Viewpoint variants are installed, select the proper Kill option in the File menu.

• Follow the prompts and instructions very carefully, answering Yes or No depending on which option you are most comfortable with.
  
• The MsConfig instructions are very important, so be sure to read them carefully.

• Note: When done with ViewpointKiller right click and delete all files that were unzipped.

.
----------

Stop these running processes with StartUp 1.3 - http://majorgeeks.com/StartUp_d4436.html

Install StartUp to the desktop. Run it and right click any process you don't want running at stsrtup and choose Remove. After you are done click Apply then Exit.

shwiconem.exe

Used by your computer to communicate with your Alcor_Micro Multimedia Card Reader - necessary if you're using this software

winampa.exe

winampa.exe is a product from Nullsoft, called WinAmp. This is a non-essential process. Disabling or enabling it is down to user preference.

LifeChat.exe

Related to LifeChat from Microsoft.

mssysmgr.exe

Simple Star PhotoShow_Deluxe photo editing and organizing software. This program is not required to start automatically as you can run it when you need to.

----------

You should actually set MSCONFIG to Normal Startup and then use StartUp 1.3 to remove anything you don't want running. MSCONFIG is a troubleshooting tool and not a startup manager. Using it as one can eventually do damage to the registry.

----------

Note: the below instructions were created specifically for this user. If you are not this user, DO NOT follow these directions as they could damage the workings of your system

Now download The Avenger by Swandog46 and save it to your Desktop.

• Extract avenger.exe from the Zip file and save it to your Desktop
• Run avenger.exe by double-clicking on it.
• Do not change any check box options!!
  
• Copy everything in the Code box below, and paste it into the Input script here window:

Code: [Select]

Comment:

Files to delete:
C:\sqmnoopt12.sqm
C:\sqmnoopt13.sqm
C:\sqmnoopt10.sqm
C:\sqmnoopt11.sqm
C:\sqmnoopt16.sqm
C:\sqmnoopt17.sqm
C:\sqmnoopt14.sqm
C:\sqmnoopt15.sqm
C:\sqmnoopt06.sqm
C:\sqmnoopt07.sqm
C:\sqmnoopt04.sqm
C:\sqmnoopt05.sqm
C:\sqmnoopt18.sqm
C:\sqmnoopt19.sqm
C:\sqmnoopt08.sqm
C:\sqmnoopt09.sqm
C:\sqmdata10.sqm
C:\sqmdata14.sqm
C:\sqmdata04.sqm
C:\sqmdata18.sqm
C:\sqmdata08.sqm
C:\sqmdata11.sqm
C:\sqmdata15.sqm
C:\sqmdata05.sqm
C:\sqmdata19.sqm
C:\sqmdata09.sqm
C:\sqmdata12.sqm
C:\sqmdata16.sqm
C:\sqmdata06.sqm
C:\sqmdata13.sqm
C:\sqmdata17.sqm
C:\sqmdata07.sqm
C:\sqmdata00.sqm
C:\sqmdata01.sqm
C:\sqmdata02.sqm
C:\sqmdata03.sqm
C:\sqmnoopt00.sqm
C:\sqmnoopt01.sqm
C:\sqmnoopt02.sqm
C:\sqmnoopt03.sqm
C:\Documents and Settings\Owner\Desktop\ISeeYouXP.exe
C:\Documents and Settings\Owner\Desktop\ISeeYouXP.lnk

Folders to delete:
C:\ISeeYouXP

• Now click the Execute button.
  
• Click Yes to the prompt to confirm you want to execute.
  
• Click Yes to the "Reboot now?" question that will appear when Avenger finishes running.
  
• Your PC should reboot, if not, reboot it yourself.
• A log file from Avenger will be produced at C:\avenger.txt and it will pop-up for you to view when you login after reboot.

• Add the Avenger log in your next post.

.
----------

Create An Uninstall List

• Start HijackThis
  
• Click on the Open the Misc Tools section
  
• Click on the Open Uninstall Manager button.
  
• Click on the Save list button and specify where you would like to save this file and click Save.
  • When you press Save button a notepad will open with the contents of that file.
• Copy and paste that list in your reply.

[cj85]

I got up to downloading and running Avenger. I ended up getting the log for viewpoint killer, and avenger. Wasn't sure if you needed both or not. But when the computer rebooted after avenger, I ended up getting an error.... I attached a screen shot of the error which you can see below, I can't seem to get it to go away and it's still here hovering over IE...

[recovering disk space -- attachment deleted by admin]

[cj85]

I was able to get rid of the error message, but what was it? Why did it happen? Is it a bad thing?

Also, here's my hijack this uninstall list attached...

[recovering disk space -- attachment deleted by admin]

[evilfantasy]

I don't know what that was all about.

Rlease restart the computer again and see if it returns. if so we should fix it now by doing a System Restore. Hopefully it won't come back.

[evilfantasy]

Use Revo to uninstall the following:
Ask Toolbar
BearShare <- You should choose another p2p client. This one is known to distribute malware. See Clean/Infected P2P Programs

Download JavaRa

• Unzip the file and open the JavaRa.exe
• Click Remove Older Versions
  
• JavaRa will search for and remove any outdated version of Java and remove any that are found.
• Exit JavaRa.
• Delete the JavaRa files from the Desktop.