These infections all came from your LimeWire downloads.
P2P or 'file sharing Warning:
- As long as you are using file sharing networks and programs which are from sources that are not documented, you cannot verity that a download is legitimate.
- Malware writers use these program to include malicious content.
- Fie sharing is usually unmonitored and there is a danger that your private files might be accessed.
- The 'sharing' also includes malware that the shared system has on it.
- Files that are illegal can be spread through file sharing.
Please read the information on
P2P Warning to help you better understand these dangers.
===========================
Please download
OTMovit by Old Timer and save to your desktop.
- Double-click OTMoveIt3.exe to run it. (Vista users, please right click on OTMoveit3.exe and select "Run as an Administrator")
- Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
Code:
:Processes
:Services
:Reg
:Files
C:\Documents and Settings\Megan.END-8825FE3CB3B\My Documents\LimeWire\Saved\put you together again hot.mp3
C:\Documents and Settings\Megan.END-8825FE3CB3B\My Documents\LimeWire\Saved\swing low sweet charriot [cd rip].mp3
C:\Documents and Settings\Megan.END-8825FE3CB3B\My Documents\LimeWire\Saved\swing low sweet charriot.mp3
:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]
- Return to OTMoveIt3, right click in the "Paste Instructions for Items to be Moved" window and choose Paste.
- Click the red Moveit! button.
- A log of files and folders moved will be created in the c:\_OTMoveIt\MovedFiles folder in the form of Date and Time (mmddyyyy_hhmmss.log). Please open this log in Notepad and post its contents in your next reply.
- Close OTMoveIt3
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose
Yes.
============================
You have only
slightly more than 50% of your resources free. You should be running as close to 80% as possible. You need to review Add/Remove Programs in the control Panel and uninstall whatever you aren't using. If you don't know what the program is, do a Google search. That will free up some of your hard drive. (Recommend uninstall program:C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe)
I don't know how much RAM you have. To run windows XP well, you should have
at least 512MB. The more proceeses you have starting on boot and running in the background, the more RAM is used. You can control that by taking unnecessary processes of off Startup as below. All of the ones I have listed do
not need to start on boot:
To access Startup using the msconfig utility:: Click on Start> Run> type in
msconfig> enter>
- Check Selective Startup and everything below except the "Load the Startup Items" & "Original Boot.ini."
- Click on the Startup tab> here's what you'll see:
- If you need to expand the Command Column, (this shows what the process 'belongs' to) hold left mouse button down on the dividing line on from next to Location and move to the right to expand.
- UNCHECK these unneeded Startup items:
Adobe Reader 9.3 (Reader_sl.exe)
Apple Software Update
AutoUpdate
Creative Live! Cam Video IM Driver (1.01.01.00)
Creative Software AutoUpdate
Dell AIO 810
GoogleToolbarNotifier.exe
GrooveMonitor.exe (Office12 Service to work offline with files from Sharepoint.)
hpztsb05.exe
iTunesHelper.exe>> BIG resource user!
Java Auto Updater (jusched.exe)
Microsoft Office 2007 & all associates apps (ctfmon.exe)
Microsoft Software Update for Web Folders (English) 12
QuickTime (QTTask.exe)
RealPlayer (realsched.exe)
StreamPlug Player
Virtual Earth 3D (Beta)
WebFldrs XP
Windows Media Player 11
This does not remove the item or uninstall anything> it just stops it from starting on boot. It can be rechecked at any time if wanted. You don't do anything on the other tabs. When through> Apply> OK
When you reboot the system the first time after making changes, a nag message comes up that can be
ignored and closed after checking 'don't show this message again.'
Stay in Selective Startup to retain the changes.
Once you make changes to the Startup menu, you must remain in Selective Startup to retain those changed. If you go back to Normal Startup, everything you unchecked will be checked again and start on boot.
Let me know how it goes.
as it took nearly 2 hours to do the scan!!! I will have another look for it 
