slow computer with hijackthis log

[Rannasjem]

I have an old business computer running windows 98 (can't upgrade due to software programs that must run under windows for this company). It's keeps getting slower and slower no matter how many different spyware programs I use. any ideas, here's the hijackthis log.

 

[Mictlantecuhtli]

I'd fix these:

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://4-counter.com/?a=2&b=lili111
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://4-counter.com/?a=2&b=lili111

F1 - win.ini: load=S\TEMP\_wutl95.dll

O4 - HKLM\..\RunServices: [SSDPSRV] c:\windows\SYSTEM\ssdpsrv.exe

O16 - DPF: {4129EA54-F04E-11D3-BF96-00C04F0E7BE2} (CMV4 Class) - http://www109.coolsavings.com/download/cscmv4X.cab

O21 - SSODL: systemie - {DD685400-2F2F-11D8-9D69-0008C781D189} - sysie.dll (file missing)

 

[howard_hopkinso]

Hello and welcome to Techspot.

Run HJT with no other programmes open.Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.presario.net/scripts/r...query=%s&i=enu
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://4-counter.com/?a=2&b=lili111
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://4-counter.com/?a=2&b=lili111

O16 - DPF: {4129EA54-F04E-11D3-BF96-00C04F0E7BE2} (CMV4 Class) - http://www109.coolsavings.com/download/cscmv4X.cab

O21 - SSODL: systemie - {DD685400-2F2F-11D8-9D69-0008C781D189} - sysie.dll (file missing)

Click on the fix checked button.

Close HJT.

Other than the above, your HJT log is clean.

Do not fix this entry.

O4 - HKLM\..\RunServices: [SSDPSRV] c:\windows\SYSTEM\ssdpsrv.exe It`s perefectly safe.



Reagards Howard :wave: :wave:

 

[Mictlantecuhtli]

O4 - HKLM\..\RunServices: [SSDPSRV] c:\windows\SYSTEM\ssdpsrv.exe It`s perefectly safe.

I wouldn't call UPnP "perfectly safe" in Windows. Do you know anyone who actually has UPnP devices?

 

[howard_hopkinso]

Hi Mict.

See below for info on the ssdpsrv.exe file. Incidently, even if it was bad, fixing it with HJT wouldn`t work as it`s run as a service. It would need to be disabled from services first, before being removed.

http://www.processlibrary.com/directory/files/ssdpsrv/

http://www.liutilities.com/products/wintaskspro/processlibrary/ssdpsrv/

http://www.bleepingcomputer.com/startups/ssdpsrv.exe-5174.html

Regards Howard