My computer is running very slowly and i am trying to clear off all desruptive files

[jrad]

Hijack log is attached

 

[paranoid guy]

Yup, you have a few nasties there, but there are no hjt logs allowed in this forum...
You need to go here: https://www.techspot.com/vb/topic50981.html
and follow all the instructions, then post a new hjt log as an attachment.
Post a new hjt log, only after following all the instructions in that thread.
You also need to move hjt into its own folder (e.g. c:\HJT)
btw welcome to techspot :wave:

 

[howard_hopkinso]

Hello and welcome to Techspot.

Follow the instructions exactly in the link provided by paranoid guy.

Then, post a fresh HJT log into this thread, only after doing the above.

I have moved this thread to our security and the web forum.

Regards Howard :wave: :wave:

 

[jrad]

i think i did what u asked but im not completely sure

 

[howard_hopkinso]

Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

Go to add remove programmes in your control panel and uninstall anything to do with(if there).

RXToolBar
Spyware Cleaner
Save
AWS\WeatherBug
Viewpoint\Viewpoint Manager

Close control panel.

Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

Click on the processes tab and end process for(if there).

Save.exe
SpywareCleaner.Exe
Weather.exe
ViewMgr.exe

Close task manager.

Run HJT with no other programmes open(except notepad). Have HJT fix the following, by placing a tick in the little box next to(if there).

R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll

F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe

O2 - BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\Program Files\RXToolBar\sfcont.dll (file missing)

O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe

O4 - HKLM\..\Run: [SM1BG] C:\WINDOWS\SM1BG.EXE

O4 - HKCU\..\Run: [Spyware Cleaner] "C:\Program Files\Spyware Cleaner\SpywareCleaner.Exe" /boot

O4 - HKCU\..\Run: [WhenUSave] "C:\Program Files\Save\Save.exe"

O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 3.0\resources\en-US\local\search.html

O8 - Extra context menu item: &Search - http://kl.bar.need2find.com/KL/menusearch.html?p=KL

O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll

O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe (file missing)

O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)

Fix all 016-DPF entries.

O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\Program Files\RXToolBar\sfcont.dll

O20 - Winlogon Notify: awtsq - C:\WINDOWS\System32\awtsq.dll (file missing)

Click on the fix checked button.

Close HJT.

Locate and delete the following bold files and/or directories(if there).

C:\Program Files\RXToolBar
C:\Program Files\AWS\WeatherBug
C:\Program Files\Save
C:\Program Files\Spyware Cleaner
C:\Program Files\Viewpoint

Reboot into normal mode and turn system restore back on.

Post a fresh HJT log.


Regards Howard