XP SP2 very slow

[JaimeDavid]

Good morning. My pc became very slow all of a sudden. I recently installed ContentProtect and with it came Webroot Spy Sweeper as a 3 months free trial version. I am suspicious the Spy Sweeper may be adding to the delays, because it takes a lot of time to load at startup, but before I remove it I was hoping someone could take a look at my HJT file and give me some advice. Really appreciate it. BTW something that makes me think there is something more to it is that my AVG updates don't complete. Thanks for you help.

 

[howard_hopkinso]

download and run LSPFix from http://cexx.org/lspfix.htm

Use these instructions to remove the bad DLL:
1. Run LSPFix.
2. Check 'I know what I'm doing'.
3. Select cwlsp.dll.
4. Click the right-pointing arrow (moves it to the "remove" page).
5. Click 'Finished'.

6. Restart your computer in "Safe Mode" (F5 or F8 when starting Windows).
7. Delete the file: c:\windows\system32\cwlsp.dll. Do NOT delete ANY other files!
8. Restart your computer and bring it up in normal mode.

Post a fresh HJT log.

Regards Howard

 

[JaimeDavid]

Thanks, I followed instructions and run into the following obstacle. The cwlsp.dll file was telling me I could not delete it, access denied because of permissions or that it was being used. But i was able to rename it and move it to the desktop. Reboot again in safe mode and then delete it. I made sure it was not in the system32 folder. Reboot again normal and I get the following message:
ewido anti-malware has found an ivalid or improperly-removed LSP entry with the linked file "...cwlsp.dll" In order to keep your Internet connection alive, the entry was removed.
The OK button is my only option.
I click it. It goes away for a while, but then it pops up.
Anyway here is my new HJT.

Thanks for your help.

 

[howard_hopkinso]

You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.

Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how here.> http://www.bleepingcomputer.com/forums/tutorial61.html

Turn off system restore.(XP/ME only) See how here.> http://www.bleepingcomputer.com/forums/tutorial56.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how here.> http://www.bleepingcomputer.com/forums/tutorial62.html


Click start/run and type services.msc into the run box and press the enter key.

When the window appears, maximise it. Double click on the following services(if there) and select stop if they are running. Set the startup type to disabled. Click apply/ok for each service you disable.

KN - Sysinternals

Close the services window.

Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

Click on the processes tab and end process for(if there).

KN.exe

Close task manager.

Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

O1 - Hosts: www.blesstheday.com

O23 - Service: KN - Sysinternals - www.sysinternals.com - C:\DOCUME~1\ELREINO\LOCALS~1\Temp\KN.exe

Click on the fix checked button.

Close HJT.

Locate and delete the following bold files and/or directories(if there).

C:\DOCUME~1\ELREINO\LOCALS~1\Temp\KN.exe

Reboot into normal mode and turn system restore back on.

Reinstall your content watch programme. That`s what the .dll error is.

Regards Howard

 

[JaimeDavid]

Sorry it took me a while, but thanks that worked great.