Help needed with ongoing Virus/Spyware issue.

Hi. I have been having problems with laptop running slow and small changes with the setup of the computer. Start up time is over 5 minutes. Security centre gets turned off. PC-cillin could never find a problem.

I have a Toshiba Satelitte A60, Mobile Intel Pentium 4 CPU 3.06 GHz, 192MB RAM. Windows XP Home 2002 SP2.

Have read and followed through Malware Removal read me process.

All seemed to do their job appart from Panda Scan which would close the two explorer pages that were open when running when it got near the end of it's scan.

The most notable find was Trogan Bagle.

Have included "newfiles", "runkeys" and "HJT" logs. I have logs for counterspy and Bitdefender also.

I hope I have done the right things as am new to all this.

I appreciate any help that comes my way.

 

Thanks Halo.

Have included bitdefender and counterspy log files as requested.

Another note, I can't run regedit. Comes up with error box saying windows can't find it.

In regards to counterspy I have run another scan (that shows nothing) as there was no scan history for the first one I ran? It certainly found problems but I cant remmember what they were.

Anyway,

Cheers.

 

Thanks Chaslang,

I have deleted the infected email and attachment. Nice.

Laptop has 18.8GB free disk space from an available 29GB.

I have found the initial run of Counterspy log (I ran it in safe mode as administrator but then it doesn't come up in the scan history when I logged on as a user?) and it confirms the Trojan Bagle. But will still uninstall as runs out in 10 days anyway.

Is Windows messenger bad as my partner uses it a fair bit and would be sad to see it go?

Have run scannow and it has detected some missing files. No copy of SP2 CD with me but will get one soon and add missing files.

Yer the slowness is strange I guess but very painful. Start up and shutdown both very slow. Even when opening "My Computer" the little flshlight comes up for a few seconds before icons appear. Frustrating!!

Anyway, will track down a disk and get those files in place.

Cheers.

 

Thanks Chaslang,

Have removed Counterspy, no difference in performance unfortunately.

Have also removed messenger. Thanks for the heads up on that one.

Getting my hands on a copy of SP2 CD and will run scannow again and install the missing files. Here's hoping that helps.

Cheers.

 

Hi Chaslang,

One other thing whilst I am looking for CD. Some one told me I may have a copy of Regedit in windows\system32\dllcache. Not sure if this was worth following but I now know that "dllcache" is missing from "system32".

I ran a search and found a copy under "Windows\lastgood\" which was only created yesterday (27th). It only contains 2 files though (one an ethernet driver and the other a LAN driver)

Not sure if this is related.

Cheers.