Busy hard drive

While you did have some malware to remove and I have some additional minor things for you to do, it does not look like you are having remaining malware problems. If your problem is slow startup, it may just be the drag of McAfee and other things you are loading at startup. Also you may have some problems within Windows itself since msinfo32.exe, which is used by MGtools, could not get any info. This frequently means the Windows Management Intrumentation (WMI) service is not running and it should be. There could be other issues too but these would all be topics for the Software Forum.

Let's finish addressing issues I see.

First you may want to restore the below if you need them since they appear to be false detections by SUPERAntiSpyware. I assume PTW is Powertools for Windows?

Code:

Trojan.Unclassified/Dropper
 C:\DNVEXCL\READ658.EXE
Trojan.Agent/Gen-Zbot
 C:\PTW32 VERS50\BIN\SIMSPY32.DLL
 C:\PTW32 VERS65\BIN\SIMSPY32.DLL

Uninstall the below old versions of software:
J2SE Runtime Environment 5.0 Update 2
J2SE Runtime Environment 5.0 Update 4
J2SE Runtime Environment 5.0 Update 6
Java 2 Runtime Environment, SE v1.4.2_03
Java(TM) 6 Update 15
Java(TM) 6 Update 5
Java(TM) 6 Update 7
Java(TM) SE Runtime Environment 6 Update 1

Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\RunOnce: [] C:\Program Files\Internet Explorer\iexplore.exe http://www.symantec.com/techsupp/se...0000070.0000014d&c=00000082.000000d2.0000025f
O4 - HKUS\S-1-5-21-3440211015-2533250257-2794647437-1007\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User '?')
O4 - HKUS\S-1-5-21-3440211015-2533250257-2794647437-1007\..\RunOnce: [] C:\Program Files\Internet Explorer\iexplore.exe http://www.symantec.com/techsupp/se...0000070.0000014d&c=00000082.000000d2.0000025f (User '?')

Optionally fix the below 3 unnecessary startup items to improve startup time.
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

After clicking Fix, exit HJT.

Run this Disable/Remove Windows Messenger to remove Windows Messenger. Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.



Now we need to use ComboFix

• Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
  • If it is not on your Desktop, the below will not work.
• Also make sure you have shut down all protection software (antivirus, antispyware...etc) or they may get in the way of allowing ComboFix to run properly.
• If ComboFix tells you it has expired or need to be updated to a new version, make sure you allow it to update.
• Open Notepad and copy/paste the text in the below quote box into it:

• Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
• At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
• You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
• Now use your mouse to drag CFscript.txt on top of ComboFix.exe
• Follow the prompts.
• When it finishes, a log will be produced named c:\combofix.txt
• I will ask for this log below

Note:

Do not mouseclick combofix's window while it is running. That may cause it to stall.


After reboot, now install the current version of Sun Java from: Sun Java Runtime Environment
Now run Ccleaner. Only use the Run Cleaner button. Do not run anything else on any other forms.

Now download the current version of MGtools and save it to your root folder. Do not save it to C:\Downloads like you previously did. Delete the previous MGtools.exe file in C:\Downloads.

Run MGtools.exe ( Note: If using Vista make sure UAC is still disabled. Also don't double click on it, use right click and select Run As Administrator )


Now attach the below log:

• C:\ComboFix.txt
• C:\MGlogs.zip

Make sure you tell me how things are working now!

 

The repair fixed the broken msinfo32.exe and perhaps some other Windows issues too. Any remaining issues you may be having are probably not due to malware. You will have to post specific info on your remaining problems in a new thread in the Software Forum.

Your logs are mostly clean but I do question what the below file is for that showed up on Nov 11th. Do you know? Right click on it an look at Properties-> Version information to see if you can find out who it belongs to.

Code:

2009-11-11 20:29 . 2008-09-22 05:00 131171 ------w- c:\windows\system32\dlxrizil.dll
 

 

Don't know. You can post in the Hardware Forum about this and run a chkdsk. But I still suspect you may have problems with your Windows installation and may require a reinstall. This would be a topic for the Software Forum.


If you are not having any other malware problems, it is time to do our final steps:

1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
3. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
   • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
   • "%userprofile%\Desktop\combofix" /uninstall
     • Notes: The space between the combofix" and the /uninstall, it must be there.
     • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
5. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
6. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
7. Go to add/remove programs and uninstall HijackThis.
8. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
10. After doing the above, you should work thru the below link:
    • How to Protect yourself from malware!

 

Your welcome. Make sure you follow the instructions in the below to help keep you protected:

How to Protect yourself from malware!