No spyware remover works. Check it out.

[Ried]

This system was hit hard by numerous types of malware. While I can say that your logs appear clean, I cannot guarantee that the system is completely free of malware. These infections/bundles may be leaving leftovers behind that most scanners won't even recognize and logs won't show.

Some of the casualties of the malware this system was hit with are the following programs with files missing. These should be reinstalled:

"ATI Launchpad"="" []
"H/PC Connection Agent"="C:\PROGRA~1\MICROS~4\wcescomm.exe" [ ]
"Aim6"="" []
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [ ]
"washindex"="C:\Program Files\Washer\washidx.exe" [ ]
"CTXFIREG"="CTxfiReg.exe" []
"Auto Run Software for Photo Frame"="" []

-----------

Run a scan with HijackThis and 'check' the following orphaned entry:

O4 - HKCU\..\Run: [Dot1XCfg] C:\Program Files\Dot1XCfg\Dot1XCfg.exe

Click 'Fix Checked' and close Hijackthis.

-------------------------

If there aren't any more problems, please continue with these final instructions and helpful links:

The following procedure will clear out ComboFix.exe, as well as the backups and quarantines created by the fix. It will also reset your System Restore by flushing out previous restore points (which contain the infections) and create a new restore point.

Click Start > Run and copy/paste, or type the following bolded text into the Run box and click OK:

ComboFix /u

--------------------------------------------------------------------


To help protect your computer in the future I recommend that you get the following free programs if you do not already have them:

McAfee Site Advisor--free version. The folks there check out websites and based on their findings, rate it as Safe, Unknown, Caution, or Bad.

SpywareBlaster 3.5.1 to help prevent spyware from installing in the first place. Install & update SpywareBlaster with the latest definitions. After you have updated, click the button - enable protection for all unprotected items.

• It will block any bad ActiveX from running in Internet Explorer and Firefox if it's listed in their database (which you should update frequently). To view their database and list of restricted sites, launch the program and click on each of the tabs on the main display page.

IESpyAD Zoned Out to block access to malicious websites so you cannot be redirected to them from an infected site or email. This severely impairs attempts to infect your system as it basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites.


Update, and scan with your onboard Anti Malware and Anti Virus programs regularly. Without regular updates you will not be protected when new malicious programs are released.


In light of your recent issue, I'm sure you'd like to avoid any future infections. Please take a look at these well written articles:

PC Safety and Security--What Do I Need?

HOW DID I GET INFECTED IN THE FIRST PLACE? by Tony Klein
THE ANTI-SPYWARE TUTORIAL
MAKING INTERNET EXPLORER SAFER
Understanding and Using Firewalls

**Be very wary with any security software that is advertised in popups or in other ways. They are not only usually of no use, but often have malware in them.

-----------------------------------------------------

Follow the list above and the potential for infection will reduce dramatically.

**Kindly respond one more time and let me know if we may consider this thread resolved.

[Danielle_2008]

See previous post for the file you requested. But, I wanted to send another because my computer locked up again while trying to logon. On Windows bootup, I get an error message at the logon screen that says something like "svchost.exe failed to initialize". I have to click OK once or twice then it locks up during logon (loading user applications). What do think is the problem now?

[Danielle_2008]

Eventually the system allowed me to logon without locking up. Once the applications were loaded, a "Microsoft" window opened saying that the Win32 application needed to be repaired. The link took me to an official Microsoft Windows download site to get the fix for the Win32 error. The file downloaded is named as follows:

WindowsXP-KB927891-v3-x86-ENU

Hopefully, there will be no more problems booting up. Otherwise, everything appears to be running fine. Thanks for your help.

[Ried]

I'm glad it worked out for you. If you have any more troubles, I highly recommend backing up your important documents, wipe the hard drive clean then reinstall Windows and just start fresh.

Take care, Danielle_2008