win32.agent.bck infestation

[gene593]

I did as you said and attached a new log.

I would appreciate any advice you have to offer to speed up the computer.

Thanks again for all of your help and your time. That win32 was the hardest thing to beat and I never could have done it without your help and expertise.

[jholland1964]

Ok Gene, things do look better. Now to disable items not needed to auto start I recommend downloading Mike Lin's StartUpControl Panel
Download and install it. Once installed you will find it in your Control Panel. Icon looks like a computer and says Start Up.
Double Click to open and then go through the various tabs and remove the checkmarks from the items below. None of these are needed to auto start, all many be run manually and all can be disabled so that they do not take up necessary resources.

Here are the items and a brief explanation of each. These are recommendations only, if you choose you may leave any of them in auto start if you wish, but none are required for the running of the computer or operating system;

SoundMan - System Tray icon for the Realtek AC97 Audio Sound Manager for AC97 onboard audio. Available via Start -> Settings-> Control Panel

Share-to-Web Namespace Daemon - an application that allows users to upload scanned images to their personal webpages if desired. Available via Start -> Programs

RemoteControl - background application for CyberLink's PowerDVD version 5 and above. Enables you to use a remote control with your DVD drive if your drive came with one. Not required if you don't have a remote control, or don't wish to use one

QuickTime Task - System Tray access to Apple's "Quick Time" viewer from version 5 onwards

PRONoMgr.exe - System Tray icon for Intel PRO series ethernet adapters giving access to the diagnostic features

NeroFilterCheck - Associated with "Nero Burning Rom" CD writing software. Checks for driver issues

LVCOMSX - Logitech webcam related. Nobody seems to know what it does or if it is needed. If you have a webcam, leave it alone, if you don't have a webcam I would guess you don't need it running all the time.

LogitechCommunicationsManager - Unknown software found on Acer laptops with webcams and Logitech hardware. Reports indicate that this process can use up a great deal of memory. If this is the case for you, it is advised that you disable it.

iTunesHelper - Installed with Apple's iTunes for Windows. Uses ~3-4MB of memory and if disabled in MSCONFIG or deleted from the registry it will re-instate itself after running iTunes a few times. If it restarts after using, then go back into Mike Lin's program and remove the checkmark.

InCD - Ahead InCD packet writing software. Similar to DirectCD. On some systems there isn't an entry, on anothers there is. Run manually before inserting a cdr.

Google Desktop Search - a desktop search application that provides full text search over your email, computer files, chats, and the web pages you've viewed. Really not required.

AOLDialer - AOL ISP software dialer - can be activated through a desktop shortcut

SunJavaUpdateSched - Checks for java updates. Do this manually, half the time it doesn't work anyway.

swg - Added by the Google ToolBar for Internet Explorer. This program will notify you when you attempt to change the Internet Explorer search engine to something other than Google and asks if you would like to allow the change.

PhotoShow Deluxe Media Manager - Simple Star PhotoShow_Deluxe photo editing and organizing software; makes it easy to send and share digital photos.. Bundled with software from Nero, ComCast, SnapFish, MacroMedia and others.

MsnMsgr - MSN Messenger utility. If you don't use MSN Messenger, this can be annoying. Available via Start -> Programs. Go to MS Messenger > Tools > Options > Preferences and uncheck "Run this program when Windows starts"

Now there are also another group of auto start services that you can either disable or set to manual by going to Start, Control Panel, Administrative Tools, Services.
This page How to configure Windows Services in XP
gives you the list of programs in XP which are usually set to auto start by XP each time the system is booted. A great many of these are unnecessary and can be either disabled or set to Manual. The link will give you the name of each item, an explanation of each and the recommended setting. To get to the settings of each you will have to scroll through the list shown in YOUR services and then double click each item to change the setting. Not every item on the link will be on your particular computer but don't worry about it if you don't find it, that is fine. This is just a general, usual list. There also are items added by various programs that YOU have installed on the computer that will appear there that you also can disable. Here is the list of those still showing in your log which, even though the files are no longer on the computer are still being looked for and an attempt made to auto start them, slowing the boot time so set these to disabled;
AOL Spyware Protection Service
Symantec Password Validation (ccPwdSvc)
Symantec Settings Manager (ccSetMgr)

Now I also want you to download, install, update and enable SpywareBlaster
A MUST have tool we always recommend.
It will do the following;
Prevent the installation of ActiveX-based spyware, adware, browser hijackers, dialers, and other potentially unwanted software.
Block spyware/tracking cookies in Internet Explorer and Mozilla/Firefox.
Restrict the actions of potentially unwanted sites in Internet Explorer.
Be sure to enable it's Restricted Sites portion of the program.
What is great about this little program, beside the strong protection it offers is that it doesn't run in the background. Just keep it updated weekly.

Once you have done all of the above you need to set a new, clean Restore point with System Restore. To do this Right Click My Computer. Choose Properties, System Restore. Place a checkmark in Turn off System Restore. System Restore will shut down, erasing all old restore points.
Reboot the system. Once the reboot has taken place go back in and remove that checkmark from Turn off System Restore. This will turn System Restore back on with a new, clean restore point.