Computer running very slow...malware?

Viruses and worms
1

I recently had a hard drive failure and got a fresh reload of XP with SP3 and everything worked good. Then a few days later I got a pop up wanting me to download some free virus scan software, I closed the window and figured I was in good shape. Now the computer is running very slow. I figure there is some malware involved. The company I work for has Mcafee on the computer (its there computer so they decide). It has not found a virus or anything else. I ran an online panda scan (took 18 hours) and it found some cookies. I ran Avast cleaner, it found nothing. But I have a feeling there is something here.

Can someone look at the attached HJT log and tell me if they see anything. I found on VBS script that looks strange … its called passwordreminder

Thanks

2

It is more likely scum/scamware rogue program purporting that your infected (not a virus as such).

Try this tool, RogueRemover, available here http://www.malwarebytes.org/rogueremover.php
Or
If you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode and report the findings (it should product a log file).

  1. SUPERantispyware On-Demand only in free version.
  2. MalwareBytes Anti-Malware freeware version http://www.softpedia.com/get/Antivirus/Malwarebytes-Anti-Malware.shtml

The fact that having two resident AVs installed (McAfee and avast) isn’t doing you any favours either, there is likely to be a conflict.

Your JAVA is way out of date.
Ensure you have the latest version of JRE (JAVA Runtime Environment) because older versions can be vulnerable to malware. First remove All Older Versions From Add/Remove Programs.
Then get the latest update from here http://java.sun.com/javase/downloads/index.jsp

The VBS one does look strange, http://www.google.co.uk/search?q=remind.vbs, fixing it shouldn’t hurt as it can always be restored. Since you can’t recall installing it only adds to the suspicion.

3

C:\Documents and Settings\USERNAME\Start Menu\Programs\Startup\remind.vbs or C:\Documents and Settings\All Users\Start Menu\Programs\Startup\remind.vbs
C:\Program Files\HP\Dfawep\bin\hpbdfawep.exe 1

Please disable ‘Hide protected operating system files’ and enable ‘View Hidden Files and Folders’, and upload the above files to VirusTotal for analysis. Post the results here.

You have Entrust (whatever that is) which seems to be associated with a slow computer:

http://www.annoyances.org/exec/forum/win2000/1070526568

You also need to check your computer for out of date software: Your Sun Java application needs updating for one.

Scan for out-of-date and insecure software using Secunia Software Inspector and update any vulnerable software: this will help to prevent future infections.

4

Hi JR2,

Consider this info:
http://www.spywaredata.com/spyware/malware/etlitr50.exe.php

pol