help and advice PC heavily infected

pickledtink

We're talking about 40 minutes just to load up when switched on.
My pain in the butt however knowledgeable son said there was so much loading up that it was really beyond help. All spyware, registry cleans, Avast etc which I run regularly not doing any good at all. When said offspring was living at home we had PCs networked by him and he tended to commandeer all/any of my software he felt like. Now long since moved out and I discover my operating system disc XP and Office 2003 both missing along with any instructions guarantees and all the other stuff you get with your bundle.
I'd intended to save all I needed then clean the HD and start over.
Son denies having anything ( probably just chucked it when he got to his new abode) and now also not speaking to me so won't help. I could kill right now!

I really cannot afford to go out and buy new operating system and office . Have put open org office on laptop which seems to be ok which I could put on here too but still no main operating system. What on earth to do?
I know avast is not picking anything up but don't want to remove and replace with another free online one and be left totally unprotected. Another worry is that I had a genuine legal office disc but cannot remember if it came with this PC or an older one or which it was. It's possible this horrible brat of mine has put something not legal on here. I just don't know. ALL my PC related stuff was kept in a big file now I can find virtually nothing. I think he had the lot in his room and it all went off with him as he packed up.

Donnie

Do you have a valid product key for Windows XP(a COA sticker on the side of your PC)? Home or Pro?

pickledtink

Yes.It says windows xp home edition.

jaydeeuk1

And if you can't find your XP or office cd key, see if your PC will boot in safe mode and try this:

http://www.magicaljellybean.com/keyfinder/

-- edit - replied before I posted, so ignore the above

pickledtink

I'm not too sure how to boot and do stuff in safe mode. I tended to get elbowed aside whenever I tried to get to learn these things.

What is the CD key and how do I use it /get help please?

penrhyn

Assuming you have run Malwarebytes antimalware scans and this has come up blank, then it might just be that your PC is clogged up with stuff trying to load at startup.
A simple way of sorting this would be to download Ccleaner, run it initially to get rid of all the temporary crap files. Then go to tools, uninstall and get rid of any programmes that you never use.
Then have a look at the startup file and disable anything you don't want to run at startup.
At this stage you could run highjackthis and post the results for the experts to analyse.

aliEnRIK

If your unsure about the 'wiping and resinstalling side of things id recommend trying to remove all the nasties 1st if I were you

Download MALWAREBYTES (Click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
UPDATE and FULL scan
Post the log here after its deleted everything

Download HIJACK THIS (Click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
reboot
SCAN and post the log so we can see whats running

pickledtink

Right. I've run the malwarebytes full scan and nothing found so I'll try the filehippo next....

pickledtink

Erm .Here's the log. I don't think I followed your instructions properly as I didn't reboot after installing filehippo. Should I restart then do it again or does the below log give anyone a clue? I'm out of my depth here completely now. ACTUALLY THIS IS WHAT CAME UP IN A NOTEBOOK WINDOW BUT IT'S NOT COMPLETE . tHEE WAS MORE ON THE MAIN ONE. i'D BETTER RESTART , RUN AGAIN AND THEN POST THE RESULTS. tHE ONLY THING TICKED TO FIX WAS ( oops caps on . Sorry) a dial up I had as a back up if my broadband mucked up.

O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1152463440328
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SupportSoft Sprocket Service (TalkTalk) (sprtsvc_TalkTalk) - SupportSoft, Inc. - C:\Program Files\TalkTalk\bin\sprtsvc.exe
O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe
O23 - Service: SupportSoft Repair Service (TalkTalk) (tgsrvc_TalkTalk) - SupportSoft, Inc. - C:\Program Files\Common Files\Supportsoft\bin\tgsrvc.exe

--
End of file - 6999 bytes

Donnie

pickledtink wrote: »

Yes.It says windows xp home edition.

Check your private messages.

pickledtink

Donnie wrote: »

Check your private messages.

Thanks Donnie . I'll pore over that and give it a go shortly .