Older XP Laptop Needs Resurrection [Solved]

Uninstall programmes

Please uninstall Google Update Helper, (there were two entries and you uninstalled only one).

================================================

You need to move Farbar Recovery Scan Tool to your desktop otherwise fixes will not work.

• go to C:\Documents and Settings\Susan Bailey\Desktop\New Folder and locate FRST
• right click and select Cut
• go to an empty spot on your desktop, right click and select Paste

Farbar Recovery Scan Tool should now be on your desktop.

================================================

Run Farbar Recovery Scan Tool

Open notepad (Start >All Programs > Accessories > Notepad). Please copy the entire contents of the code box below and paste it into Notepad.

CloseProcesses:
Task: C:\WINDOWS\Tasks\Ad-Aware Update (Daily 1).job => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: C:\WINDOWS\Tasks\Ad-Aware Update (Daily 2).job => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: C:\WINDOWS\Tasks\Ad-Aware Update (Daily 3).job => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: C:\WINDOWS\Tasks\Ad-Aware Update (Daily 4).job => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
2020-03-22 14:49 - 2004-10-29 23:47 - 000000000 ____D C:\Program Files\Spybot - Search & Destroy
2020-03-22 14:49 - 2004-10-29 23:47 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2020-03-22 14:42 - 2008-10-15 00:23 - 000000000 ____D C:\Program Files\Java
2020-03-22 14:13 - 2012-11-10 20:17 - 000000472 _____ C:\WINDOWS\Tasks\Ad-Aware Update (Daily 3).job
2020-03-22 13:55 - 2007-05-31 23:36 - 000000000 ____D C:\Program Files\Lavasoft
2020-03-22 13:54 - 2008-03-12 23:12 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Lavasoft
2020-03-22 08:13 - 2010-07-26 16:43 - 000000472 _____ C:\WINDOWS\Tasks\Ad-Aware Update (Daily 2).job
2020-03-22 02:13 - 2012-11-08 08:15 - 000000472 _____ C:\WINDOWS\Tasks\Ad-Aware Update (Daily 1).job
2020-03-21 20:13 - 2010-08-13 19:42 - 000000472 _____ C:\WINDOWS\Tasks\Ad-Aware Update (Daily 4).job
2020-03-20 02:13 - 2013-08-31 19:41 - 000000472 _____ C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
HKLM\…\batfile\DefaultIcon: %SystemRoot%\System32\shell32.dll,-153 <==== ATTENTION
DomainProfile\GloballyOpenPorts: [139:TCP] => Enabled:@xpsp2res.dll,-22004
DomainProfile\GloballyOpenPorts: [445:TCP] => Enabled:@xpsp2res.dll,-22005
DomainProfile\GloballyOpenPorts: [137:UDP] => Enabled:@xpsp2res.dll,-22001
DomainProfile\GloballyOpenPorts: [138:UDP] => Enabled:@xpsp2res.dll,-22002
StandardProfile\GloballyOpenPorts: [1900:UDP] => :LocalSubNet:Enabled:@xpsp2res.dll,-22007
StandardProfile\GloballyOpenPorts: [2869:TCP] => :LocalSubNet:Enabled:@xpsp2res.dll,-22008
StandardProfile\GloballyOpenPorts: [3389:TCP] => Enabled:@xpsp2res.dll,-22009
StandardProfile\GloballyOpenPorts: [139:TCP] => :LocalSubNet:Enabled:@xpsp2res.dll,-22004
StandardProfile\GloballyOpenPorts: [445:TCP] => :LocalSubNet:Enabled:@xpsp2res.dll,-22005
StandardProfile\GloballyOpenPorts: [137:UDP] => :LocalSubNet:Enabled:@xpsp2res.dll,-22001
StandardProfile\GloballyOpenPorts: [138:UDP] => :LocalSubNet:Enabled:@xpsp2res.dll,-22002
StandardProfile\GloballyOpenPorts: [5985:TCP] => Disabled:Windows Remote Management
StandardProfile\GloballyOpenPorts: [80:TCP] => Disabled:Windows Remote Management - Compatibility Mode (HTTP-In)
C:\Program Files\Yahoo
Hosts:
EmptyTemp:

NOTE: this script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

• save the files as fixlist.txt in the same folder as FRST – NOTE: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work
• run FRST then click Fix just once and wait
• it will create a log (Fixlog.txt); please post it to your reply.

================================================

Run RogueKiller

IMPORTANT: Please remove any usb or external drives from the computer and close all running programs before you run this scan!

Download RogueKiller to your desktop

• for Windows Vista/7/8/10, right click -> run as administrator, for XP simply double-click on RogueKiller.exe
• accept the user agreement
• click on Scan
• if a Windows opens to explain what [PUM's] are, read about it
• click the RoguKiller icon on your taksbar to return to the report
• when it has finished, click on Open Report
• click on Export Txt and save the file on your Desktop as RKreport.txt
• copy/paste the content in your next post
• click on the ‘Remove’ button to delete the items in RED
• click Finish and close the program
• locate the RKreport.txt file on your Desktop and copy/paste the contents in your next reply.

Logs to include with next post:

Fixlog.txt
RKreport.txt

Thanks

Satchfan

Try deleting that version and download a new version then try again.

Hello Satchfan

I have tried downloading and running various versions of RogueKiller, but all to no avail.Every time I try to run to it I get the same type of Runtime error message as described in my last post, but with slight variations to the .tmp file

I have been in touch with the person who compiled the programme and apparently there are issues with XP at the moment.

Please do the following:

Run Emsisoft Emergency Kit

Please download Emsisoft Emergency Kit and save it to your desktop. Double click on the EmsisoftEmergencyKit file you downloaded to extract its contents and create a shortcut on the desktop. Leave all settings as they are and click the Extract button at the bottom. A folder named EEK will be created in the root of the drive (usually c:\).

• after extraction, double-click on the new Start Emsisoft Emergency Kit icon on your desktop
• the first time you launch it, Emsisoft Emergency Kit will recommend that you allow it to download updates: click Yes so that it downloads the latest database updates
• when update the is complete, click Malware Scan. When asked if you want the scanner to scan for Potentially Unwanted Programs, click Yes. Emsisoft Emergency Kit will start scanning
• when the scan has completed click Quarantine selected objects. Note, this option is only available if malicious objects were detected during the scan
• when the threats have been quarantined, click the View report button in the lower-right corner and the scan log will open in Notepad
• please save the Notepad log on your desktop and post the contents in your next reply
• when you close Emsisoft Emergency Kit it will give you an option to sign up for a newsletter. This is optional, and is not necessary for the malware removal process.

Satchfan

Hello Satchfan

The shortcut for Emsisoft in your last post is not suitable for 32 bit Windows and I need to download the full package that supports 32 and 64 bit systems.

Regards

Christopher

Not having much luck are we.

Try this: apparently it works on XP.

Hi

Im sure we will get there

Hi Satchfan

Emsisoft Emergency Kit

This program cannot be run on Windows versions prior to Windows 7

Eset says this online scanner works on all.

Hi Satchfan

Secure Connection Failed

An error occurred during a connection to www.eset.com.

Cannot communicate securely with peer: no common encryption algorithm(s).

(Error code: ssl_error_no_cypher_overlap)

    *   The page you are trying to view can not be shown because the authenticity of the received data could not be verified.

    *   Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.


Regards Christopher
        
        
      


      
    

That's a FF thing and some changes would need to be made to make it connect.

To be honest, this was only a way of verifying what I already knew, that your computer is clean.

I have guessed all along that AVG is the problem. It is no longer a decent antivirus and it scores way below other anti-virus programs in independent testing. It has always been a very ‘bloated’ program that has many services that auto-start with the computer and run all the time, (to no advantage), and will slow your computer.

My suggestion is to uninstall it and install Panda Free Antivirus from here.

Let me know how that goes.

It's 3am here in the UK and ny eyes are closing so will catch up tomorrow.

Hello Christopher

It has been several days since I sent my last reply.

Please let me know if there are any remaining probems.

If I do not hear from you within 24 hours I'll assume that all is now OK and close this topic as 'solved'..

Satchfan

Hello Satchfan

First of all, to let you know, I am replying to you from another computer. With regards to your last instruction post, the following events have taken place.

1) I removed three programmes of AVG

2) Then I made numerous attempts to Download Panda Free Antivirus from your link. All to no avail as the programme downloaded but would not run.

3) So I tried to download from various web sites, but all with the same outcome no matter what version I tried and also from the Panda web site.

4) Next I tried downloading Panda AV with another computer and saved it to USB memory stick. With the memory stick plugged into the XP machine I was able to load Panda Dome.

5) Returning to your original plan I tried downloading Emsisoft, but again without luck. Eventually I returned to 2nd Computer and with USB I finally was able to load

Emsisoft version 10.0.0.5735. Then as suggested I tried the Update but was unable to. After many attempts I realised   that the Netgear Wireless dongle in my XP had lost wireless  communications with my router. I tried many ways to fix it but without success. My next plan is to try a hard wire feed from router into XP to get back on the internet.

   I am sorry for the delay, but for something the should of been relatively easy, it has taken me many hours, especially taking  into consideration the very slow performance of the XP machine.

  I will try to get a reply to you in the next 24 hours with some new Logs.

  Thank you

  Christopher