Need a clean up program

[LA_MERC_YellowDog]

I have a Win xp pro box that I recently formatted for my Father N Law, Well a 14 year old kids gotten hold of it (He was not allowed on it to start with) Monkeyed with the screen saver so it would not come on, then later at night would get on line, play web based games, visit sights he wasn't suppose to and so on.... You get the picture.

SO, now I'm not sure what all is running in the background, spy-ware and such. Its running Very slow, a hell of a lot slower then when I formatted it.

Whats a good Spy-ware killer, Windows Optimizer program I can run to try and clean this thing up. I do not want to reformat again just to get the crap that's on this machine back off.

[LA_MERC_Onji]

Here is what I would do.

Spyware
1. Download and install MBAM http://www.malwarebytes.org/mbam-download.php
2. Launch the program after you install and do all of the updates, then close it (dont scan yet)

Antivirus
3. Download and install Microsoft Security Essentials http://www.microsoft.com/Security_Essentials/
4. Launch the program after you install and do all of the updates, then close it (dont scan yet).

5. start--run--msconfig (goto the startup tab and uncheck everything you can) ok your way out.

6. Goto Add/remove programs and kill anything suspicious.

7. Reboot the pc and tap F8 during bootup, you should eventually get a menu. Choose SafeMode

8. When in safe mode run both of those programs and do a full scan.

9. Boot back into normal mode, you should be much better off then.

[LA_MERC_th33_r00k]

If you still have a hitch in the giddy-up after what Onji says, download ComboFix and run it. It has done well for me. Also maybe post a Hijackthis log when done scanning if still having issues.

[LA_MERC_FragFood]

Go into Control Panel, then Users. Set up a Limited Account for the lil' guy, and a Power User account for the in laws. Rename and/or change PW on the local administrators account so that only you know it. Make Ctrl-Alt-Delete the default logon, passworded screensaver with credentials to unlock.

That'll pretty much prevent any of this from happening again, as long as the inlaws are reminded that they HAVE to log off when 14yo is coming.

If you wanted to be a real jerk about it, use Windows SteadyState (http://tinyurl.com/ytknan) on the thing. Then he could go nutso and it'd automatically roll it back when the abuse was over.