computer is bogged down, logfile attached

Hi, Im kind of new to this but am forced to figure out whats going on. I often run the free verions of ad-ware and Malwarebytes anti malware. They have caught alot but I still have something going on here because my wireless mouse and wireless keyboard are sometimes very slow. I ran a list of running processes through hijack this and here is a copy:

Any ideas? I appreciate it, I will be able to check back here about 2-3 times a day, thanks again for any input.

 

Thank you, it looks to have been the registry cleaner that helped. I appreciate the info!

 

Feel free to attach your logs for review. Remember, just because you're not having any obvious problems doesn't mean your system is clean.

 

ok great. Here it is:

• Edit by bjgarrick: Inline HJT log removed!

 

If you're going to post logs, we request them be attached! Also, we do not ask for HJT logs. If you had followed the READ ME properly you would have attached the following logs.

1. ComboFix Log
2. MGTools Log
3. SUPERAntiSpyware Log
4. Malwarebytes Anti-Malware Log

 

I think I did this right but let me know if I did not. I attached all of the log files in two formats. Thanks again

 

here it is

 

I just had a bout with several win32backdoor trojans which hijacked my browser and disabled my malwarebytes. I downloaded avast and it seems to have gotten them on the boot up. I really would like to get my machine clean again and get your recommendations on programs I can use to catch the infections before they come in. If there is such a thing! I prefer the freebies but I dont mind buying quality programs if they work. Thank you for your time on this.

 

Download this updated version of ComboFix, save to your desktop and run. Once completed, attach the new log to your next post.

ComboFix

 

Here you go, thank you

 

Step 1:

Now we need to use ComboFix to remove a bunch of malware files.

• Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
  • If it is not on your Desktop, the below will not work.
• Open Notepad and copy/paste the text in the below quote box into it:

• Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
• At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
• You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
• Now use your mouse to drag CFscript.txt on top of ComboFix.exe
• Follow the prompts.
• When it finishes, a log will be produced named c:\combofix.txt
• I will ask for this log below

Note:

Do not mouseclick combofix's window while it is running. That may cause it to stall.​

Step 2:

Please download ATF-Cleaner by Atribune. This program does not require an installation. The executable actually runs the program.

NOTE: This program is for Windows XP and Windows 2000 only. ATF Cleaner will remove all files from the items that are checked so if you have some cookies you'd like to save. Please move them to a different directory first.

• Double-click ATF-Cleaner.exe to run the program.
• Under Main choose: Select All
• Click the Empty Selected button.

If you use Firefox browser

• Click Firefox at the top and choose: Select All
• Click the Empty Selected button.
  • NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser

• Click Opera at the top and choose: Select All
• Click the Empty Selected button.
  • NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Click Exit on the Main ATF-Cleaner menu to close the program.​

Step 3:

Finally, please attach the new ComboFix log to your next reply. Also, let me know how things are running.​

 

thank you, log attached. the machine acted about 90% better for a few minutes but is slowing down a little bit again. it is still much better than it was before that last step. i have a wireless mouse and keyboard but i notice the most slowing in my mouse usually, having to go around the mouse pad several times to get the arrow where i want it. is my computer running too many processes or do you still suspect malware? Thanks again

 

overall i would say that performance has improved by probably 70% or so

 

its getting a little worse again as far as slow response

 

Can you elaborate a little?

Also, please see the thread below, download the updated version of MGTools.exe and save it to C:\

Once downloaded, run it and attach a fresh set of logs.

Running MGTools...

 

logs attached. the computer just is not as responsive as it once was, especially the wireless mouse. The keyboard isnt too bad but the mouse is very clumsy feeling and you have to really push it all over the mouse pad about three times before the arrow on the screen will fully move across the monitor. When I use the same mouse on my other computer it is very responsive. My anti virus/malware programs dont really catch anything anymore. Also when you asked me to do the combo fix again recently it helped the responsiveness, especially at first. I dont really visit any suspect websites but I do go to myspace and facebook. I suspect my last tdss infection occurred at photobucket.

 

Download The Avenger by Swandog46, and save it to your Desktop.

• Extract avenger.exe from the Zip file and save it to your desktop
• Run avenger.exe by double-clicking on it.
• Do not change any check box options!!
• Copy everything in the Quote box below, and paste it into the Input script here: part of the window:

• Now click the Execute button.
• Click Yes to the prompt to confirm you want to execute.
• Click Yes to the Reboot now question that will appear when Avenger finishes running.
• Your PC should reboot, if not, reboot it yourself.
• A log file from Avenger will be produced at C:\avenger.txt and it will pop up for you to view when you login after reboot. Please attach this log to your next post.

 

Log attached. I also got an error on boot up that said:

Windows- No Disk
(red x) Exception occurred processing message C000013 parameters 75b6bf9c 4 75b6bf9c 75b6bf9c

cancel try again continue

I hit continue several times and it barked at me so the I hit try again same thing and then had to hit cancel 3 times.

Mouse is still a little slow but I can live with it, overall everything is much better than before I started. Should I do anything else?

 

If you are not having any other malware problems, it is time to do our final steps:

1. We recommend you keep SUPERAntiSpyware & Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources (except a little disk space) until you run a scan.
2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
   • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
   • "%userprofile%\Desktop\combofix" /u
     • Notes: The space between the combofix" and the /u, it must be there.
     • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
   • Delete the C:\combofix folder from combofix (if it exists)
3. If we had you run Avenger, you can delete all files related to Avenger now.
4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
5. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
6. If running Vista, it is time to make sure you have re-enabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
7. Go to Add/Remove Programs and uninstall HijackThis.
8. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
9. If you are running Windows Vista, Windows XP or Windows ME, you need to follow the below:
   • Refer to the cleaning steps in the READ ME for your Windows version and see the steps to Disable System Restore which will flush your Restore Points.
   • Then reboot and Enable System Restore to create a new clean Restore Point.
10. After doing the above, you should work thru the below link:
    • How to Protect yourself from malware!