Slow Computer/97% RAM usage

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by andipen, Dec 22, 2013.

  1. andipen

    andipen Private E-2

    Hello,
    I hope you can help me with my laptop problem. My computer has been running exceptionally slow over the past week.
    I've tried running all sorts of malware programs: Spybot, SUPERAntiSpyware, Advanced SystemCare and the suggested programs in the Read Me post.

    Please let me know what recommendations you have.
    Thanks!

    I've attached the logs of:
    RogueKiller
    Malwarebytes
    TDSSKiller
    HitmanPro
    MGlogs.zip
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    Although you have a little junkware to cleanup, I don't think your problems are due to malware. I think it is due to what you have installed.


    Please try uninstalling all of the below:
    • Spybot
    • All of the IObit software you installed ( Advanced SystemCare, TuneUp Utilities...etc )
    • Norton PC Checkup
    • SUPERAntiSpyware
    Now reboot your PC and do the below.


    Now please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
    • The tool will open and start scanning your system.
    • Note: That JRT may reset your home page to a google default so you will need to restore your home page setting if this happens.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Attach JRT.txt to your next message.
    Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, Win7 or Win8, don't double click, use right click and select Run As Administrator).


    Then attach the below logs:
    • the JRT.TXTlog
    • C:\MGlogs.zip
    Make sure you tell me how things are working now!
     
    Last edited: Dec 23, 2013
  3. andipen

    andipen Private E-2

    Thanks for your help, Chaslang.

    So, I did everything you suggested.
    Unfortunately, it didn't fix the problem.
    The computer starts up fine, but within 10 minutes its back to its sluggish state.

    Also, before I made your changes, the laptop would boot up on its own in the middle of the night even when closed and in sleep mode. I noticed that this morning. It happens from time to time. I'm not sure if there is a bug causing this. Its possible it might happen again later.

    I've attached the logs you requested plus a new RogueKiller scan. Should I uninstall that one too? Also, I don't have Norton PC Check installed. Instead, I have the the Toshiba factory version. I assume this is fine.

    Thanks again for your help! I hope this can be fixed.

    -Andrew
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Well actually not quite yet. There are still a few things from IObit and also the Norton item ( see below ).

    Actually I'm not sure yet. We need to figure out the answer to the below problem.

    Your logs show the below valid Windows running process and note it is using over4 Gb of memory which is why your PC is slowing down.
    Code:
    dllhost.exe                   3956 Console                  1      4,497,524 K
    I cannot see any malware reasons in your logs for this so I suspect that something you are running is causing this which is why I started by having you uninstall some programs. What I would suggest is to use MSConfig to disable various starup process/non-Windows service and see if you can locate the problem. The first test would actually be to boot up your PC in Safe Mode with Networking and see if you still notice the slow down. if you do not know how to boot in safe mode with networking, see the below:

    http://windows.microsoft.com/en-US/windows7/Advanced-startup-options-including-safe-mode

    The next part of testing may involve performing a clean boot so I will post the link for this now for future reference:

    How to perform a clean boot in Windows


    And nowback too IObit. Uninstall the below which are from IObit.

    Surfing Protection
    IObit Uninstaller
     
    Last edited: Dec 23, 2013
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

  6. andipen

    andipen Private E-2

    Hello chaslang,
    so the links seemed to have solved the problem. I had a problematic video file. Thanks for your help!

    I have attached new logs from MG and RogueKiller.

    Regarding your other suggestions, I have now completely uninstalled the IObit programs. I thought Tune Up Utilities was a good way to keep my computer running smoothly. Should I reinstall that? If not, can you suggest another approach?

    Also, I still can't find the Norton item. Please tell me where it is so I can uninstall it.

    Thanks again!
     

    Attached Files:

  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Happy to hear it worked out.

    Most more advanced PC users ( like myself ) do not like these tools that much since we can do what they do on our own without having a bunch of processes/service loading everytime a PC starts up. However for less experience users these kinds of tools can be safer and easier.

    So you can reinstall and use Tune Up Utilities 2013 if you like it. Just don't reinstall Advance Systemcare from IObit on top of it. If you are going to use a tune up type program, use one and only one to avoid having too many processes running that will slow down startup and that can impact overall performance thus defeating the purpose of running them.

    I thought you said you had a version of this provide byToshiba. Perhaps I misunderstood. The Norton item I'm referring to is

    C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.13.11\ccSvcHst.exe

    And it loads at startup via the below service.

    O23 - Service: Common Client Job Manager Service (PCCUJobMgr) - Symantec Corporation - C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.13.11\ccSvcHst.exe

    I see the below in your Uninstall Programs List:

    NortonPCCheckup

    and per the info, it is going to show up as Toshiba Laptop Checkup so it does appear to come from Toshiba. Why do you need this if you are going to use Tune Up Utilities or vice versa?
     
  8. andipen

    andipen Private E-2

    Got it.
    Thanks again for your help. This forum is great!
     
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome.

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    2. Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
    3. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    4. If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    6. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    7. If you are running Win 8, Win 7, Vista, Windows XP or Windows ME, do the below to flush restore points:
      • Refer to the instructions for your WIndows version in this link: Disable And Enable System Restore
      • What we want you to do is to first disable System Restore to flush restore points some of which could be infected.
      • Then we want you to Enable System Restore to create a new clean Restore Point.
    8. After doing the above, you should work thru the below link:
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds