Super Slow Laptop...possible Malware???

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by aarond95, Feb 5, 2024.

  1. aarond95

    aarond95 Private E-2

    My normal laptop died, so while im deciding to get it fixed or buy a new one I have to use an older machine... The first time I tried to use it, it ran at a snails pace, so I ran CC cleaner, Malwarebytes, Defragged, ran a full suite of Iobit Advanced system care products. as well as uninstalled a bunch of programs.

    While this helped a little, it still runs very slow, and forget about running more than one thing. On a much older laptop, I was able to run VLC player, A Steam game, and Chrome with very little problems, on this one forgetabout it.

    So I ran all the scans and attached the logs to see if maybe some super malware is slowing me down. Any help would be greatly appreciated.

    P.s. I had some trouble with MGtools, I think the log is the procdll file as that is the one that popped up after the scan.
     

    Attached Files:

  2. Oh My!

    Oh My! Malware Expert Staff Member

    Greetings and welcome to the Major Geeks Malware Forum.

    While I review what you have posted please do this.

    ===================================================

    Farbar Recovery Scan Tool (FRST)

    --------------------
    • Download Farbar Recover Scan Tool for 64 bit systems and save(or copy and paste) the file onto your Desktop
    • Right click on the icon and select Run as administrator
    • Note: If you receive any warning about the download it is a false positive and you can ignore it. Click on More info to get the Run anyway option
    • Click Yes to the disclaimer
    • Click Scan and allow the program to run
    • Click OK on the Scan complete screen, then OK on the Addition.txt pop up screen
    • 2 Notepad documents should now be open on your desktop.
    • Please attempt to copy and paste each report in a separate reply. If unable to do so attach both reports.
    ===================================================

    Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it. :thumbsup2:

    • FRST.txt
    • Addition.txt
     
  3. aarond95

    aarond95 Private E-2

    Had to attach First.txt as it was over 4000 charaters.
     

    Attached Files:

  4. aarond95

    aarond95 Private E-2

    Addition.txt was also over 4000
     

    Attached Files:

  5. Oh My!

    Oh My! Malware Expert Staff Member

    Thank you for your patience.

    You have insufficient available memory to effectively run the computer.

    I recommend you remove Advanced System Care to free up resources.

    Please do these things.

    ===================================================

    Uninstalling Programs Using Revo Uninstaller Free Portable

    --------------------

    • Download Revo Uninstaller Free Portable and save it to your Desktop
    • Right click on the folder and select Extract All..., then click Extract
    • Double click on the RevoUninstaller-Portable folder
    • Right click on RevoUPort and select Run as administrator
    • Click OK on the License Agreement
    • From the list of programs double click on the listed program(s), or anything similar, to remove it (if it exists)
    Code:
    Advanced SystemCare
    Driver Booster 11
    IObit Uninstaller 13
    Smart Defrag 9
    
    • If the program's uninstaller appears work through the steps to remove the program(s)
    • Be sure the Advanced option is selected then click Scan
    • For each window that may appear identifying leftover items click Select All, Delete, then confirm the deletion
    • Once done click Finish
    • Reboot your computer
    ===================================================

    Farbar Recovery Scan Tool Fix

    --------------------
    • Right click on the FRST64 icon and select Run as administrator
    • Highlight the below information then hit the Ctrl + C keys at the same time and the text will be copied
    • There is no need to paste the information anywhere, FRST64 will do it for you
    Code:
    Start::
    SystemRestore: On
    CreateRestorePoint:
    CloseProcesses:
    File: C:\Program Files (x86)\ClnEF80.tmp
    Task: {0F316C9A-8F62-4B3E-AC8A-9DCB730CB90C} - System32\Tasks\Microsoft\Windows\Setup\PrivacyNotifier => %windir%\system32\PrivacyNotifier.exe  (No File) 
    FirewallRules: [{84A70928-0E3F-4217-8114-65FCB4479CCA}] => (Allow) C:\Users\Sjkel\AppData\Roaming\Zoom\bin\airhost.exe => No File 
    FirewallRules: [{0C465FF9-D4AC-44B4-B446-4238B1D049D3}] => (Allow) C:\Users\Sjkel\AppData\Roaming\Zoom\bin\airhost.exe => No File 
    Task: {0F316C9A-8F62-4B3E-AC8A-9DCB730CB90C} - System32\Tasks\Microsoft\Windows\Setup\PrivacyNotifier => %windir%\system32\PrivacyNotifier.exe  (No File) 
    S3 MpKsl74d89786; no ImagePath 
    cmd: net stop cryptsvc
    cmd: esentutl /p %systemroot%\System32\catroot2\F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
    cmd: net start cryptsvc
    cmd: bitsadmin /reset /allusers
    cmd: ipconfig /flushdns
    Removeproxy:
    hosts:
    cmd: sfc /scannow
    cmd: DISM /Online /Cleanup-Image /CheckHealth
    Emptytemp:
    End::
    
    • Click Fix
    • When completed the tool will create a log on the desktop called Fixlog.txt. Please copy and paste the contents of the file in your reply or, if too large attach it.
    • Note: The Emptytemp: command will remove cookies and may result in some websites (like banking) indicating they do not recognize your computer. It may be necessary to receive and apply a verification code.

    ===================================================

    Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it.
    • Programs removed?
    • Fixlog
     
  6. aarond95

    aarond95 Private E-2

    Fix result of Farbar Recovery Scan Tool (x64) Version: 03.02.2024 01
    Ran by Sjkel (06-02-2024 18:16:52) Run:1
    Running from C:\Users\Sjkel\OneDrive\Desktop
    Loaded Profiles: Sjkel
    Boot Mode: Normal
    ==============================================

    fixlist content:
    *****************
    Start::
    SystemRestore: On
    CreateRestorePoint:
    CloseProcesses:
    File: C:\Program Files (x86)\ClnEF80.tmp
    Task: {0F316C9A-8F62-4B3E-AC8A-9DCB730CB90C} - System32\Tasks\Microsoft\Windows\Setup\PrivacyNotifier => %windir%\system32\PrivacyNotifier.exe (No File)
    FirewallRules: [{84A70928-0E3F-4217-8114-65FCB4479CCA}] => (Allow) C:\Users\Sjkel\AppData\Roaming\Zoom\bin\airhost.exe => No File
    FirewallRules: [{0C465FF9-D4AC-44B4-B446-4238B1D049D3}] => (Allow) C:\Users\Sjkel\AppData\Roaming\Zoom\bin\airhost.exe => No File
    Task: {0F316C9A-8F62-4B3E-AC8A-9DCB730CB90C} - System32\Tasks\Microsoft\Windows\Setup\PrivacyNotifier => %windir%\system32\PrivacyNotifier.exe (No File)
    S3 MpKsl74d89786; no ImagePath
    cmd: net stop cryptsvc
    cmd: esentutl /p %systemroot%\System32\catroot2\F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
    cmd: net start cryptsvc
    cmd: bitsadmin /reset /allusers
    cmd: ipconfig /flushdns
    Removeproxy:
    hosts:
    cmd: sfc /scannow
    cmd: DISM /Online /Cleanup-Image /CheckHealth
    Emptytemp:
    End::
    *****************

    SystemRestore: On => completed
    Restore point was successfully created.
    Processes closed successfully.

    ========================= File: C:\Program Files (x86)\ClnEF80.tmp ========================

    C:\Program Files (x86)\ClnEF80.tmp
    File is digitally signed
    MD5: 13091342D4767A91FBB8DA6BC9D38BBB
    Creation and modification date: 2024-01-26 20:35 - 2023-06-27 19:34
    Size: 006181712
    Attributes: ----A
    Company Name: Citrix Systems, Inc. -> Citrix Systems, Inc.
    Internal Name: CtxInstall
    Original Name: CtxInstall.dll
    Product: Citrix Workspace
    Description: Citrix Workspace
    File Version: 23.5.1.83
    Product Version: 23.5.1
    Copyright: Copyright (c) 1990-2023 Citrix Systems, Inc.
    VirusTotal: https://www.virustotal.com/gui/file...c43aa0c6468fd7fa8fee11e216ce1673b9-1705689563

    ====== End of File: ======

    "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0F316C9A-8F62-4B3E-AC8A-9DCB730CB90C}" => removed successfully
    "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0F316C9A-8F62-4B3E-AC8A-9DCB730CB90C}" => removed successfully
    C:\WINDOWS\System32\Tasks\Microsoft\Windows\Setup\PrivacyNotifier => moved successfully
    "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\PrivacyNotifier" => removed successfully
    "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{84A70928-0E3F-4217-8114-65FCB4479CCA}" => removed successfully
    "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0C465FF9-D4AC-44B4-B446-4238B1D049D3}" => removed successfully
    "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0F316C9A-8F62-4B3E-AC8A-9DCB730CB90C}" => not found
    "C:\WINDOWS\System32\Tasks\Microsoft\Windows\Setup\PrivacyNotifier" => not found
    "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\PrivacyNotifier" => not found
    HKLM\System\CurrentControlSet\Services\MpKsl74d89786 => removed successfully
    MpKsl74d89786 => service removed successfully

    ========= net stop cryptsvc =========

    The Cryptographic Services service is stopping..
    The Cryptographic Services service was stopped successfully.



    ========= End of CMD: =========


    ========= esentutl /p %systemroot%\System32\catroot2\F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb =========


    Extensible Storage Engine Utilities for Microsoft(R) Windows(R)
    Version 10.0
    Copyright (C) Microsoft Corporation. All Rights Reserved.

    Error: Access to source database 'C:\WINDOWS\System32\catroot2\F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb' failed with Jet error -1811.

    Operation terminated with error -1811 (JET_errFileNotFound, File not found) after 0.219 seconds.





    ========= End of CMD: =========


    ========= net start cryptsvc =========

    The Cryptographic Services service is starting.
    The Cryptographic Services service was started successfully.



    ========= End of CMD: =========


    ========= bitsadmin /reset /allusers =========


    BITSADMIN version 3.0
    BITS administration utility.
    (C) Copyright Microsoft Corp.

    0 out of 0 jobs canceled.


    ========= End of CMD: =========


    ========= ipconfig /flushdns =========


    Windows IP Configuration

    Successfully flushed the DNS Resolver Cache.


    ========= End of CMD: =========


    ========= RemoveProxy: =========

    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => removed successfully
    "HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
    "HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully
    "HKU\S-1-5-21-1190119371-2959128332-2159474101-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
    "HKU\S-1-5-21-1190119371-2959128332-2159474101-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully


    ========= End of RemoveProxy: =========

    C:\Windows\System32\Drivers\etc\hosts => moved successfully
    Hosts restored successfully.

    ========= sfc /scannow =========



    Beginning system scan. This process will take some time.



    Beginning verification phase of system scan.


    Verification 0% complete.
    Verification 1% complete.
    Verification 1% complete.
    Verification 2% complete.
    Verification 2% complete.
    Verification 3% complete.
    Verification 4% complete.
    Verification 4% complete.
    Verification 5% complete.
    Verification 5% complete.
    Verification 6% complete.
    Verification 7% complete.
    Verification 7% complete.
    Verification 8% complete.
    Verification 8% complete.
    Verification 9% complete.
    Verification 10% complete.
    Verification 10% complete.
    Verification 11% complete.
    Verification 11% complete.
    Verification 12% complete.
    Verification 13% complete.
    Verification 13% complete.
    Verification 14% complete.
    Verification 14% complete.
    Verification 15% complete.
    Verification 16% complete.
    Verification 16% complete.
    Verification 17% complete.
    Verification 17% complete.
    Verification 18% complete.
    Verification 19% complete.
    Verification 19% complete.
    Verification 20% complete.
    Verification 20% complete.
    Verification 21% complete.
    Verification 22% complete.
    Verification 22% complete.
    Verification 23% complete.
    Verification 23% complete.
    Verification 24% complete.
    Verification 25% complete.
    Verification 25% complete.
    Verification 26% complete.
    Verification 26% complete.
    Verification 27% complete.
    Verification 28% complete.
    Verification 28% complete.
    Verification 29% complete.
    Verification 29% complete.
    Verification 30% complete.
    Verification 31% complete.
    Verification 31% complete.
    Verification 32% complete.
    Verification 32% complete.
    Verification 33% complete.
    Verification 34% complete.
    Verification 34% complete.
    Verification 35% complete.
    Verification 35% complete.
    Verification 36% complete.
    Verification 37% complete.
    Verification 37% complete.
    Verification 38% complete.
    Verification 38% complete.
    Verification 39% complete.
    Verification 40% complete.
    Verification 40% complete.
    Verification 41% complete.
    Verification 41% complete.
    Verification 42% complete.
    Verification 43% complete.
    Verification 43% complete.
    Verification 44% complete.
    Verification 44% complete.
    Verification 45% complete.
    Verification 46% complete.
    Verification 46% complete.
    Verification 47% complete.
    Verification 47% complete.
    Verification 48% complete.
    Verification 49% complete.
    Verification 49% complete.
    Verification 50% complete.
    Verification 50% complete.
    Verification 51% complete.
    Verification 52% complete.
    Verification 52% complete.
    Verification 53% complete.
    Verification 53% complete.
    Verification 54% complete.
    Verification 55% complete.
    Verification 55% complete.
    Verification 56% complete.
    Verification 56% complete.
    Verification 57% complete.
    Verification 57% complete.
    Verification 58% complete.
    Verification 59% complete.
    Verification 59% complete.
    Verification 60% complete.
    Verification 60% complete.
    Verification 61% complete.
    Verification 62% complete.
    Verification 62% complete.
    Verification 63% complete.
    Verification 63% complete.
    Verification 64% complete.
    Verification 65% complete.
    Verification 65% complete.
    Verification 66% complete.
    Verification 66% complete.
    Verification 67% complete.
    Verification 68% complete.
    Verification 68% complete.
    Verification 69% complete.
    Verification 69% complete.
    Verification 70% complete.
    Verification 71% complete.
    Verification 71% complete.
    Verification 72% complete.
    Verification 72% complete.
    Verification 73% complete.
    Verification 74% complete.
    Verification 74% complete.
    Verification 75% complete.
    Verification 75% complete.
    Verification 76% complete.
    Verification 77% complete.
    Verification 77% complete.
    Verification 78% complete.
    Verification 78% complete.
    Verification 79% complete.
    Verification 80% complete.
    Verification 80% complete.
    Verification 81% complete.
    Verification 81% complete.
    Verification 82% complete.
    Verification 83% complete.
    Verification 83% complete.
    Verification 84% complete.
    Verification 84% complete.
    Verification 85% complete.
    Verification 86% complete.
    Verification 86% complete.
    Verification 87% complete.
    Verification 87% complete.
    Verification 88% complete.
    Verification 89% complete.
    Verification 89% complete.
    Verification 90% complete.
    Verification 90% complete.
    Verification 91% complete.
    Verification 92% complete.
    Verification 92% complete.
    Verification 93% complete.
    Verification 93% complete.
    Verification 94% complete.
    Verification 95% complete.
    Verification 95% complete.
    Verification 96% complete.
    Verification 96% complete.
    Verification 97% complete.
    Verification 98% complete.
    Verification 98% complete.
    Verification 99% complete.
    Verification 99% complete.
    Verification 100% complete.


    Windows Resource Protection found corrupt files and successfully repaired them.

    For online repairs, details are included in the CBS log file located at

    windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline

    repairs, details are included in the log file provided by the /OFFLOGFILE flag.



    ========= End of CMD: =========


    ========= DISM /Online /Cleanup-Image /CheckHealth =========


    Deployment Image Servicing and Management tool
    Version: 10.0.19041.3636

    Image Version: 10.0.19045.3930

    No component store corruption detected.
    The operation completed successfully.


    ========= End of CMD: =========


    =========== EmptyTemp: ==========

    FlushDNS => completed
    BITS transfer queue => 1835008 B
    DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 26260788 B
    Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 346385626 B
    Windows/system/drivers => 198220120 B
    Edge => 0 B
    Chrome => 39242712 B
    Firefox => 57679963 B
    Opera => 0 B

    Temp, IE cache, history, cookies, recent:
    Default => 6656 B
    ProgramData => 6656 B
    Public => 6656 B
    systemprofile => 20939543 B
    systemprofile32 => 20940379 B
    LocalService => 20943373 B
    NetworkService => 20946883 B
    Sjkel => 243732515 B
    defaultuser100000 => 243739171 B
    defaultuser100000.LAPTOP-T7CCMSH8 => 244245763 B
    defaultuser100001 => 255329589 B
    defaultuser100000.LAPTOP-T7CCMSH8.000 => 255880080 B
    defaultuser1 => 256430571 B
    defaultuser1.LAPTOP-T7CCMSH8 => 256981062 B
    defaultuser1.LAPTOP-T7CCMSH8.000 => 257032487 B
    defaultuser1.LAPTOP-T7CCMSH8.001 => 257582978 B

    RecycleBin => 0 B
    EmptyTemp: => 2.8 GB temporary data Removed.

    ================================


    The system needed a reboot.

    ==== End of Fixlog 18:53:37 ====
     
  7. Oh My!

    Oh My! Malware Expert Staff Member

    Were you able to uninstall the programs?

    Any difference in computer performance?
     
  8. aarond95

    aarond95 Private E-2

    Sorry, yes I uninstalled them, but honestly I don’t see much of a difference other than faster startup. When trying to run more than one program I’m still experiencing a major slow down.
     
  9. Oh My!

    Oh My! Malware Expert Staff Member

    Please test the performance in Safe Mode. You probably won't have internet access but see how other things run.
     
  10. aarond95

    aarond95 Private E-2

    Restarted in safe mode and it seems worse if you can believe it. It is a little hard to tell with no internet and also couldn’t use my 2nd monitor. But I tried to run a game on Steam, and that was a no-go, kept freezing. Steam isn’t really important, but I need to be able to run video and chrome with multiple browsers with minimal slowdown. I’m at a loss.
     
  11. Oh My!

    Oh My! Malware Expert Staff Member

    Please run a FRST Scan in Safe Mode and attach the reports.
     
  12. aarond95

    aarond95 Private E-2

    I will say that the scan ran much quicker this time... still too long to copy and paste so I attached them both in this post.
     

    Attached Files:

  13. Oh My!

    Oh My! Malware Expert Staff Member

    Thank you.

    Your memory usage is significantly lower.

    I am ending for the evening but I will be replying in the morning. There are some things I need to investigate further.
     
  14. aarond95

    aarond95 Private E-2

    Thanks!
     
  15. Oh My!

    Oh My! Malware Expert Staff Member

    Thank you for your patience.

    There were some "defaultuser" entries I wanted to investigate to determine whether or not dealing with them would enhance performance. The answer is no.

    As you mentioned previously, this is an older computer and the components can only do so much. Limited RAM, an old processor and a hard drive that is 9 years old.

    Before I suggest anything else I would like to repeat the Safe Mode step to see if you still have the type of performance issues you previously reported. Usually operating in Safe Mode significantly improves computer responsiveness. In your case it didn't and even froze.

    If the Safe Mode performance is still bad please do this after booting into Normal Boot.

    ===================================================

    GSmartControl for Windows - Portable

    -------------------
    • Download GSmartControl for Windows - Portable and save it to your desktop
    • Right click on gsmartcontrol.zip icon and select Extract All... then Extract
    • Double click on the gsmartcontrol folder
    • Right click on gsmartcontrol.exe (not .manifest) and select Run as administrator
    • Allow the program to search for and list your hard drive(s)
    • Double click your drive C: drive
    • Go to the Self-tests tab
    • Make sure that the Test Type is set to Short Self-test
    • Click the Execute button
    • After the test completes, click the View Output button and copy and paste the contents in your reply
    ===================================================

    Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it.
    • Results?
     
  16. aarond95

    aarond95 Private E-2

    Safemode was pretty much the same, but mostly the issue was with trying to run steam. would putting it on an external hard drive help? Also unrelated...My other laptop died which is why I am dealing with this one. the screen just went black and when I would turn it off it would restart itself. I took out the battery and set it aside for a few days. I just tried to turn it on again but still the black screen,(i even plugged it into my external monitor, but its not detecting anything.) but it doesn't try to restart itself anymore. Any Ideas? The results of the GSctrl scan are below.

    smartctl 6.6 2017-11-05 r4594 [x86_64-w64-mingw32-w10-b19045] (sf-6.6-1)
    Copyright (C) 2002-17, Bruce Allen, Christian Franke, www.smartmontools.org

    === START OF INFORMATION SECTION ===
    Model Family: Toshiba 2.5" HDD MQ01ABF...
    Device Model: TOSHIBA MQ01ABF050
    Serial Number: Z7APTOGUT
    LU WWN Device Id: 5 000039 831c03cb3
    Firmware Version: AM0P4C
    User Capacity: 500,107,862,016 bytes [500 GB]
    Sector Sizes: 512 bytes logical, 4096 bytes physical
    Rotation Rate: 5400 rpm
    Form Factor: 2.5 inches
    Device is: In smartctl database [for details use: -P show]
    ATA Version is: ATA8-ACS (minor revision not indicated)
    SATA Version is: SATA 3.0, 6.0 Gb/s (current: 6.0 Gb/s)
    Local Time is: Wed Feb 07 12:18:17 2024 EST
    SMART support is: Available - device has SMART capability.
    SMART support is: Enabled
    AAM feature is: Unavailable
    APM level is: 128 (minimum power consumption without standby)
    Rd look-ahead is: Enabled
    Write cache is: Enabled
    DSN feature is: Unavailable
    ATA Security is: Disabled, frozen [SEC2]

    === START OF READ SMART DATA SECTION ===
    SMART overall-health self-assessment test result: PASSED

    General SMART Values:
    Offline data collection status: (0x00) Offline data collection activity
    was never started.
    Auto Offline Data Collection: Disabled.
    Self-test execution status: ( 0) The previous self-test routine completed
    without error or no self-test has ever
    been run.
    Total time to complete Offline
    data collection: ( 120) seconds.
    Offline data collection
    capabilities: (0x51) SMART execute Offline immediate.
    No Auto Offline data collection support.
    Suspend Offline collection upon new
    command.
    No Offline surface scan supported.
    Self-test supported.
    No Conveyance Self-test supported.
    Selective Self-test supported.
    SMART capabilities: (0x0003) Saves SMART data before entering
    power-saving mode.
    Supports SMART auto save timer.
    Error logging capability: (0x01) Error logging supported.
    General Purpose Logging supported.
    Short self-test routine
    recommended polling time: ( 2) minutes.
    Extended self-test routine
    recommended polling time: ( 101) minutes.
    SCT capabilities: (0x003d) SCT Status supported.
    SCT Error Recovery Control supported.
    SCT Feature Control supported.
    SCT Data Table supported.

    SMART Attributes Data Structure revision number: 16
    Vendor Specific SMART Attributes with Thresholds:
    ID# ATTRIBUTE_NAME FLAGS VALUE WORST THRESH FAIL RAW_VALUE
    1 Raw_Read_Error_Rate POSR-K 100 100 050 - 0
    2 Throughput_Performance POS--K 100 100 050 - 0
    3 Spin_Up_Time PO---K 100 100 002 - 1332
    4 Start_Stop_Count -O--CK 100 100 000 - 3555
    5 Reallocated_Sector_Ct PO--CK 100 100 010 - 0
    7 Seek_Error_Rate POSR-K 100 100 050 - 0
    8 Seek_Time_Performance P-S--K 100 100 050 - 0
    9 Power_On_Hours -O--CK 045 045 000 - 22183
    10 Spin_Retry_Count PO--CK 170 100 030 - 0
    12 Power_Cycle_Count -O--CK 100 100 000 - 3533
    183 Runtime_Bad_Block -O--CK 100 100 001 - 0
    184 End-to-End_Error PO--CK 100 100 097 - 0
    185 Unknown_Attribute -O--CK 100 100 001 - 65535
    187 Reported_Uncorrect -O--CK 100 100 000 - 0
    188 Command_Timeout -O--CK 100 098 000 - 278
    189 High_Fly_Writes -O-RCK 100 100 001 - 0
    190 Airflow_Temperature_Cel -O---K 073 059 040 - 27 (Min/Max 14/27)
    191 G-Sense_Error_Rate -O--CK 100 100 000 - 363
    192 Power-Off_Retract_Count -O---K 100 100 000 - 10879142
    193 Load_Cycle_Count -O--CK 041 041 000 - 596715
    194 Temperature_Celsius -O---K 073 059 040 - 27 (Min/Max 14/27)
    196 Reallocated_Event_Count -O--CK 100 100 000 - 0
    197 Current_Pending_Sector -O--CK 100 100 000 - 0
    199 UDMA_CRC_Error_Count -O--CK 200 200 000 - 0
    ||||||_ K auto-keep
    |||||__ C event count
    ||||___ R error rate
    |||____ S speed/performance
    ||_____ O updated online
    |______ P prefailure warning

    General Purpose Log Directory Version 1
    SMART Log Directory Version 1 [multi-sector log support]
    Address Access R/W Size Description
    0x00 GPL,SL R/O 1 Log Directory
    0x01 SL R/O 1 Summary SMART error log
    0x02 SL R/O 51 Comprehensive SMART error log
    0x03 GPL R/O 64 Ext. Comprehensive SMART error log
    0x04 GPL,SL R/O 8 Device Statistics log
    0x06 SL R/O 1 SMART self-test log
    0x07 GPL R/O 1 Extended self-test log
    0x09 SL R/W 1 Selective self-test log
    0x10 GPL R/O 1 NCQ Command Error log
    0x11 GPL R/O 1 SATA Phy Event Counters log
    0x80-0x9f GPL,SL R/W 16 Host vendor specific log
    0xe0 GPL,SL R/W 1 SCT Command/Status
    0xe1 GPL,SL R/W 1 SCT Data Transfer

    SMART Extended Comprehensive Error Log Version: 1 (64 sectors)
    No Errors Logged

    SMART Extended Self-test Log Version: 1 (1 sectors)
    Num Test_Description Status Remaining LifeTime(hours) LBA_of_first_error
    # 1 Short offline Completed without error 00% 22183 -

    SMART Selective self-test log data structure revision number 1
    SPAN MIN_LBA MAX_LBA CURRENT_TEST_STATUS
    1 0 0 Not_testing
    2 0 0 Not_testing
    3 0 0 Not_testing
    4 0 0 Not_testing
    5 0 0 Not_testing
    Selective self-test flags (0x0):
    After scanning selected spans, do NOT read-scan remainder of disk.
    If Selective self-test is pending on power-up, resume after 0 minute delay.

    SCT Status Version: 2
    SCT Version (vendor specific): 1 (0x0001)
    SCT Support Level: 1
    Device State: Active (0)
    Current Temperature: 27 Celsius
    Power Cycle Min/Max Temperature: 14/27 Celsius
    Lifetime Min/Max Temperature: 13/41 Celsius
    Under/Over Temperature Limit Count: 0/0

    SCT Temperature History Version: 2
    Temperature Sampling Period: 1 minute
    Temperature Logging Interval: 1 minute
    Min/Max recommended Temperature: 0/60 Celsius
    Min/Max Temperature Limit: 0/60 Celsius
    Temperature History Size (Index): 478 (59)

    Index Estimated Time Temperature Celsius
    60 2024-02-07 04:21 27 ********
    ... ..( 62 skipped). .. ********
    123 2024-02-07 05:24 27 ********
    124 2024-02-07 05:25 28 *********
    125 2024-02-07 05:26 28 *********
    126 2024-02-07 05:27 29 **********
    127 2024-02-07 05:28 29 **********
    128 2024-02-07 05:29 29 **********
    129 2024-02-07 05:30 28 *********
    ... ..( 36 skipped). .. *********
    166 2024-02-07 06:07 28 *********
    167 2024-02-07 06:08 27 ********
    ... ..( 2 skipped). .. ********
    170 2024-02-07 06:11 27 ********
    171 2024-02-07 06:12 28 *********
    172 2024-02-07 06:13 28 *********
    173 2024-02-07 06:14 29 **********
    174 2024-02-07 06:15 30 ***********
    175 2024-02-07 06:16 30 ***********
    176 2024-02-07 06:17 29 **********
    ... ..( 2 skipped). .. **********
    179 2024-02-07 06:20 29 **********
    180 2024-02-07 06:21 28 *********
    ... ..( 2 skipped). .. *********
    183 2024-02-07 06:24 28 *********
    184 2024-02-07 06:25 29 **********
    185 2024-02-07 06:26 28 *********
    ... ..( 9 skipped). .. *********
    195 2024-02-07 06:36 28 *********
    196 2024-02-07 06:37 27 ********
    197 2024-02-07 06:38 28 *********
    198 2024-02-07 06:39 27 ********
    199 2024-02-07 06:40 28 *********
    200 2024-02-07 06:41 27 ********
    ... ..( 13 skipped). .. ********
    214 2024-02-07 06:55 27 ********
    215 2024-02-07 06:56 28 *********
    216 2024-02-07 06:57 28 *********
    217 2024-02-07 06:58 29 **********
    218 2024-02-07 06:59 30 ***********
    ... ..( 8 skipped). .. ***********
    227 2024-02-07 07:08 30 ***********
    228 2024-02-07 07:09 31 ************
    229 2024-02-07 07:10 31 ************
    230 2024-02-07 07:11 32 *************
    ... ..( 3 skipped). .. *************
    234 2024-02-07 07:15 32 *************
    235 2024-02-07 07:16 33 **************
    ... ..( 5 skipped). .. **************
    241 2024-02-07 07:22 33 **************
    242 2024-02-07 07:23 34 ***************
    ... ..( 9 skipped). .. ***************
    252 2024-02-07 07:33 34 ***************
    253 2024-02-07 07:34 35 ****************
    ... ..( 12 skipped). .. ****************
    266 2024-02-07 07:47 35 ****************
    267 2024-02-07 07:48 36 *****************
    ... ..( 7 skipped). .. *****************
    275 2024-02-07 07:56 36 *****************
    276 2024-02-07 07:57 35 ****************
    277 2024-02-07 07:58 36 *****************
    ... ..( 15 skipped). .. *****************
    293 2024-02-07 08:14 36 *****************
    294 2024-02-07 08:15 35 ****************
    ... ..( 10 skipped). .. ****************
    305 2024-02-07 08:26 35 ****************
    306 2024-02-07 08:27 34 ***************
    ... ..( 4 skipped). .. ***************
    311 2024-02-07 08:32 34 ***************
    312 2024-02-07 08:33 35 ****************
    ... ..( 9 skipped). .. ****************
    322 2024-02-07 08:43 35 ****************
    323 2024-02-07 08:44 34 ***************
    ... ..( 17 skipped). .. ***************
    341 2024-02-07 09:02 34 ***************
    342 2024-02-07 09:03 35 ****************
    ... ..( 3 skipped). .. ****************
    346 2024-02-07 09:07 35 ****************
    347 2024-02-07 09:08 34 ***************
    ... ..( 6 skipped). .. ***************
    354 2024-02-07 09:15 34 ***************
    355 2024-02-07 09:16 33 **************
    356 2024-02-07 09:17 33 **************
    357 2024-02-07 09:18 32 *************
    358 2024-02-07 09:19 32 *************
    359 2024-02-07 09:20 32 *************
    360 2024-02-07 09:21 31 ************
    361 2024-02-07 09:22 31 ************
    362 2024-02-07 09:23 30 ***********
    ... ..( 8 skipped). .. ***********
    371 2024-02-07 09:32 30 ***********
    372 2024-02-07 09:33 29 **********
    ... ..( 4 skipped). .. **********
    377 2024-02-07 09:38 29 **********
    378 2024-02-07 09:39 30 ***********
    379 2024-02-07 09:40 30 ***********
    380 2024-02-07 09:41 30 ***********
    381 2024-02-07 09:42 29 **********
    382 2024-02-07 09:43 29 **********
    383 2024-02-07 09:44 29 **********
    384 2024-02-07 09:45 28 *********
    385 2024-02-07 09:46 29 **********
    386 2024-02-07 09:47 29 **********
    387 2024-02-07 09:48 29 **********
    388 2024-02-07 09:49 28 *********
    ... ..( 16 skipped). .. *********
    405 2024-02-07 10:06 28 *********
    406 2024-02-07 10:07 27 ********
    407 2024-02-07 10:08 28 *********
    408 2024-02-07 10:09 28 *********
    409 2024-02-07 10:10 29 **********
    410 2024-02-07 10:11 30 ***********
    ... ..( 5 skipped). .. ***********
    416 2024-02-07 10:17 30 ***********
    417 2024-02-07 10:18 ? -
    418 2024-02-07 10:19 30 ***********
    419 2024-02-07 10:20 31 ************
    420 2024-02-07 10:21 31 ************
    421 2024-02-07 10:22 31 ************
    422 2024-02-07 10:23 32 *************
    423 2024-02-07 10:24 32 *************
    424 2024-02-07 10:25 33 **************
    ... ..( 10 skipped). .. **************
    435 2024-02-07 10:36 33 **************
    436 2024-02-07 10:37 32 *************
    ... ..( 2 skipped). .. *************
    439 2024-02-07 10:40 32 *************
    440 2024-02-07 10:41 ? -
    441 2024-02-07 10:42 31 ************
    442 2024-02-07 10:43 32 *************
    443 2024-02-07 10:44 32 *************
    444 2024-02-07 10:45 33 **************
    ... ..( 4 skipped). .. **************
    449 2024-02-07 10:50 33 **************
    450 2024-02-07 10:51 32 *************
    ... ..( 4 skipped). .. *************
    455 2024-02-07 10:56 32 *************
    456 2024-02-07 10:57 31 ************
    ... ..( 2 skipped). .. ************
    459 2024-02-07 11:00 31 ************
    460 2024-02-07 11:01 30 ***********
    ... ..( 3 skipped). .. ***********
    464 2024-02-07 11:05 30 ***********
    465 2024-02-07 11:06 29 **********
    ... ..( 3 skipped). .. **********
    469 2024-02-07 11:10 29 **********
    470 2024-02-07 11:11 28 *********
    471 2024-02-07 11:12 28 *********
    472 2024-02-07 11:13 28 *********
    473 2024-02-07 11:14 29 **********
    474 2024-02-07 11:15 29 **********
    475 2024-02-07 11:16 28 *********
    ... ..( 8 skipped). .. *********
    6 2024-02-07 11:25 28 *********
    7 2024-02-07 11:26 29 **********
    8 2024-02-07 11:27 29 **********
    9 2024-02-07 11:28 30 ***********
    10 2024-02-07 11:29 30 ***********
    11 2024-02-07 11:30 31 ************
    12 2024-02-07 11:31 31 ************
    13 2024-02-07 11:32 31 ************
    14 2024-02-07 11:33 32 *************
    15 2024-02-07 11:34 32 *************
    16 2024-02-07 11:35 32 *************
    17 2024-02-07 11:36 33 **************
    ... ..( 9 skipped). .. **************
    27 2024-02-07 11:46 33 **************
    28 2024-02-07 11:47 34 ***************
    29 2024-02-07 11:48 33 **************
    ... ..( 5 skipped). .. **************
    35 2024-02-07 11:54 33 **************
    36 2024-02-07 11:55 ? -
    37 2024-02-07 11:56 15 -
    38 2024-02-07 11:57 16 -
    39 2024-02-07 11:58 18 -
    40 2024-02-07 11:59 19 -
    41 2024-02-07 12:00 19 -
    42 2024-02-07 12:01 20 *
    43 2024-02-07 12:02 21 **
    44 2024-02-07 12:03 22 ***
    45 2024-02-07 12:04 22 ***
    46 2024-02-07 12:05 23 ****
    47 2024-02-07 12:06 23 ****
    48 2024-02-07 12:07 24 *****
    ... ..( 2 skipped). .. *****
    51 2024-02-07 12:10 24 *****
    52 2024-02-07 12:11 25 ******
    53 2024-02-07 12:12 25 ******
    54 2024-02-07 12:13 25 ******
    55 2024-02-07 12:14 26 *******
    ... ..( 2 skipped). .. *******
    58 2024-02-07 12:17 26 *******
    59 2024-02-07 12:18 27 ********

    SCT Error Recovery Control:
    Read: Disabled
    Write: Disabled

    Device Statistics (GP Log 0x04)
    Page Offset Size Value Flags Description
    0x01 ===== = = === == General Statistics (rev 2) ==
    0x01 0x008 4 3533 --- Lifetime Power-On Resets
    0x01 0x010 4 22183 --- Power-on Hours
    0x01 0x018 6 43121439137 --- Logical Sectors Written
    0x01 0x020 6 655929875 --- Number of Write Commands
    0x01 0x028 6 75598898786 --- Logical Sectors Read
    0x01 0x030 6 1065339505 --- Number of Read Commands
    0x02 ===== = = === == Free-Fall Statistics (rev 1) ==
    0x02 0x010 4 363 --- Overlimit Shock Events
    0x03 ===== = = === == Rotating Media Statistics (rev 1) ==
    0x03 0x008 4 298 --- Spindle Motor Power-on Hours
    0x03 0x010 4 20614 --- Head Flying Hours
    0x03 0x018 4 596715 --- Head Load Events
    0x03 0x020 4 0 --- Number of Reallocated Logical Sectors
    0x03 0x028 4 0 --- Read Recovery Attempts
    0x03 0x030 4 0 --- Number of Mechanical Start Failures
    0x04 ===== = = === == General Errors Statistics (rev 1) ==
    0x04 0x008 4 0 --- Number of Reported Uncorrectable Errors
    0x04 0x010 4 278 --- Resets Between Cmd Acceptance and Completion
    0x05 ===== = = === == Temperature Statistics (rev 1) ==
    0x05 0x008 1 27 --- Current Temperature
    0x05 0x010 1 30 N-- Average Short Term Temperature
    0x05 0x018 1 28 N-- Average Long Term Temperature
    0x05 0x020 1 41 --- Highest Temperature
    0x05 0x028 1 13 --- Lowest Temperature
    0x05 0x030 1 35 N-- Highest Average Short Term Temperature
    0x05 0x038 1 25 N-- Lowest Average Short Term Temperature
    0x05 0x040 1 30 N-- Highest Average Long Term Temperature
    0x05 0x048 1 26 N-- Lowest Average Long Term Temperature
    0x05 0x050 4 0 --- Time in Over-Temperature
    0x05 0x058 1 60 --- Specified Maximum Operating Temperature
    0x05 0x060 4 0 --- Time in Under-Temperature
    0x05 0x068 1 0 --- Specified Minimum Operating Temperature
    0x06 ===== = = === == Transport Statistics (rev 1) ==
    0x06 0x008 4 9850 --- Number of Hardware Resets
    0x06 0x018 4 0 --- Number of Interface CRC Errors
    0x07 ===== = = === == Solid State Device Statistics (rev 1) ==
    0x07 0x008 1 36 N-- Percentage Used Endurance Indicator
    |||_ C monitored condition met
    ||__ D supports DSN
    |___ N normalized value

    SATA Phy Event Counters (GP Log 0x11)
    ID Size Value Description
    0x0001 4 0 Command failed due to ICRC error
    0x0002 4 0 R_ERR response for data FIS
    0x0003 4 0 R_ERR response for device-to-host data FIS
    0x0004 4 0 R_ERR response for host-to-device data FIS
    0x0005 4 0 R_ERR response for non-data FIS
    0x0006 4 0 R_ERR response for device-to-host non-data FIS
    0x0007 4 0 R_ERR response for host-to-device non-data FIS
    0x0008 4 0 Device-to-host non-data FIS retries
    0x0009 4 25612 Transition from drive PhyRdy to drive PhyNRdy
    0x000a 4 1 Device-to-host register FISes sent due to a COMRESET
    0x000b 4 0 CRC errors within host-to-device FIS
    0x000d 4 0 Non-CRC errors within host-to-device FIS
    0x000f 4 0 R_ERR response for host-to-device data FIS, CRC
    0x0010 4 0 R_ERR response for host-to-device data FIS, non-CRC
    0x0012 4 0 R_ERR response for host-to-device non-data FIS, CRC
    0x0013 4 0 R_ERR response for host-to-device non-data FIS, non-CRC
     
  17. Oh My!

    Oh My! Malware Expert Staff Member

    Another hard drive will not help.

    If you don't try to run Steam does the computer perform as you would expect in light of how old it is?

    As far as the other computer, we should start a new topic if/when you are ready to look at that one. Just post what you did above and we will go from there. No need to include any reports.
     
  18. aarond95

    aarond95 Private E-2

    Yeah it’s fine for my work needs now. I’ll start another topic for the other laptop.
     
  19. Oh My!

    Oh My! Malware Expert Staff Member

    Because of the performance in Safe Mode, the most streamlined boot option, there isn't much hope to improve the performance.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds