PC very slow with possable Virus

emjga · Apr 20, 2011

Folks

My newish (6 months) Windows 7 has just started to run very slow.
E.g Reboot takes about 30 minutes

Once up and running the machine is very slow.

I have read the READ & RUN ME FIRST. Malware Removal Guide
and have action all items.

I have read the Vista & Windows 7 Malware Removal/Cleaning Procedure
and have actioned all items.

1. Super AntiSpyware - Done and log file attached
2. MB - Done note I all ready had MB installed and run this first , so 2nd run did not pick up any item. Log files from both runs attached
3. Combofix - Done and log file attached
4. Rootrepeal - Failes on write / read error's , log file attached
5. MGTools - Done and log file attached.

Can some kind sole take a look at these logs and advise where to go from here.

Thanks

Matt

P.S log files have been upload as a ZIP file to save on 3 different posts and bumping the post.

Kestrel13! · Apr 20, 2011

Currently reviewing those logs and will get back to you with a response soon!

emjga · Apr 20, 2011

Kestrel13

I think I have a very big apologies for wasting your time. :-o

I thought it was very odd the PC took so long to boot at the BIOS level
So I powered down and removed all external USB devices except Keyboard and mouse

Guess what PC come up in 1 minute like normal.

Traced the fault to a external USB Powered Hub
It seems if I plug in to one certain port and then power on the boot time takes 30 minutes

If I don't use that port it takes 1 minute
So it now has a bit of black tape on that port

I will let you review the logs but I suspect they might well be clean.

Once again sorry

Matt

Kestrel13! · Apr 20, 2011

Not to worry.

C:\Users\Uosa\AppData\Local\BreakSoft <--- Delete this folder.

Java(TM) 6 Update 10 <--- uninstall as it is outdated and you have the current version already.

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080 <--- Did you deliberately set this proxy?

emjga · Apr 21, 2011

Have deleted this
C:\Users\Uosa\AppData\Local\BreakSoft <--- Delete this folder.

Have uninstalled this version
Java(TM) 6 Update 10 <--- uninstall as it is outdated and you have the current version already.

Yes some time I use Identity Cloaker that uses this proxy address
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080 <--- Did you deliberately set this proxy?

Matt

Kestrel13! · Apr 21, 2011

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /uninstall

Notes: The space between the combofix" and the /uninstall, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Go back to step 6 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
related to MGtools and some other items from our cleaning procedures.

If you are running Win 7, Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning procedures pointed to by step 7 of the READ ME
for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Log in or Sign up

PC very slow with possable Virus

emjga Private E-2

Attached Files:

antivirus log.zip

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

emjga Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

emjga Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member