Still running slow 1/2

eleasmom · Apr 23, 2011

I "upgraded" my brother a few months ago, and gave him my old computer. It was running just fine when I gave it to him. I set up with just him as administrator, and his kids as "users." Of course, my nephew pretty quickly figured out the admin password, and god knows what he installed. In any case, the computer barfed up its intestines a few days ago.

It started out about a month ago, when it was "running so slow I can't actually use it." I told him to do a virus check, and then didn't hear anything back. Well, apparently last week he clicked on the "update your windows" screen popup, and then a "big screen saying my RAM is bad and order it here" came up. After that, things got worse, to the point that I had to actually re-install Windows from the recovery disk this morning.

I ran all of the stuff from Read Me First, and I've attached the logs to this and the next post. It's still "running slow," but not nearly as bad as it apparently was a month ago. At this point I don't know if it's a virus or if it actually is bad RAM. So, I woudl be eternally grateful if someone would look at my logs and let me know if it's clean.

eleasmom · Apr 23, 2011

Re: Still running slow 2/2

Here's the second log upload.

TimW · Apr 24, 2011

The scans took care of all the malware on your system, the rest of your logs are clean. I suggest you go back and change the Admin. account and your account passwords and make them much stronger. You should also install SP3.

You might want to post in the software forum regarding your slowness issues.

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real time protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.We recommend them for doing backup scans when you suspect a malware infection.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /uninstall

Notes: The space between the combofix" and the /uninstall, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Go back to step 6 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

If you are running Win 7, Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning procedures pointed to by step 7 of the READ ME
for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Malware removal from a National Chain = $149
Malware removal from MajorGeeks = $0

Help Support MajorGeeks
Buy Discounted Software @ Majorgeeks Store. Giveaways Too!

Majorgeeks Geek Wear. Hats, T-Shirts, Hoodies

MajorGeeks on FaceBook

eleasmom · Apr 24, 2011

Thank you *so* very much for looking at the logs. I love good news. I've already removed my brother as admin, and put myself as the only admin on the computer. Poor kids, can't install their elf bowling or penguin racing any more. Too bad. I'll get it to SP3 next time I'm over there.

Hugs, kisses, and great big chocolate-chip cookies for helping.

Donna

TimW · Apr 25, 2011

You are most welcome. Safe surfing.

Log in or Sign up

Still running slow 1/2

eleasmom Private E-2

Attached Files:

malware log 423.txt

SASlog423.txt

rrlog two423.txt

ComboFix.txt

eleasmom Private E-2

Attached Files:

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

eleasmom Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member