Unsure of what infected my PC and Slowing it down badly.

Discussion in 'Malware Help (A Specialist Will Reply)' started by PoignantStory, Dec 26, 2010.

  1. PoignantStory

    PoignantStory Private E-2

    Hey kestrel,
    I recently tried running my anti-virus norton and also malwarebtye and super anti spyware. Right now they would get stuck at this file C:\Windows\System32\sirenacm.dll and after awhile it will go to the blue screen(error).

    Hope you could advise me on what to do!

    Thanks and though norton not noticing any viruses but comp still seem slower than usual by quite a bit.Should i re-rn the malware procedure and have you take a look at the logs???:)
     
  2. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    You can re-run procedures however I don't think I am going to find any malware. If Norton has stopped complaining about these temp files then that is good.

    But what do you mean when you say
    What exactly gets stuck? Malware Bytes? SUPERantispyware? Norton?

    You need to be clear.
     
  3. PoignantStory

    PoignantStory Private E-2

    Hi kestrel, so sorry it's SUPERantispyware and norton. I would run the full scan and it stops at this file and stop responding following when i try to either close it or do nothing at all it would be at the blue screen after a while. That blue screen where they say it's an error. I heard people saying it's the blue screen of death.
     
  4. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Not sure what direction to head in next. Have you got any of those strange files in quarantine at the moment? The ones Norton kept/keeps finding?
     
  5. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    C:\Windows\System32\sirenacm.dll relates to an MSN messenger audio codec.
     
  6. PoignantStory

    PoignantStory Private E-2

    I see, currently nope i think im gonna uninstall my MSN! Thanks Kestrel! Thanks for everything =)))
    It seems like i have to send my pc for maintenace or some diagnostic ! It's still running really slowly. SIgh! But thank you for everything =))))
     
  7. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    You are welcome. I just wonder about those temp files... :confused

    If Norton is no longer flagging them then you can follow final steps. :)

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /uninstall
        • Notes: The space between the combofix" and the /uninstall, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
    3. Go back to step 6 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
    4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    5. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    6. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    7. Go to add/remove programs and uninstall HijackThis.
    8. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
      related to MGtools and some other items from our cleaning procedures.
    9. If you are running Win 7, Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures pointed to by step 7 of the READ ME
        for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    10. After doing the above, you should work thru the below link:
     
  8. PoignantStory

    PoignantStory Private E-2

    Hey kestrel,
    Before that just need some advice.Right now my pc is still running really slowing and right now? I can;t run any anti-virus or malware scans as it hangs halfway.Even for combofix. So was wondering if there was any troubleshooting for this! Sorry for bothering yet again!
     
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Copy the bold text below to notepad. Save it as fixme.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Make sure that you tell me if you receive a success message about adding the above
    to the registry. If you do not get a success message, it definitely did not work.
    Now reboot your PC. After reboot, locate and delete the below file if it exists:

    C:\Windows\system32\paint.exe


    Any change in performance? If not, see the below.

    I suggest that you uninstall Symantec Endpoint Protection ( see: http://www.symantec.com/business/support/index?page=content&id=TECH102261&locale=en_US ) Then reboot your PC and see how things are running. Symantec Endpoint Protection has been the cause of many slow PCs.

    Then run the below online scan from ESET and attach the requested log:

    Using ESET's Online Scanner
     
    Last edited: Jan 16, 2011
  10. PoignantStory

    PoignantStory Private E-2

    Hey,
    Chaslang Thank you for your quick reply! =) Will do! I did the ms paint thingy it was like magic!!!! THANK YOU SO MUCH!!

    However about the scanner it was scan when the screen turn blue(error) again! :cry
     
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    The only thing I see wrong from your logs is that you are basically out of disk space on your Windows boot drive which is a major problem. Your logs show the below for drive C
    Code:
    Drive C: 
    Description Local Fixed Disk 
    Compressed No 
    File System NTFS 
    Size 43.95 GB (47,185,915,904 bytes) 
    Free Space 1.28 GB (1,369,436,160 bytes) 
    Volume Name OS_Install 
    You cannot run your PC with so little free space on drive C. You need to cleanup and get at least 8 to 10 GB free to allow Windows to run more efficiently. Either that, or you need to reinstall your operating system on a larger hard disk so that you do not have this problem with being out of free disk space.
     
  12. PoignantStory

    PoignantStory Private E-2

    Hey chas! Yeah i understand my C drive is really packed! I tried deleting everything unneccessary it seems like the rest are required by the system or windows =( is there any method of solving it.!
    Btw as currently whenever i do a scan, Defrag after awhile my com would just freezes and hangs and go into the blue screen. I am unable to produce any log. Even running combofix puts my laptop into the blue screen thingy. I think it's time to send it for a repair i guess???
     
  13. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    If you cannot free up enough space to keep about 6 to 8 GB or so free, then you should purchase a new much larger drive to install Windows and your other programs onto. Windows does not take up 42 GB of hard disk space so you are using for lots of other stuff.

    You cannot run just about anything properly ( including defrag ) with so little free diskspace. Free up space or reinstall on a new larger drive.
     
  14. PoignantStory

    PoignantStory Private E-2

    Hey chas, I totally understand what you mean by that . Thank you for your help:) just one last thing as aforementioned the sirenacm.dll file my scans are all freezing there. So I did some researching on the topic and figured that I maybe corrupt and there are a couple of ways to solve them. And as I have exhausted all options and left with the replacement one . Could you advise me on where to get a safe file ??? Thanks I'm advance chas
     
  15. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You would be better off asking about this in the Software Forum but you could just try reinstalling MSN Messenger. There is a possibility that your scans are not freezing on this file at all. It could be that something that comes after it is the problem and you just don't even see the file name listed. You may want to run system file checker and perhaps check your hard disk for errors ( also topics for the Software Forum ;) )
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds