Very Slow Laptop

Discussion in 'Malware Help (A Specialist Will Reply)' started by Diogenes88, Jun 12, 2017.

  1. Diogenes88

    Diogenes88 Private E-2

    Hi,
    I'm using an Acer i5-4200U laptop running Windows 10 Home. It's running very, very slowly...especially noticeable when I double-click to start an application or even try to open a folder on my desktop. I'm not sure if the computer is just too old, or if some kind of virus/malware/etc is to blame.
    I'd really appreciate your help.
    Thanks.
     

    Attached Files:

    Diogenes88, Jun 12, 2017
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Rerun Hitman and remove the two items it found.

    Next, rerun RogueKiller and remove these items:

    ¤¤¤ Processes : 2 ¤¤¤
    [PUP.HackTool|Suspicious.Path|VT.Hktl.Kms.Gen!c] KMS-R@1n.exe(2300) -- C:\Windows\KMS-R@1n.exe[-] -> Found
    [PUP.HackTool|Suspicious.Path|VT.Hktl.Kms.Gen!c] (SVC) KMS-R@1n -- C:\Windows\KMS-R@1n.exe[-] -> Found

    ¤¤¤ Registry : 9 ¤¤¤
    [PUP.HackTool|Suspicious.Path|VT.Hktl.Kms.Gen!c] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\KMS-R@1n (C:\Windows\KMS-R@1n.exe) -> Found
    [PUP.HackTool|Suspicious.Path|VT.Hktl.Kms.Gen!c] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {F6AC38BE-D9CE-46B3-8105-43439298097E} : v2.25|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|LPort=1688|App=C:\Windows\KMS-R@1n.exe|Name=KMS-R@1n| [-] -> Found
    [PUP.HackTool|Suspicious.Path|VT.Hktl.Kms.Gen!c] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {E500573C-D8E3-441F-BB79-C7B6988F749C} : v2.25|Action=Allow|Active=TRUE|Dir=In|Protocol=6|LPort=1688|App=C:\Windows\KMS-R@1n.exe|Name=KMS-R@1n| [-] -> Found
    [PUP.HackTool|Suspicious.Path|VT.Troj.Generic!c] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\OSppSvc.exe | Debugger : KMS-R@1nHook.exe [-] -> Found
    [PUP.HackTool|Suspicious.Path|VT.Troj.Generic!c] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SppExtComObj.exe | Debugger : KMS-R@1nHook.exe [-] -> Found
    [PUP.HackTool|Suspicious.Path|VT.Troj.Generic!c] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\OSppSvc.exe | Debugger : KMS-R@1nHook.exe [-] -> Found
    [PUP.HackTool|Suspicious.Path|VT.Troj.Generic!c] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SppExtComObj.exe | Debugger : KMS-R@1nHook.exe [-] -> Found

    ¤¤¤ Files : 2 ¤¤¤
    [PUP.HackTool][File] C:\Windows\KMS-R@1n.exe -> Found
    [PUP.HackTool][File] C:\Windows\KMS-R@1nHook.exe -> Found

    Reboot and rescan with both Hitman and RogueKiller and attach the new logs.
     
    TimW, Jun 12, 2017
    #2
  3. Diogenes88

    Diogenes88 Private E-2

    I did as you instructed. Here are the requested logs.
    Thanks again for your help.
     

    Attached Files:

    Diogenes88, Jun 13, 2017
    #3
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Looks good ...... how are things running now?
     
    TimW, Jun 13, 2017
    #4
  5. Diogenes88

    Diogenes88 Private E-2

    There's some improvement, mostly in Internet browsing; it starts up faster and doesn't pause so much when opening new tabs. But the improvement in opening Office docs appears to be minimal. I've tried disabling the quick-launch features in the taskbar and all but Windows Defender in the startup tab of the task manager, but those actions don't appear to be affecting speed much either. Perhaps it's simply time for an upgrade, as I'm guessing that 4gb of RAM just doesn't cut it nowadays.

    I really appreciate the speedy and knowledgeable way you've helped me here. Thank you so much!
     
    Diogenes88, Jun 13, 2017
    #5
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I suggest that you post in the software forum for additional assistance.

    Since you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    2. Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
    3. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    4. If running Vista, Win 7 or Win 8 or 10, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    6. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    7. After doing the above, you should work thru the below link:
     
    TimW, Jun 13, 2017
    #6

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds