Virus? not Malware

Discussion in 'Software' started by puttchen, Aug 31, 2012.

  1. puttchen

    puttchen Private E-2

    I have a Toshiba Satellite E105 64 bit, an Intel Core@Duo CPU running at 2.26GHz with 4G RAM and I use Windows Vista Home. Computer is running slow, my internet keeps going out although everyone else in the house has it (nothing wrong with service or router since no one else has a problem), and I took it to OfficeMax where they scanned it and told me I had viruses and/or malware.

    I first went on the Malware Supprt side, installed and ran all the things they wanted done in the READ & RUN FIRST file, and Tim replied that there was no malware to try the software side. This makes me think that I have a virus for sure. I've been running in safe mode since I posted in Malware because the computer just ran in a clock anytime I clicked on something until I would restart. I'd like to get rid of this myself if possible; I'm up for anything once and know enough to be dangerous!

    The computer started running slower around February maybe... I took it into BestBuy, they had me restore the disk and reformat the hard drive. When they got it to service it, they said there was nothing wrong, but here I am with sporadic internet and a slllooooowwww computer. Since running in safe mode, I do notice a difference in speed and my internet card has not gone out once. I wouldn't mind running this way all the time, but I have no access to printing or my card slot.

    Any help would be greatly appreciated!

    Thanks!! Margaret
     
  2. cipher

    cipher Major Geek Extraordinaire

    if the Malware Jedis sent you here, I think you can comfortably rule out malware AND viruses.

    Did you recently add any new software just before the problem began?
    In Normal mode, can you go to the Start Button, and in the RUN box type msconfig? Once there the startup tab will show what is running at startup Give us a list of these items, OK?
     
  3. puttchen

    puttchen Private E-2

    Hmmm, it could have been the Sure Cuts-a-Lot program I downloaded from Frostwire that had a crack, but Tim said it looked like there wasn't anything attached to it. Not totally sure though... I won't be doing that again!!

    I have tried to do *anything* in normal mode and I can't. Anytime I click on anything, I get stuck in a timer thingy and can't get out of it unless I turn off the computer. I don't know how to work around this. Can't even get to task manager.

    Here is the list of what's running in safe mode, I hope this can tell you something:

    Intel(R) Common User Interface
    Intel(R) Common User Interface
    Intel(R) Common User Interface
    HD Audio Control Panel
    Realtek Voice Manager
    Toshiba HDD Protection
    Toshiba Power Saver
    Toshiba Button Support
    Toshiba Zooming Utility
    Toshiba Flash Cards
    Windows Defender
    Google Talk
    Microsoft Operating System
    Google Update
    Google Chrome
    ConfigFree(TM)
    cfFncEnabler
    Toshiba Service Station
    Chicony Traybar
    Yahoo! Mail
    HP UT LEDM
    Anti-Phishing Domain Advisor
    Fingerprint Suite Notifier Application
    UsbMonitor
    PwdBank
    Java(TM) Platform SE Auto Updater 2 0
    Microsoft Windows Operating System
    Cyberlink Power Cinema
    VProtect Application
    ROC_roc_ssl_v12
    AVG Internet Security
    Malwarebytes Anti-Malware
    Evernote

    Can I attach any of the files that I posted to the Malware Forum? Tim wanted me to uninstall a few of those programs, but I'm not able to in safe mode.

    Thanks for any help you can give me!!

    Margaret
     
  4. puttchen

    puttchen Private E-2

    BTW, the guy who ran a diagnostic on my computer at Office Max said that my Windows Driver Package - Toshiba (FwLnk) System and the Toshiba Face Recognition Programs were very large and he thought that maybe that's where the virus/malware had attached itself. The Face Recognition software is 1.6G and the Driver Pkg is 2.27G. How can I tell if this is too big? I tried to Google info about how big these programs should be, but didn't get anywhere...
     
  5. cipher

    cipher Major Geek Extraordinaire

    From Safe Mode, run MSConfig from the RUN box. Make it look like this:

    http://i45.tinypic.com/4g2hae.jpg

    Reboot to Normal and let's see if that does it. If so, try disabling/uninstalling the items Tim suggested.suggested
     
  6. puttchen

    puttchen Private E-2

    OK, that worked to get me into normal mode. I don't know if this is right or not, but when the system restarted, everything in startup was disabled from me doing a selective startup with load system services like your pic below shows.

    The list is the same as below, but in a different order and everything was disabled.


    Toshiba Flash Cards
    Google Chrome
    Anti-Phishing Domain Advisor
    AVG Internet Security
    Chicony Traybar
    cfFncEnabler
    Microsoft Windows Operating System
    Microsoft Windows Operating System
    Fingerprint Suite Notifier Application
    Google Update
    Google Talk
    Intel(R) Common User Interface
    HP UT LEDM
    Toshiba Button Support
    Intel(R) Common User Interface
    Malwarebytes Anti-Malware
    ConfigFree(TM)
    Cyberlink Power Cinema
    Intel(R) Common User Interface
    PwdBank
    ROC_roc_ssl_v12
    HD Audio Control Panel
    Realtek Voice Manager
    Toshiba Zooming Utility
    Java(TM) Platform SE Auto Updater 2 0
    Toshiba HDD Protection
    Toshiba Service Station
    Toshiba Power Saver
    UsbMonitor
    VProtect Application
    Windows Defender
    Yahoo! Mail
    Evernote

    I've taken care of everything Tim told me to do. It was just getting rid of some of those malware finding programs (I think). Anyway, with everything disabled, I seem to be running just fine. Does that mean that my problem is with a startup item? Also, where can I find out about the files Office Max told me were too large?

    Thanks again, Margaret
     
  7. cipher

    cipher Major Geek Extraordinaire

    OK, what I would do would be to enable a few of these items at a time and reboot to normal. If it works, add a few more on another reboot. I suspect that you will get to a point where an additional added item will bring the problem back. No problem, tho, you can re-disable that item and we'll see what a solution is from there...

    As an aside, Google Update, Yahoo! Mail, and Google Talk would not be on my list of startups, I don't think you need for these to execute on boot. They should fire up when the app is launched. Consider if you really need/use this fingerprint thing. Uninstall anything you are not really using.

    You need to trim this list of startup items down.

    OK?
     
  8. puttchen

    puttchen Private E-2

    Absolutely!! I don't even use the fingerprint thing and whenever the startup is finished, I go into the icon tray and exit out of things that way because I didn't know how to do it the way you just showed me. :)

    Honestly, you tell me what to get rid of for startup and I will. Mostly, some of it I'm afraid to do anything because I pretty much have no clue what it is. Or, if it has Toshiba in the name, I really won't touch it because my laptop is a Toshiba and I think that it will somehow do something to the computer...

    Would you be interested in seeing the report that Office Max ran?

    Margaret
     
  9. cipher

    cipher Major Geek Extraordinaire

    Yes, can you post a screen shot of it?

    In the meantime, have you started adding items back?
     
  10. puttchen

    puttchen Private E-2

    No, I can't do a screen shot because it's longer than the page. I added back in Windows Defender, AVG, and the anti-phishing thing. The computer is slow and I think it was slow before I added those 3 things.

    Here's the link to the Office Max report:

    file:///C:/Users/puttchen/Documents/ctrlcenter%20PC%20Health%20Check/ctrlcenter%20PC%20Health%20Check%20ScanReport.html

    I used the hyper link thing in the toolbar, but it doesn't look right to me. Maybe it's supposed to look that way...

    Should I keep adding stuff back in even though the computer is slowing down? It's definitely slower than when I was in safe mode. I go into FB and play Bingo to see exactly how slow my computer is. I'm usually about 3 moves behind due to slowness. In safe mode, I'm right on target.

    Margaret
     
  11. puttchen

    puttchen Private E-2

    I don't think the hyper link works. Here's a copy and paste of the report. I wish it were more specific...


    ctrlcenter PC Health Check Report Monday, August 27, 2012 02:21 PM
    Your overall PC health status
    POOR
    2 Critical Problems Unsolved, 4 Suggestions
    Please review the results below
    Our Recommendation:
    Full In-Store Diagnostic and Repair
    With this service your ctrlcenter Online Technician will use the latest diagnostic and resolution techniques to troubleshoot your computer problem and recommend appropriate repair.
    Call now at
    1-888-869-3917
    and talk to our experienced Personal Technology Expert
    Detailed Report
    Performance Status: POOR
    Junk Files7.73 GB of junk files found
    Removing junk files from your computer enables your PC to run faster and helps you reclaim valuable hard disk space.
    Total junk files found : 7.73 GB. (Approximate size)
    Firefox cache 1034332.16 KB
    Internet Explorer cache 387606.00 KB
    Recycle bin 6562281.18 KB
    Temporary files 116333.47 KB
    Windows Optimization13 problem(s) identified
    Optimizes and maintains your PC to run faster by turning off unwanted services and system settings.
    Windows Optimization
    Recycle bin size configuration Not Optimal
    Internet Explorer simultaneous downloads settings Not Optimal
    Microsoft DFS Replication service Not Optimal
    Microsoft Distributed Link Tracking Service Not Optimal
    Microsoft ISCSI Service Not Optimal
    Microsoft Problem and Report service Not Optimal
    Microsoft SNMP Trap service Not Optimal
    Microsoft WinHTTP Web Proxy Auto Discovery Service Not Optimal
    CD ROM Autoplay Not Optimal
    Microsoft Windows Mail Splash Screen Not Optimal
    Firefox cache size Configuration Not Optimal
    Windows Vista critical services Not Optimal
    Network Settings Not Optimal
    Disk SpaceOptimal
    Security Status: POOR
    Malware SymptomsFound
    Your system may be infected with malware. Verify your Antivirus is up-to-date and rescan your computer. If problem persists contact our ctrlcenter Personal Technology Experts or visit your closest Office Max store.
    Quick Malware ScanOptimal
    AntivirusDisabled
    Ensures your PC is protected from attack of malicious programs. Keep your Anti-virus upto date to ensure total protection.
    Antivirus Version Status Definition Status
    AVG Anti-Virus Free Edition 2012.0.2197 Disabled Unknown
    Your Antivirus is turned OFF. Turn ON your Antivirus software.
    AntispywareDisabled
    Ensures your PC is protected from attack of adware and spyware. Keep your Anti-spyware upto date to ensure total protection.
    Antispyware Version Status Definition Status
    Windows Defender Vista 1.1.1600.0 Disabled 1.0.0.0
    AVG Anti-Virus Free Edition 2012.0.2197 Disabled Unknown
    Your Antispyware is turned OFF. Turn ON your Antispyware software.
    FirewallOptimal
    Windows UpdateOptimal
    Data Status: GOOD
    Data Backup SoftwareNot found
    It is important to take regular data backups in order to avoid data loss resulting from any system failure or accident.
    Ctrlcenter recommends online data backup to protect your important files in the event of computer loss. Please contact our ctrlcenter Personal Technology Experts or visit your closest Office Max store to discuss options for secure, on-line data backup.
    System Restore CheckOptimal
    System Status: GOOD
    Service PackOptimal
    ProcessorOptimal
    Physical MemoryOptimal
    Video Graphics CardOptimal

    I used CCleaner and probably solved part of what is above here. I didn't do the internet cache though. Mostly because I don't know how to, but do you think that's causing a slow computer? Anti-virus type of stuff was turned off during this scan because it wouldn't let them do the diagnostic.

    Margaret
     
  12. cipher

    cipher Major Geek Extraordinaire

    That's a link to a file on your computer, no way for me to see that. But let's forget that for now.

    disable these things in startup:
    Chicony Traybar
    Google Update
    Google Talk
    Cyberlink Power Cinema
    ConfigFree(TM)
    PwdBank
    ROC_roc_ssl_v12
    HP UT LEDM
    Realtek Voice Manager
    Java(TM) Platform SE Auto Updater 2 0
    Yahoo! Mail
    Evernote
    Google Update
    Google Talk
    Toshiba Flash Cards
    UsbMonitor

    Boot to normal mode download http://majorgeeks.com/download.php?det=5318 and run this defrag program.

    Also, double click the My Computer icon on your desktop, right click the C: drive, go to Properties and let me know how free space and used space you have.
     
  13. puttchen

    puttchen Private E-2

    I'm going to have to pick up with this another day... I got all the way down to 5 things left to turn on and froze in a timer thing. I had to start all over. Nothing is enabled or whatever right now and it's slow as all. We have company coming in for the weekend so I will have to try out turning them on little by little. I'll keep you posted. I'm just not understanding why the computer is so slow with nothing on. It only runs good in safe mode, but then I have no access to printing or the card reader.

    Where can I find info on the file size of the face recognition software and the Windows driver pkg?

    Thanks! Have a great weekend!

    Margaret
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds