Login | Live Chat & Podcast at 1:00PM Eastern on Sunday! |
 Search | |
| |
10-Nov-2009, 05:33 PM
#1 | |||||
| Computer Infected - Runs Terribly Slow |
| |
12-Nov-2009, 11:37 PM
#3 | |||||
| Hello there  Welcome to the Tech Support Guy forums.My name is NeonFx. I'll be glad to help you with your computer problems. Logs can take some time to research, so please be patient with me. Please note the following:
Download OTS to your Desktop
Code: %SYSTEMDRIVE%\eventlog.dll /s /md5 %SYSTEMDRIVE%\scecli.dll /s /md5 %SYSTEMDRIVE%\netlogon.dll /s /md5 %SYSTEMDRIVE%\cngaudit.dll /s /md5 %SYSTEMDRIVE%\sceclt.dll /s /md5 %SYSTEMDRIVE%\ntelogon.dll /s /md5 %SYSTEMDRIVE%\logevent.dll /s /md5 %SYSTEMDRIVE%\iaStor.sys /s /md5 %SYSTEMDRIVE%\nvstor.sys /s /md5 %SYSTEMDRIVE%\atapi.sys /s /md5 %SYSTEMDRIVE%\IdeChnDr.sys /s /md5 %SYSTEMDRIVE%\viasraid.sys /s /md5 %SYSTEMDRIVE%\AGP440.sys /s /md5 %SYSTEMDRIVE%\vaxscsi.sys /s /md5
To ensure that I get all the information this log will need to be attached. If it is too large to attach then upload it to Dropio and post the sharing link/url (The Drop's URL will be similar to : http:://drop.io/daerk) Step 2 Download SysProt Antirootkit from the link below (you will find it at the bottom of the page under attachments, or you can get it from one of the mirrors). http://sites.google.com/site/sysprotantirootkit/ Unzip it into a folder on your desktop. Start the Sysprot.exe program.
__________________ Please post the final results, good or bad. Let me know if you won't be responding any longer. Please don't send me requests for help. Use the forums instead. |
14-Nov-2009, 04:09 PM
#5 | |||||
| Alright. Please do the following now: STEP 1 Run OTS
Code: [Unregister Dlls]
[Registry - Safe List]
< Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
YY -> "sysfbtray" -> C:\WINDOWS\freddy73.exe [C:\windows\freddy73.exe]
YN -> "X4aWD" -> C:\WINDOWS\ocwnmcj.exe [C:\WINDOWS\ocwnmcj.exe]
< Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\
YN -> {238F6F83-B8B4-11CF-8771-00A024541EE3} [HKLM] -> http://a516.g.akamai.net/f/516/25175/7d/runaware.download.akamai.com/25175/citrix/wficat-no-eula.cab [Citrix ICA Client]
YN -> {6E704581-CCAE-46D2-9C64-20D724B3624E} [HKLM] -> http://radaol-prod-web-rr.streamops.aol.com/mediaplugin/3.0.84.2/win32/unagi3.0.84.2.cab [UnagiAx Class]
[Files/Folders - Created Within 30 Days]
NY -> freddy73.exe -> C:\WINDOWS\freddy73.exe
[Files/Folders - Modified Within 30 Days]
NY -> 0101120101465248.xxe -> C:\WINDOWS\0101120101465248.xxe
NY -> rdr_1256650778.exe -> C:\WINDOWS\rdr_1256650778.exe
NY -> ld15.exe -> C:\WINDOWS\ld15.exe
NY -> tgm2.dat -> C:\WINDOWS\tgm2.dat
NY -> mmsmark2.dat -> C:\WINDOWS\mmsmark2.dat
NY -> hpm2.dat -> C:\WINDOWS\hpm2.dat
NY -> 0101120101465249.xxe -> C:\WINDOWS\0101120101465249.xxe
NY -> 0101120101465349.xxe -> C:\WINDOWS\0101120101465349.xxe
NY -> 0101120101465050.xxe -> C:\WINDOWS\0101120101465050.xxe
NY -> bx4657.dat -> C:\WINDOWS\bx4657.dat
NY -> bk23567.dat -> C:\WINDOWS\bk23567.dat
NY -> 0101120101465649.xxe -> C:\WINDOWS\0101120101465649.xxe
NY -> 0101120101464955.xxe -> C:\WINDOWS\0101120101464955.xxe
NY -> 010112010146116101.xxe -> C:\WINDOWS\010112010146116101.xxe
[Files - No Company Name]
NY -> 0101120101465248.xxe -> C:\WINDOWS\0101120101465248.xxe
NY -> rdr_1256650778.exe -> C:\WINDOWS\rdr_1256650778.exe
NY -> tgm2.dat -> C:\WINDOWS\tgm2.dat
NY -> mmsmark2.dat -> C:\WINDOWS\mmsmark2.dat
NY -> hpm2.dat -> C:\WINDOWS\hpm2.dat
NY -> 0101120101465249.xxe -> C:\WINDOWS\0101120101465249.xxe
NY -> 0101120101465349.xxe -> C:\WINDOWS\0101120101465349.xxe
NY -> 0101120101465050.xxe -> C:\WINDOWS\0101120101465050.xxe
NY -> bx4657.dat -> C:\WINDOWS\bx4657.dat
NY -> bk23567.dat -> C:\WINDOWS\bk23567.dat
NY -> 0101120101465649.xxe -> C:\WINDOWS\0101120101465649.xxe
NY -> 0101120101464955.xxe -> C:\WINDOWS\0101120101464955.xxe
NY -> 010112010146116101.xxe -> C:\WINDOWS\010112010146116101.xxe
NY -> ld15.exe -> C:\WINDOWS\ld15.exe
[Empty Temp Folders]
[Reboot]
Note: You may receive some errors while running the fix. Just press Ok and the fix should continue normally. If it seems to get stuck, give it some time. It's probably still working. STEP 2  Please download Malwarebytes' Anti-Malware from Here.Double Click mbam-setup.exe to install the application.
Extra Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediatly. STEP 3 Run OTS again and click on the Quick Scan button at the top. Attach the results of this scan in your next reply.
__________________ Please post the final results, good or bad. Let me know if you won't be responding any longer. Please don't send me requests for help. Use the forums instead. |
19-Nov-2009, 10:24 PM
#7 | |||||
| How's the computer running now? STEP 1 Run OTS
Code: [Unregister Dlls] [Empty Temp Folders] [ClearAllRestorePoints] [Reboot]
STEP 2 Let's run an online scan. This will take a while but it's well worth it as it can often find things all other scanners will miss. Before we do, I need you to update Internet Explorer to IE8. Even if you don't use it, we need to have it updated as its components are deeply connected with Windows itself. Please go here to download the installer: http://www.microsoft.com/windows/internet-explorer/ STEP 3 The online scanner uses Java, so I will need you to download and install the latest version for that. Please go here to download the installer: http://java.com/en/download/index.jsp STEP 4 Using Internet Explorer or Firefox, visit Kaspersky Online Scanner 1. Click Accept, when prompted to download and install the program files and database of malware definitions. 2. To optimize scanning time and produce a more sensible report for review:
The program will then begin downloading and installing and will also update the database. Please be patient as this can take quite a long time to download.
__________________ Please post the final results, good or bad. Let me know if you won't be responding any longer. Please don't send me requests for help. Use the forums instead. |
 |
| |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| |
| You Are Using:  |
Advertisements do not imply our endorsement of that product or service. All times are GMT -4. The time now is 10:23 PM. Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved. |  |
Facebook
Twitter
TechGuy.tv
TSG Mobile