Tech Support Guy banner
  • IMPORTANT: Only authorized members may reply to threads in this forum due to the complexity of the malware removal process. Authorized members include Malware Specialists and Trainees, Administrators, Moderators, and Trusted Advisors. Regular members are not permitted to reply, and any such posts will be deleted without notice or further explanation. Notice
Status
Not open for further replies.

Slowing PC

Solved 
6K views 43 replies 5 participants last post by  iMacg3 
#1 ·
Hi
Recently my laptop, Running Windows7 seemed to slow down. It now takes several minutes to start up while all the time the Disk appears to be continous active. Suspecting AGV, I removed AVG but the PC is still painfully slow. Is this a virus/malware or what? Please help.
Thanks,
Ken

Tech Support Guy System Info Utility version 1.0.0.4
OS Version: Microsoft Windows 7 Professional, Service Pack 1, 32 bit
Processor: Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz, x64 Family 6 Model 37 Stepping 5
Processor Count: 4
RAM: 1910 Mb
Graphics Card: Intel(R) HD Graphics, 731 Mb
Hard Drives: C: 195 GB (75 GB Free); E: 90 GB (27 GB Free);
Motherboard: Dell Inc., 0G2R51
Antivirus: None
 
#2 ·
You appear to have a 8 - 9 years old Dell Vostro 3500 15.6" laptop.
What's the exact 7-character "service tag" number on yours?

Your model laptop supports up to 8 GB(8192 MB) of RAM, but it appears to have only 2 GB(2048 MB) - which is likely one reason for the slowness.
Yours is running a 32-bit version of Windows 7, so if you decide to add more RAM, don't increase it to more than 4 GB(4096 MB).

If you believe your laptop is infected with malware/spyware/viruses, be patient until one of the malware removal specialists replies to help you.
This site is very busy, so you may need to wait 24 - 48 hours until one replies.

----------------------------------------------------------------
 
#4 ·
You have this Dell Vostro 3500 15.6" laptop which appears to have been purchased in February 2011 in Angola and came with Windows 7 Professional SP1 32-bit.
According to your log in post #1, it appears to still have its original hardware.
Besides it having only 2 GB of RAM, it's my guess it has a lot of running processes.
The combination of both will make it run like a turtle.

Let's see what the startup list looks like.
Click Start, then type MSCONFIG in the search or run box, then press the Enter key.
When the small "System Configuration" window appears, click the "Startup" tab, then click "Open Task Manager".
Write down only the names in the "Name" column that are set on Enabled.
If the "Name" column isn't wide enough to see the entire name of any of them, widen the column.
Submit those names here in a vertical list.
Make sure to spell them EXACTLY as you see them there.

--------------------------------------------------------------
 
#5 ·
You have this Dell Vostro 3500 15.6" laptop which appears to have been purchased in February 2011 in Angola and came with Windows 7 Professional SP1 32-bit.
According to your log in post #1, it appears to still have its original hardware.
Besides it having only 2 GB of RAM, it's my guess it has a lot of running processes.
The combination of both will make it run like a turtle.

Let's see what the startup list looks like.
Click Start, then type MSCONFIG in the search or run box, then press the Enter key.
When the small "System Configuration" window appears, click the "Startup" tab, then click "Open Task Manager".
Write down only the names in the "Name" column that are set on Enabled.
If the "Name" column isn't wide enough to see the entire name of any of them, widen the column.
Submit those names here in a vertical list.
Make sure to spell them EXACTLY as you see them there.

--------------------------------------------------------------
Hi again Flavallee
I am getting lost. Your instructions followed, but there is no Open Task Mgr when small config opens? There is however a list as follows:
Rectangle Computer Font Screenshot Software

Is this the list you want?
A second query:
I spoke to the local computer store on the issue of increasing the Ram. They are not sure if I have DDR2 or 3 or 4 (the only have limited stock in some of them) and also not sure if I have 1 or 2 slots. Do you know?
Finally, how do I get the malware guys to come in incase I have Malware/virus or something else. Must I post again somewhere else?
Thks
Ken
 

Attachments

#6 ·
I'm sorry.
I was thinking your computer is using Windows 10.
These are the instructions for Windows 7:

Click Start, then type MSCONFIG in the search or run box, then press the Enter key.
When the small "System Configuration" window appears, click the "Startup" tab.
Write down ONLY the names in the "Startup Item" column that have a checkmark next to them.
If the "Startup Item" column isn't wide enough to see the ENTIRE name of any of them, widen the column.
Submit those names here in a vertical list.
Make sure to spell them EXACTLY as you see them there.

---------------------------------------------------------------

You didn't widen the "Startup Item" so the ENTIRE name of each entry can be seen.
Even without doing that and without showing the entire list, I can see why your computer is running slow.
It appears to have the entire startup list enabled and running in the background.

It uses DDR3L-1600, 1.35 volt, unbuffered, non-ECC, 200-pin SODIMM modules.

I suggest you ask a computer-knowledge family member or friend to help you with your issues.
It's going to be time-consuming and difficult to help you from here.

----------------------------------------------------------------
 
#7 ·
My appologies for not widening the start-up Item, but I was not sure if this is what you wanted. What now. Do I still widen it and send it, and what items should I un-select? Unfortunately no family member or friend available. Can I purchase a DDR3. Can I get a 2Gb for a second slot or must I purchase a new 4GB one and ditch the existing 2GB one?
You did not answer the question on malware ? Is the right person someone like CookieGal and if so, how do I attract their attention.
Thks,
Ken
 
#8 ·
If your laptop currently has a single 2 GB module, you need another 2 GB module in its empty slot so it can run with 4 GB.
There's no need to install a 4 GB module in your laptop's empty slot and run it with 6 GB, unless you plan to switch to a 64-bit version of Windows.
A 32-bit version of Windows will recognize and use only 4 GB, no matter how much RAM is in a computer.

Yes, please submit images of your laptop's startup list.
Make sure they include the entire list of entries, and make sure the entire names of all of them can be seen.
Once we get done with the startup list, we need to work on the much longer services list.
We still have a long ways over several days to go.

If you're concerned about your laptop having a malware/spyware/virus issue, this needs to be dealt with later.

----------------------------------------------------------------
 
#9 ·
Hi Flavallee
Here is the total list in 4 sections;
View attachment 272078

I really appreciate your effort View attachment 272069
I'm sorry.
I was thinking your computer is using Windows 10.
These are the instructions for Windows 7:

Click Start, then type MSCONFIG in the search or run box, then press the Enter key.
When the small "System Configuration" window appears, click the "Startup" tab.
Write down ONLY the names in the "Startup Item" column that have a checkmark next to them.
If the "Startup Item" column isn't wide enough to see the ENTIRE name of any of them, widen the column.
Submit those names here in a vertical list.
Make sure to spell them EXACTLY as you see them there.

---------------------------------------------------------------

You didn't widen the "Startup Item" so the ENTIRE name of each entry can be seen.
Even without doing that and without showing the entire list, I can see why your computer is running slow.
It appears to have the entire startup list enabled and running in the background.

It uses DDR3L-1600, 1.35 volt, unbuffered, non-ECC, 200-pin SODIMM modules.

I suggest you ask a computer-knowledge family member or friend to help you with your issues.
It's going to be time-consuming and difficult to help you from here.

----------------------------------------------------------------
Here is the list in 4 sections:
Product Rectangle Azure Font Screenshot

Product Rectangle Font Screenshot Technology

Product Rectangle Font Screenshot Technology
Rectangle Font Screenshot Technology Electronic device

Product Rectangle Azure Font Screenshot
Product Rectangle Font Screenshot Technology
Product Rectangle Font Screenshot Technology
Rectangle Font Screenshot Technology Electronic device
Product Rectangle Azure Font Screenshot
Product Rectangle Font Screenshot Technology
Product Rectangle Font Screenshot Technology
Rectangle Font Screenshot Technology Electronic device
 
#10 ·
Yikes! This is much, much worse than I thought.
Your Dell laptop has a massive number of installed apps, and many of them are auto-loading and running in the background.
I'm surprised it's not bogging down or freezing up every time you use it.
You need to decide which ones you don't need and use, then they need to be uninstalled.
I can't tell you while ones to uninstall because I don't know which ones you need and use.
What your HP laptop really needs is a "clean" reinstall of Windows XP Professional SP3 32-bit and a fresh start.

----------------------------------------------------------------
 
#11 ·
Hi again Flavallee
Thanks once again for all the help you have been giving. I am trying a slightly modified approach at present to what has been suggested thus far and would really like your thoughts:
1. Uninstalled the apps that I do not need,
2. Keep the apps that I use occasionally, but unclick them from the start-up list and only reinsert when needed (possibly twice a year). This seems to have increased the speed somewhat.
3. Expand the Ram as you suggesed to 4GB.

Once we have improved speed, will the Malware guys chime in automatically on my suspected virus concerns, or should I close this post and start a new post on the Malware/Virus/Naughty software question. If so, what forum should I use?

Thanks again for your excelent support.
Ken
 
#12 ·
I met to say in post #10 that your laptop needs a clean reinstall of Windows 7 Professional SP1 32-bit and a fresh start.
I was working on a Windows XP Professional SP3 32-bit test computer while I was in contact with you, and that was on my mind.

What you're doing in steps #1 - #3 will definitely be helpful in improving speed and snappiness in your laptop.

If a malware removal specialist doesn't jump in, I'll ask one to do so when you're ready.
This section of the forums is very busy, so you may need to be patient.

-------------------------------------------------------------
 
#18 ·
Hi Ken_RM, welcome to the Tech Support Guy malware removal forum.

I am iMacg3 and will be helping you with your computer problems.

Please keep the following information in mind before we begin:
  • Back up any important data before we continue.
    • Back up any important data on your computer to external media. I will not knowingly suggest any steps that will damage your computer; however, malware infections are often unpredictable and it may be necessary to reformat and reinstall your operating system depending on the infection.
  • Do not install any new software or run any fixes/tools on your system unless I request that you do so.
    • Running additional tools on your system can interfere with the clean-up process, or cause issues such as false positives.
  • Please read all instructions carefully, and complete them in the order listed.
    • Items that are especially important will be highlighted in bold or red.
  • If your computer seems to start working normally, please don't abandon the topic.
    • Even if your system is behaving normally, there may still be some malware remnants left over. Additionally, malware can re-infect the computer if some remnants are left. Therefore, please complete all requested steps to make sure any malware is successfully eradicated from your PC.
  • If you have pirated or illegal software on your computer, uninstall it now before proceeding.
    • Using pirated/cracked software is an easy way to infect your computer - almost as easy as intentionally downloading malware. Therefore, please remove any, if present, before we begin the clean-up.
  • If you have questions at any time during the cleanup, feel free to ask.

---------------------------------------------------
Farbar Recovery Scan Tool (FRST)

Download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system, download both of them and try to run them. Only one of them will run on your system, and that will be the right version.
  • Right-click FRST.exe/FRST64.exe then click "Run as administrator"
  • When the tool opens, click Yes to the disclaimer.
  • Press the Scan button.
  • When finished, it will produce logs called FRST.txt and Addition.txt in the same directory the tool was run from.
  • Please copy and paste the logs in your next reply.

---------------------------------------------------

In your next reply, please include:
  • FRST.txt
  • Addition.txt
 
#21 ·
Hi Ken_RM,

Do you recognize the following Chrome extension?

Download Converter NowV3.5
---------------------------------------------------
I noticed you have disabled some startup items using msconfig. msconfig is designed to be used for temporary/troubleshooting issues, and is not recommended as a startup manager.

MSConfig - Normal Startup
  • Press the Windows key + R.
  • Type msconfig in the Run box and press Enter.
  • MSConfig will open. Select the Normal Startup radio button and click Apply > OK.
  • Restart your computer to apply the changes.

---------------------------------------------------
Uninstall a Program

  • Press the Windows Key + R.
  • Type appwiz.cpl in the Run box and click OK.
  • The Add/Remove Programs list will open. Locate the following program(s) on the list:
    Search App by Ask
  • Select the above program(s) and click Uninstall.
  • Restart the computer if prompted.

---------------------------------------------------
Uninstall Chrome Extension(s)

  • Open Google Chrome. Type chrome://extensions in the address bar and press Enter.
  • Click the trash can icon next to the following extension(s):
    AVG Secure Search
    Get Speed Tester
  • A confirmation dialog will appear. Click Remove.

---------------------------------------------------
Farbar Recovery Scan Tool - Fix

  • Highlight the contents of the below code box and press Ctrl + C on your keyboard:
    Code:
    Start::
    CreateRestorePoint:
    HKLM\...\Run: [vProt] => "C:\Program Files\AVG Web TuneUp\vprot.exe"
    HKU\S-1-5-21-3869300609-3146229085-1361341603-1000\...\MountPoints2: {00a77d0c-7a57-11e5-99f0-782bcbcc0a3c} - F:\setup_vmb_lite.exe /checkApplicationPresence
    HKU\S-1-5-21-3869300609-3146229085-1361341603-1000\...\MountPoints2: {114d9fe4-a3b5-11e8-847b-889ffab75ecf} - G:\SetupVMB.exe
    HKU\S-1-5-21-3869300609-3146229085-1361341603-1000\...\MountPoints2: {183e4617-aaba-11e9-b792-782bcbcc0a3c} - G:\HiSuiteDownLoader.exe
    HKU\S-1-5-21-3869300609-3146229085-1361341603-1000\...\MountPoints2: {2f34be9e-2f6f-11e7-b7fa-889ffab75ecf} - F:\AutoRun.exe
    HKU\S-1-5-21-3869300609-3146229085-1361341603-1000\...\MountPoints2: {79b65557-d99f-11e8-8201-889ffab75ecf} - F:\HiSuiteDownLoader.exe
    HKU\S-1-5-21-3869300609-3146229085-1361341603-1000\...\MountPoints2: {8334c9af-801f-11e8-a59a-889ffab75ecf} - F:\HiSuiteDownLoader.exe
    HKU\S-1-5-21-3869300609-3146229085-1361341603-1000\...\MountPoints2: {a5edfd8e-9ca1-11e6-82e8-889ffab75ecf} - F:\AutoRun.exe
    HKU\S-1-5-21-3869300609-3146229085-1361341603-1000\...\MountPoints2: {c671ed9d-be78-11e8-b580-889ffab75ecf} - F:\HiSuiteDownLoader.exe
    HKU\S-1-5-21-3869300609-3146229085-1361341603-1000\...\MountPoints2: {c671eda2-be78-11e8-b580-889ffab75ecf} - G:\HiSuiteDownLoader.exe
    HKU\S-1-5-21-3869300609-3146229085-1361341603-1000\...\MountPoints2: {f8d96153-7be7-11e5-890e-782bcbcc0a3c} - F:\AutoRun.exe
    Task: {172CFE59-048E-47E5-A569-D6D37CE9C680} - System32\Tasks\{D7F06575-6536-4601-A0DB-45022E3EABAA} => C:\Windows\system32\pcalua.exe -a F:\setup_vmc_lite.exe -d F:\ -c /checkApplicationPresence
    Task: {434481E6-FA5E-4FF3-AFFE-0219739A3466} - System32\Tasks\{5F175BA3-B06D-4D7B-B079-A0AD59EDC0D9} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\CD to MP3 Freeware\cdextract.exe" -d C:\Users\Ken\Desktop
    Task: {6007780A-ADE1-4F6C-B070-15BE69E6A4CC} - System32\Tasks\ErrorFixKIT => C:\Program Files\ErrorFixKIT\ErrorFixKIT.exe
    HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
    SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
    SearchScopes: HKU\S-1-5-21-3869300609-3146229085-1361341603-1000 -> {70D46D94-BF1E-45ED-B567-48701376298E} URL = hxxp://localhost:4664/search&s=7s6uswQGqd8K3l4Z6waWeC2Wfh8?q={searchTerms}
    SearchScopes: HKU\S-1-5-21-3869300609-3146229085-1361341603-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={A65C3BB3-1B87-4937-B493-0820B5051F06}&mid=9369a57b49d047d6bd5ba9628d28e3cf-69a4d1c9aca4e87a8001620c38c41f93bcbb9295&lang=en&ds=AVG&coid=avgtbavg&cmpid=0215tb&pr=fr&d=2014-11-16 19:55:55&v=4.1.0.411&pid=wtu&sg=&sap=dsp&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-3869300609-3146229085-1361341603-1000 -> {DC3967CD-9D4C-4556-8424-10BB5C831883} URL = hxxp://search.avg.com/route/?d=4d8f4501&v=6.11.25.1&i=26&tp=chrome&q={searchTerms}&lng={language}&iy=&ychte=us
    BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.3.9.605\AVG Web TuneUp.dll => No File
    Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll No File
    FF HKLM\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext => not found
    FF HKLM\...\Firefox\Extensions: [{C7AE725D-FA5C-4027-BB4C-787EF9F8248A}] - C:\Program Files\RelevantKnowledge\firefox => not found
    FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
    CHR HomePage: Default -> mysearch.avg.com
    CHR NewTab: Default ->  Not-active:"chrome-extension://enfjpmhokbnpfoeepdoaadbabkojlpfc/newtab/slimspeedtest__newtab.html", Not-active:"chrome-extension://nlciklcpeaniopfigjomkdblgkfplgeo/newtab/newtab.html"
    CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC=__PARAM__&q={searchTerms}
    CHR DefaultSearchKeyword: Default -> bing.com
    CHR DefaultSuggestURL: Default -> hxxps://toolbar.avg.com/acp?q={searchTerms}&o=1
    CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - <no Path/update_url>
    CHR HKLM\...\Chrome\Extension: [mkndcbhcgphcfkkddanakjiepeknbgle] - C:\Program Files\RelevantKnowledge\rlcm.crx <not found>
    CHR HKU\S-1-5-21-3869300609-3146229085-1361341603-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bmkckgpgekmanipelfidlhmkfcjicion] - hxxps://clients2.google.com/service/update2/crx
    S3 ew_usbccgpfilter; system32\DRIVERS\ew_usbccgpfilter.sys [X]
    S3 usbser; system32\drivers\usbser.sys [X]
    CustomCLSID: HKU\S-1-5-21-3869300609-3146229085-1361341603-1000_Classes\CLSID\{d79b57ed-727c-4ab8-ba67-e7c6fd30fac1}\localserver32 -> C:\Program Files\TotalAV\TotalAV.exe => No File
    ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
    ContextMenuHandlers3: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
    AlternateDataStreams: C:\Windows:CM_36faabd924501fcd2f743302621d89eb425ec11f74fef19a5e0fe69c3f0b5201 [74]
    AlternateDataStreams: C:\Windows:CM_e0501b65315a77c6cde279a3a8d62a1a6c48bf2c2e353a3654218165115f1673 [74]
    FirewallRules: [{F7BCA0FE-BA91-4CE2-9472-B67BE3A43E49}] => (Allow) C:\Program Files\AVG\AVG2012\avgmfapx.exe No File
    FirewallRules: [{EE574C99-87EE-4058-AA53-6DF63A34FD8B}] => (Allow) C:\Program Files\AVG\AVG2012\avgmfapx.exe No File
    FirewallRules: [{E1A0ADF3-6DD8-4394-AC81-CBA8FF6BFD78}] => (Allow) C:\Program Files\AVG\AVG2012\avgnsx.exe No File
    FirewallRules: [{1354061F-BF25-4425-9746-3E26CF745B03}] => (Allow) C:\Program Files\AVG\AVG2012\avgnsx.exe No File
    FirewallRules: [{794AA246-AC98-4DEB-AF95-B32F1B206BD6}] => (Allow) C:\Program Files\AVG\AVG2012\avgdiagex.exe No File
    FirewallRules: [{6FBBD5FF-6176-4C46-AE0A-56FF1EE014F9}] => (Allow) C:\Program Files\AVG\AVG2012\avgdiagex.exe No File
    FirewallRules: [{695116B1-A44E-4963-B212-BF0FA5BCEB9E}] => (Allow) C:\Program Files\AVG\AVG2012\avgemcx.exe No File
    FirewallRules: [{37BF6424-6B74-49E3-A045-D28298840AC5}] => (Allow) C:\Program Files\AVG\AVG2012\avgemcx.exe No File
    FirewallRules: [{A8B92175-9C62-4DCB-ACBC-E2FDC00113FD}] => (Allow) C:\Program Files\AVG\AVG2013\avgmfapx.exe No File
    FirewallRules: [{ADC8ACD7-AF58-43A7-9CE0-659917D4DC35}] => (Allow) C:\Program Files\AVG\AVG2013\avgmfapx.exe No File
    FirewallRules: [{ED3CDCF3-178F-4EBC-8AF8-8956487BC6DF}] => (Allow) C:\Program Files\AVG\AVG2013\avgnsx.exe No File
    FirewallRules: [{C08AA750-8368-42C1-874C-DFE69A04F491}] => (Allow) C:\Program Files\AVG\AVG2013\avgnsx.exe No File
    FirewallRules: [{9A2F9345-751B-4C1A-8875-F16E9E90D5A0}] => (Allow) C:\Program Files\AVG\AVG2013\avgdiagex.exe No File
    FirewallRules: [{09B09E27-B748-4512-95F1-DF52170D67FF}] => (Allow) C:\Program Files\AVG\AVG2013\avgdiagex.exe No File
    FirewallRules: [{E9B97CA9-3A99-4536-945A-4743743A3882}] => (Allow) C:\Program Files\AVG\AVG2013\avgemcx.exe No File
    FirewallRules: [{B38A7F40-BCDB-4EC7-AE68-EEB6A81B5EE1}] => (Allow) C:\Program Files\AVG\AVG2013\avgemcx.exe No File
    FirewallRules: [{255C1209-15F8-4692-BB74-FB868D1FEA97}] => (Allow) C:\Program Files\AVG\AVG2015\avgmfapx.exe No File
    FirewallRules: [{6D67F644-1B91-4EC6-B4C4-63F4241452ED}] => (Allow) C:\Program Files\AVG\AVG2015\avgmfapx.exe No File
    FirewallRules: [{22AE8A5B-F70D-4228-8B16-9742715880FA}] => (Allow) C:\Program Files\AVG\Av\avgmfapx.exe No File
    FirewallRules: [{A27CC088-5F95-4153-A471-85881091066E}] => (Allow) C:\Program Files\AVG\Av\avgmfapx.exe No File
    FirewallRules: [{1D20B262-9919-4AD4-B070-2D3ECE3F7F91}] => (Allow) C:\Program Files\AVG\Av\avgdiagex.exe No File
    FirewallRules: [{0D0AA497-5B6C-4D8A-9EB4-409F9AEBCABE}] => (Allow) C:\Program Files\AVG\Av\avgdiagex.exe No File
    FirewallRules: [{68290001-A813-42E9-A898-A4B9725D7AAB}] => (Allow) C:\Program Files\AVG\Av\avgnsx.exe No File
    FirewallRules: [{E2EE077F-B64A-48BD-B4BD-5CDDD6476E20}] => (Allow) C:\Program Files\AVG\Av\avgnsx.exe No File
    FirewallRules: [{B128D313-79B4-427F-A233-369AC15A1871}] => (Allow) C:\Program Files\AVG\Av\avgemcx.exe No File
    FirewallRules: [{681296E3-7F62-48F5-9D6A-482A514E3EBB}] => (Allow) C:\Program Files\AVG\Av\avgemcx.exe No File
    C:\Program Files\AVG Web TuneUp
    C:\Program Files\ErrorFixKIT
    C:\Program Files\RelevantKnowledge
    C:\Program Files\TotalAV
    virustotal: C:\Program Files\ReflectDL.exe;C:\Program Files\switchsetup.exe;C:\Windows\system32\Drivers\ZTEusbnet.winsecurity;C:\Windows\system32\Drivers\usbohci.winsecurity;C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
    Emptytemp:
    End::
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
  • Double-click FRST.exe/FRST64.exe to run it.
  • Press the Fix button just once and wait.
    Note: No need to paste the script into FRST.
  • Restart the computer if prompted.
  • When the fix is complete FRST will generate a log in the same location it was run from (Fixlog.txt)
  • Please copy and paste its contents into your reply.

---------------------------------------------------

In your next reply, please include:
  • Fixlog.txt
  • Let me know how the computer is doing.
 
#22 ·
Hi iMacg3
My appologies for being so slow, it must be the slow PC that filtered over onto me.

1. I do not recognise "Download converter now 3-5"
2. I did the msconfig normal start up
Seemed successfull. Pc restarts, but maybe a tad slow ?
3. Tried the uninstall action
Got a message "The specified account already exists"
Program is not removed ! What do I do now?
Awaiting further instructions from you.
Cheers,
Ken
 
#24 ·
Hi Ken_RM,

You can skip the program uninstall for now and proceed with the Chrome Extensions uninstall and FRST fix.

As you don't recognize it, please uninstall the Download Converter NowV3.5 extension from Chrome as well.
Still have not removed : SEARCH APP BY ASK or the Chrome extensions, except for speed tester.
Cheers
Ken
 

Attachments

#27 ·
Hi Ken_RM,

---------------------------------------------------
FRST scan
  • Double-click FRST.exe/FRST64.exe to run it.
  • Press the Scan button.
  • When finished, it will produce logs called FRST.txt and Addition.txt in the same directory the tool was run from.
  • Please copy and paste the logs in your next reply.
---------------------------------------------------

In your next reply, please include:
  • FRST.txt
  • Addition.txt
 
#28 ·
Hi Ken_RM,

---------------------------------------------------
FRST scan
  • Double-click FRST.exe/FRST64.exe to run it.
  • Press the Scan button.
  • When finished, it will produce logs called FRST.txt and Addition.txt in the same directory the tool was run from.
  • Please copy and paste the logs in your next reply.
---------------------------------------------------

In your next reply, please include:
  • FRST.txt
  • Addition.txt
thaks,
ken_rm
 

Attachments

#30 ·
Hi Ken_RM,

Those logs were generated on October 28. Try deleting the current FRST.txt and Addition.txt logs, run a new scan with FRST, and post both reports to your reply. Let me know if you experience any issues doing so.
Hi again
I am having issues again.
Downloaded 32bit version to desktop.
Now AVG is preventing it from running!!!!!!
Please help
Ken
 
#32 ·
Hi Ken_RM,

---------------------------------------------------
Farbar Recovery Scan Tool - Fix

  • Highlight the contents of the below code box and press Ctrl + C on your keyboard:
    Code:
    Start::
    ExportKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5245414C-392D-5350-00A7-A758B70C2D01}
    End::
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
  • Double-click FRST.exe/FRST64.exe to run it.
  • Press the Fix button just once and wait.
    Note: No need to paste the script into FRST.
  • Restart the computer if prompted.
  • When the fix is complete FRST will generate a log in the same location it was run from (Fixlog.txt)
  • Please copy and paste its contents into your reply.

---------------------------------------------------

In your next reply, please include:
  • Fixlog.txt
 
#33 ·
Hi Ken_RM,

---------------------------------------------------
Farbar Recovery Scan Tool - Fix

  • Highlight the contents of the below code box and press Ctrl + C on your keyboard:
    Code:
    Start::
    ExportKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5245414C-392D-5350-00A7-A758B70C2D01}
    End::
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
  • Double-click FRST.exe/FRST64.exe to run it.
  • Press the Fix button just once and wait.
    Note: No need to paste the script into FRST.
  • Restart the computer if prompted.
  • When the fix is complete FRST will generate a log in the same location it was run from (Fixlog.txt)
  • Please copy and paste its contents into your reply.

---------------------------------------------------

In your next reply, please include:
  • Fixlog.txt
Hi iMacg3
Done and dusted.
Thks,
Ken
 

Attachments

#34 ·
Hi Ken_RM,

Excellent, thanks. Please do the following:

---------------------------------------------------
Farbar Recovery Scan Tool - Fix

  • Highlight the contents of the below code box and press Ctrl + C on your keyboard:
    Code:
    Start::
    CreateRestorePoint:
    CloseProcesses:
    DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5245414C-392D-5350-00A7-A758B70C2D01}
    EmptyTemp:
    End::
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
  • Double-click FRST.exe/FRST64.exe to run it.
  • Press the Fix button just once and wait.
    Note: No need to paste the script into FRST.
  • Restart the computer if prompted.
  • When the fix is complete FRST will generate a log in the same location it was run from (Fixlog.txt)
  • Please copy and paste its contents into your reply.

---------------------------------------------------
AdwCleaner

Download AdwCleaner and save it to your desktop.
  • Double click AdwCleaner.exe to run it.
  • Click Scan Now ...
    • When the scan has finished a Scan Results window will open.
    • Click Cancel (at this point do not attempt to Quarantine anything that is found)
  • Now click the Log Files tab ...
    • Double click on the latest scan log (Scan logs have a [S0*] suffix, where * is replaced by a number, the latest scan will have the largest number)
    • A Notepad file will open containing the results of the scan.
    • Please post the contents of the file in your next reply.

---------------------------------------------------
ESET Online Scanner

Download ESET Online Scanner and save it to your desktop.
  • Right-click on esetonlinescanner_enu.exe and select Run as Administrator.
  • When the tool opens, click Get Started.
  • Read and accept the license agreement.
  • At the Welcome to ESET Online Scanner window, click Get Started.
  • Select whether you would like to send anonymous data to ESET.
  • Note: if you see the "Welcome Back to ESET Online Scanner" screen, click Computer Scan > Full Scan.
  • Click on the Full Scan option.
  • Select Enable ESET to detect and remove potentially unwanted applications, then click Start scan.
  • ESET will now begin scanning your computer. This may take some time.
  • When the scan is finished and if threats have been detected, select Save scan log. Save it to your desktop as eset.txt. Click on Continue.
  • ESET Online Scanner may ask if you'd like to turn on the Periodic Scan feature. Click on Continue.
  • On the next screen, you can leave feedback about the program if you wish. Check the box for Delete application data on closing. If you left feedback, click Submit and continue. If not, Close without feedback.
  • Open the scan log on your desktop (eset.txt) and copy and paste its contents into your next reply.
---------------------------------------------------

In your next reply, please include:
  • Fixlog.txt
  • AdwCleaner[S0*].txt
  • eset.txt
 
#35 ·
Hi Ken_RM,

Excellent, thanks. Please do the following:

---------------------------------------------------
Farbar Recovery Scan Tool - Fix

  • Highlight the contents of the below code box and press Ctrl + C on your keyboard:
    Code:
    Start::
    CreateRestorePoint:
    CloseProcesses:
    DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5245414C-392D-5350-00A7-A758B70C2D01}
    EmptyTemp:
    End::
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
  • Double-click FRST.exe/FRST64.exe to run it.
  • Press the Fix button just once and wait.
    Note: No need to paste the script into FRST.
  • Restart the computer if prompted.
  • When the fix is complete FRST will generate a log in the same location it was run from (Fixlog.txt)
  • Please copy and paste its contents into your reply.

---------------------------------------------------
AdwCleaner

Download AdwCleaner and save it to your desktop.
  • Double click AdwCleaner.exe to run it.
  • Click Scan Now ...
    • When the scan has finished a Scan Results window will open.
    • Click Cancel (at this point do not attempt to Quarantine anything that is found)
  • Now click the Log Files tab ...
    • Double click on the latest scan log (Scan logs have a [S0*] suffix, where * is replaced by a number, the latest scan will have the largest number)
    • A Notepad file will open containing the results of the scan.
    • Please post the contents of the file in your next reply.

---------------------------------------------------
ESET Online Scanner

Download ESET Online Scanner and save it to your desktop.
  • Right-click on esetonlinescanner_enu.exe and select Run as Administrator.
  • When the tool opens, click Get Started.
  • Read and accept the license agreement.
  • At the Welcome to ESET Online Scanner window, click Get Started.
  • Select whether you would like to send anonymous data to ESET.
  • Note: if you see the "Welcome Back to ESET Online Scanner" screen, click Computer Scan > Full Scan.
  • Click on the Full Scan option.
  • Select Enable ESET to detect and remove potentially unwanted applications, then click Start scan.
  • ESET will now begin scanning your computer. This may take some time.
  • When the scan is finished and if threats have been detected, select Save scan log. Save it to your desktop as eset.txt. Click on Continue.
  • ESET Online Scanner may ask if you'd like to turn on the Periodic Scan feature. Click on Continue.
  • On the next screen, you can leave feedback about the program if you wish. Check the box for Delete application data on closing. If you left feedback, click Submit and continue. If not, Close without feedback.
  • Open the scan log on your desktop (eset.txt) and copy and paste its contents into your next reply.
---------------------------------------------------

In your next reply, please include:
  • Fixlog.txt
  • AdwCleaner[S0*].txt
  • eset.txt
Hi iMacg3
Run the checks as requested. What is next?
Cheers
Ken
 

Attachments

#36 ·
Hi Ken_RM,

---------------------------------------------------
AdwCleaner - Clean

  • Double click AdwCleaner.exe to run it.
  • Click Scan Now
  • When the scan has finished a Scan Results window will open.
  • Please check the following boxes and then click Quarantine
PUP.Optional.Legacy
PUP.Optional.PCProtect
PUP.Optional.TotalAV
PUP.Optional.MySearch
    • Click Next
    • If any pre-installed software was found on your machine, a prompt window will open ...
      • Click OK to close it
    • Check any pre-installed software items you want to remove (if they're not causing you a problem I recommend you don't select any)
    • Click Quarantine
  • A prompt to save your work will appear ...
    • Click Continue when you're ready to proceed.
  • A prompt to restart your computer will appear ...
    • Click Restart Now
  • Once your computer has restarted ...
    • If it doesn't open automatically, please start AdwCleaner ...
    • Click the Log Files tab ...
    • Double click on the latest Clean log (Clean logs have a [C0*] suffix, where * is replaced by a number, the latest scan will have the largest number)
    • A Notepad file will open containing the results of the removal.
    • Please post the contents of the file in your next reply.

---------------------------------------------------
FRST scan
  • Double-click FRST.exe/FRST64.exe to run it.
  • Press the Scan button.
  • When finished, it will produce logs called FRST.txt and Addition.txt in the same directory the tool was run from.
  • Please copy and paste the logs in your next reply.

---------------------------------------------------

In your next reply, please include:
  • AdwCleaner[C0*].txt
  • FRST.txt
  • Addition.txt
  • Let me know how the computer is doing.
 
Status
Not open for further replies.
You have insufficient privileges to reply here.
Top