WiredWX Hobby Weather ToolsLog in

 


descriptionComputer Very Slow/Choppy.  EmptyComputer Very Slow/Choppy.

more_horiz
First off thanks for the help. About 2 Weeks ago, my computer and internet explorer got very slow and very choppy. It happened after my Wife attached the IPAD to my laptop. It started with a Google Chrome pop up, but I do not have it installed. I ran Malwarebytes in SAFE mode, and removed what was there. I ran the mentioned scans in the sticky. Below is my Security Scan results, and Adwcleaner Log. I'm currently running windows 7 on a Dell Inspiron.

Results of screen317's Security Check version 0.99.90
Windows 7 Service Pack 1 x86 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Kaspersky Internet Security
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
Adobe Reader XI
Mozilla Firefox 29.0.1 Firefox out of Date!
````````Process Check: objlist.exe by Laurent````````
Malwarebytes Anti-Malware mbam.exe
Kaspersky Lab Kaspersky Internet Security 14.0.0 avp.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 3%
````````````````````End of Log``````````````````````


# AdwCleaner v4.101 - Report created 19/11/2014 at 14:06:43
# Updated 09/11/2014 by Xplode
# Database : 2014-11-16.1 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : Braden - BRADEN-PC
# Running from : C:\Users\Braden\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TJZDRICD\adwcleaner_4.101.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****

Task Found : bettermarkit Update

***** [ Shortcuts ] *****


***** [ Registry ] *****

Data Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
Key Found : HKCU\Software\AppDataLow\Software\better_markit
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Websteroids

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17420


-\\ Mozilla Firefox v29.0.1 (en-US)


-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [3292 octets] - [25/03/2014 23:08:58]
AdwCleaner[R1].txt - [1101 octets] - [19/11/2014 14:06:43]
AdwCleaner[S0].txt - [3065 octets] - [25/03/2014 23:09:35]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [1221 octets] ##########

descriptionComputer Very Slow/Choppy.  EmptyRe: Computer Very Slow/Choppy.

more_horiz
Hello Pete and Welcome to the forum,
My name is Ian and I'll be assisting you with this issue... Please be aware that your issue may not be Malware related we will, however remove any malware that is lurking...

Could you run Malwarebytes in Normal Mode, allow it to update itself before running a full scan. Please post the log it produces along with the log produced when you ran it in Safe Mode with your next reply.

descriptionComputer Very Slow/Choppy.  EmptyRe: Computer Very Slow/Choppy.

more_horiz
These re my two most recent. In safe and in normal. The reason I thought it was a virus/malware was because in the Process in Task Manager, that Chrome was popping up, even if I shut it down.

Malwarebytes Anti-Malware


Scan Date: 11/19/2014
Scan Time: 12:48:41 PM
Logfile: MBAM 2.txt
Administrator: Yes

Version: 2.00.3.1025
Malware Database: v2014.11.19.06
Rootkit Database: v2014.11.18.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Braden

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 286159
Time Elapsed: 14 min, 9 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 1
Trojan.Chrome.INJ, HKU\S-1-5-21-2648712676-2758295211-566778762-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Dbybbbrx, regsvr32.exe /s "C:\Users\Braden\AppData\Local\Apple\Dbybbbrx.dll", Quarantined, [02a01726c9b343f3d28f1ec8649dec14]

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 1
Trojan.Chrome.INJ, C:\Users\Braden\AppData\Local\Apple\Dbybbbrx.dll, Quarantined, [02a01726c9b343f3d28f1ec8649dec14],

Physical Sectors: 0
(No malicious items detected)


(end)

Malwarebytes Anti-Malware


Scan Date: 11/19/2014
Scan Time: 12:48:41 PM
Logfile: MBAM.txt
Administrator: Yes

Version: 2.00.3.1025
Malware Database: v2014.11.19.06
Rootkit Database: v2014.11.18.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Braden

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 286159
Time Elapsed: 14 min, 9 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Warn
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 1
Trojan.Chrome.INJ, HKU\S-1-5-21-2648712676-2758295211-566778762-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Dbybbbrx, regsvr32.exe /s "C:\Users\Braden\AppData\Local\Apple\Dbybbbrx.dll", Quarantined, [02a01726c9b343f3d28f1ec8649dec14]

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 1
Trojan.Chrome.INJ, C:\Users\Braden\AppData\Local\Apple\Dbybbbrx.dll, Quarantined, [02a01726c9b343f3d28f1ec8649dec14],

Physical Sectors: 0
(No malicious items detected)


(end)

descriptionComputer Very Slow/Choppy.  EmptyRe: Computer Very Slow/Choppy.

more_horiz
P.S. - My internet settings were getting reset constantly prior to running AdWCleaner

descriptionComputer Very Slow/Choppy.  EmptyRe: Computer Very Slow/Choppy.

more_horiz
Sorry for the delay getting back to you..
I would like you to navigate to and delete the following [size=42]folder [/size]
C:\Users\Braden\AppData\Local\Apple
once you have deleted the apple folder please empty the recycle bin and re-run Malwarebytes and post the resulting log

descriptionComputer Very Slow/Choppy.  EmptyRe: Computer Very Slow/Choppy.

more_horiz
I could not locate the file through a search in the computer. The Malewarebytes log also did not show any virus/maleware. I re-ran Adwcleaner and got this : I am also using firefox at this time, because IE won't load pages.

# AdwCleaner v4.102 - Report created 24/11/2014 at 09:23:06
# Updated 23/11/2014 by Xplode
# Database : 2014-11-24.1 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : Braden - BRADEN-PC
# Running from : C:\Users\Braden\Downloads\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****

Task Deleted : bettermarkit Update

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\AppDataLow\Software\better_markit
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Websteroids
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17420


-\\ Mozilla Firefox v29.0.1 (en-US)


-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [1255 octets] - [23/11/2014 12:05:49]
AdwCleaner[R1].txt - [1167 octets] - [24/11/2014 09:15:19]
AdwCleaner[S0].txt - [1096 octets] - [24/11/2014 09:23:06]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1156 octets] ##########

descriptionComputer Very Slow/Choppy.  EmptyRe: Computer Very Slow/Choppy.

more_horiz
Hello Pete. It looks like Ian is away for a few days. In the meantime, you can run these scans.

Please download Junkware Removal Tool to your desktop.

Warning! Once the scan is complete JRT will shut down your browser with NO warning.

Shut down your protection software now to avoid potential conflicts.

•Temporarily disable your Antivirus and any Antispyware real time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them.

•Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click JRT and select Run as Administrator

•The tool will open and start scanning your system.

•Please be patient as this can take a while to complete depending on your system's specifications.

•On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

•Copy and Paste the JRT.txt log into your next message.
********************************************
I'd like to scan your machine with ESET OnlineScan

•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan

•Click the Computer Very Slow/Choppy.  EsetOnline button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

  • Click on Computer Very Slow/Choppy.  EsetSmartInstall to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the Computer Very Slow/Choppy.  EsetSmartInstallDesktopIcon-1 icon on your desktop.

•Check Computer Very Slow/Choppy.  EsetAcceptTerms
•Click the Computer Very Slow/Choppy.  EsetStart button.
•Accept any security warnings from your browser.

  • Leave the check mark next to Remove found threats.

•Check Computer Very Slow/Choppy.  EsetScanArchives
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push Computer Very Slow/Choppy.  EsetListThreats
•Push Computer Very Slow/Choppy.  EsetExport, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the Computer Very Slow/Choppy.  EsetBack button.
•Push Computer Very Slow/Choppy.  EsetFinish
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt

descriptionComputer Very Slow/Choppy.  EmptyRe: Computer Very Slow/Choppy.

more_horiz
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.0 (11.29.2014:1)
OS: Windows 7 Home Premium x86
Ran by Braden on Wed 12/03/2014 at 13:49:40.44
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Braden\AppData\Roaming\mozilla\firefox\profiles\v4j8dwi4.default\minidumps [2 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Wed 12/03/2014 at 14:00:01.23
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

descriptionComputer Very Slow/Choppy.  EmptyRe: Computer Very Slow/Choppy.

more_horiz
Can you show me the results of the ESET scan?

descriptionComputer Very Slow/Choppy.  EmptyRe: Computer Very Slow/Choppy.

more_horiz
C:\Users\Braden\AppData\Local\Temp\10e0\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XQCU7DC4\d6kfolby4e[1].htm JS/Exploit.Agent.NHX trojan
C:\Users\Braden\AppData\Local\Temp\1220\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XQCU7DC4\syxpmh3pyj[1].htm JS/Exploit.Agent.NHY trojan
C:\Users\Braden\AppData\Local\Temp\1254\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3AJ63U8E\y1es9eiqnk[1].htm JS/Exploit.Agent.NHY trojan

descriptionComputer Very Slow/Choppy.  EmptyRe: Computer Very Slow/Choppy.

more_horiz
Ok. How's your computer working now? Any other issues?

descriptionComputer Very Slow/Choppy.  EmptyRe: Computer Very Slow/Choppy.

more_horiz
As of right now it's working fine. I'll update as it goes along. I;m still using Mozilla as of now. I'll try IE out and see.

descriptionComputer Very Slow/Choppy.  EmptyRe: Computer Very Slow/Choppy.

more_horiz
Ok, let me know and then we can do some cleanup.

descriptionComputer Very Slow/Choppy.  EmptyRe: Computer Very Slow/Choppy.

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum