Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

New Computer Infected/Slow (Why I can't have nice things)

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

New Computer Infected/Slow (Why I can't have nice things)

Unread postby bileonfile » April 16th, 2011, 8:55 am

My computer has been going extremely slowly for the last few days, after viewing an image hosted on a webpage (I wish I remembered the name, it was through google search). Also, if it makes any difference to mention, I was using firefox and not IE. I was going to save it to my computer. But before doing so a screen popped up saying I should check my files, or that my computer may be infected. I had only recently uploaded Kaspersky 2010 onto my laptop but I hadn't done the update yet. In the interim I was using Trend Micro Titanium which came preloaded onto my computer.

After that incident I immediately tried to close the browser, but it was already moving slowly. The screen froze. I hit Ctrl+Alt+Delete to close the programs but the screen went black and seemed to come back, but very slowly coming back (It was all black and then just the mouse appeared). I hit C+A+D again, to shut the computer down. Only then did the entire screen show up, but only to force close the programs for shutdown.

When I got back on I tried to update Kaspersky, tried to scan using Kaspersky, and tried to scan with trend micro titanium (not all at once). They all ran extremely slowly (For example the estimate on the Kaspersky scan was for >1 day). I can open my browser to the google homepage but cannot access anything beyond that (unless I'm in Safe Mode with Networking). Also, I went in to check the processes and although I wasn't using anything but the basic auto-starting features, my computer was at 100% CPU Usage. I ran the DDS program at 10:27 am and opposed to the 3 minutes it was supposed to take, the scan didn't complete until 10:50 am.

I know that slowing like this can be caused by other things, but I don't think that's the case. This computer is brand spanking new, literally no more than two weeks out of the box. And I'd really like to see if I can remove what's causing the problem myself rather than losing it to best buy for 2 weeks and 200 dollars. Any help offered would be greatly appreciated. Thanks! :compress:

I hope I provided enough information
(Also, should I have posted in an american forum, does it matter? I don't want to irritate anyone or break the forum rules.)

Here are my logs: [ETA: My original logs were from running DDS in Safe Mode, which probably wouldn't have given my helper the right information, they have since been updated. (As of 11:23 am 4/16/2011)]

DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by Ace at 10:26:10.92 on Sat 04/16/2011
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.5941.3699 [GMT -7:00]
AV: Kaspersky Anti-Virus *Disabled/Outdated* {56547CC9-C9B2-849D-8FEF-A496150D6A06}
AV: Trend Micro Titanium Internet Security *Enabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902}
AV: Kaspersky Anti-Virus *Enabled/Outdated* {AE1D740B-8F0F-D137-211D-873D44B3F4AE}
SP: Trend Micro Titanium Internet Security *Enabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF}
SP: Kaspersky Anti-Virus *Enabled/Updated* {157C95EF-A935-DEB9-1BAD-BC4F3F34BE13}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Kaspersky Anti-Virus *Disabled/Outdated* {ED359D2D-EF88-8B13-B55F-9FE46E8A20BB}
FW: Kaspersky Anti-Virus *Disabled* {6E6FFDEC-83DD-85C5-A4B0-0DA3EBDE2D7D}
============== Running Processes ===============
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
============== Pseudo HJT Report ===============
uStart Page = hxxp://asus.msn.com
uDefault_Page_URL = hxxp://asus.msn.com
mStart Page = hxxp://asus.msn.com
mWinlogon: Userinit=userinit.exe
BHO: TmIEPlugInBHO Class: {1ca1377b-dc1d-4a52-9585-6e06050fac53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll
BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\ievkbd.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Windows Live Messenger Companion Helper: {9fdde16b-836f-4806-ab1f-1455cbeff289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
BHO: TmBpIeBHO Class: {bbacbafd-fa5e-4079-8b33-00eb9f13d4ac} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
BHO: Bing Bar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll
BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll
TB: @C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100: {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll
uRun: [Best Buy pc app] C:\Users\Ace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Best Buy\Best Buy pc app.appref-ms
mRun: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
mRun: [UpdateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
mRun: [Nuance PDF Reader-reminder] "C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Reader\Ereg\Ereg.ini"
mRun: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
mRun: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
mRun: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
mRun: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
mRun: [NUSB3MON] "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe"
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll
IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe32.dll
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
AppInit_DLLs: C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll
BHO-X64: TmIEPlugInBHO Class: {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll
BHO-X64: Trend Micro NSC BHO - No File
BHO-X64: IEVkbdBHO Class: {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\x64\ievkbd.dll
BHO-X64: IEVkbdBHO - No File
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: TmBpIeBHO Class: {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll
BHO-X64: TmBpIeBHO - No File
BHO-X64: FilterBHO Class: {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\x64\klwtbbho.dll
BHO-X64: link filter bho - No File
mRun-x64: [Trend Micro Client Framework] "C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe"
mRun-x64: [Trend Micro Titanium] C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe -set Silent "1" SplashURL ""
mRun-x64: [IgfxTray] C:\Windows\system32\igfxtray.exe
mRun-x64: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
mRun-x64: [Persistence] C:\Windows\system32\igfxpers.exe
mRun-x64: [ETDWare] %ProgramFiles%\Elantech\ETDCtrl.exe
mRun-x64: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
mRun-x64: [IntelWireless] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
mRun-x64: [IntelWirelessWiMAX] "C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe" /tasktray /nosplash
mRun-x64: [Setwallpaper] c:\programdata\SetWallpaper.cmd
mRun-x64: [EKIJ5000StatusMonitor] C:\Windows\system32\spool\DRIVERS\x64\3\EKIJ5000MUI.exe
================= FIREFOX ===================
FF - ProfilePath - C:\Users\Ace\AppData\Roaming\Mozilla\Firefox\Profiles\2whcru55.default\
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.0.60129.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll
FF - plugin: C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll
============= SERVICES / DRIVERS ===============
R? clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86
R? clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64
R? fssfltr;fssfltr
R? fsssvc;Windows Live Family Safety Service
R? MyWiFiDHCPDNS;Wireless PAN DHCP Server
R? SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver
R? WatAdminSvc;Windows Activation Technologies Service
R? wlcrasvc;Windows Live Mesh remote connections service
S? AFBAgent;AFBAgent
S? Amsp;Trend Micro Solution Platform
S? AVP;Kaspersky Anti-Virus
S? bpenum;bpenum
S? bpmp;Intel(R) Centrino(R) WiMAX 6050 Series
S? bpusb;bpusb
S? DMAgent;Intelr PROSet/Wireless WiMAX Red Bend Device Management Service
S? ETD;ELAN PS/2 Port Input Device
S? HECIx64;Intel(R) Management Engine Interface
S? Impcd;Impcd
S? IntcDAud;Intel(R) Display Audio
S? KLBG;Kaspersky Lab Boot Guard Driver
S? KLIM6;Kaspersky Anti-Virus NDIS 6 Filter
S? klmouflt;Kaspersky Lab KLMOUFLT
S? L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller
S? NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit
S? nusb3hub;NEC Electronics USB 3.0 Hub Driver
S? nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver
S? tmevtmgr;tmevtmgr
S? UNS;Intel(R) Management & Security Application User Notification Service
S? vwififlt;Virtual WiFi Filter Driver
S? vwifimp;Microsoft Virtual WiFi Miniport Service
S? wdkmd;Intel WiDi KMD
S? WiMAXAppSrv;Intelr PROSet/Wireless WiMAX Service
=============== Created Last 30 ================
2011-04-16 16:37:06 -------- d-----w- C:\Users\Ace\AppData\Local\ElevatedDiagnostics
2011-04-12 22:34:42 162320 ----a-w- C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru\components\KavLinkFilter.dll
2011-04-12 22:33:50 -------- d-----w- C:\Program Files (x86)\Kaspersky Lab
2011-04-12 22:33:50 -------- d-----w- C:\PROGRA~3\Kaspersky Lab
2011-04-12 22:32:21 -------- d-----w- C:\PROGRA~3\Kaspersky Lab Setup Files
2011-04-07 19:38:42 -------- d-----w- C:\Users\Ace\AppData\Roaming\FLEXnet
2011-04-07 19:38:39 -------- d-----w- C:\Users\Ace\AppData\Roaming\Nuance
2011-03-30 14:07:33 -------- d-----w- C:\PROGRA~3\Kodak
2011-03-30 14:07:31 232960 ----a-w- C:\Windows\System32\Spool\prtprocs\x64\EKIJ5000PPR.dll
2011-03-30 14:07:06 -------- d-----w- C:\Windows\System32\kodak
2011-03-27 19:38:42 -------- d-----w- C:\Windows\SysWow64\Wat
2011-03-27 19:38:42 -------- d-----w- C:\Windows\System32\Wat
2011-03-27 19:22:37 367104 ----a-w- C:\Windows\System32\wcncsvc.dll
2011-03-27 19:22:37 276992 ----a-w- C:\Windows\SysWow64\wcncsvc.dll
2011-03-27 19:20:17 -------- d-----w- C:\PROGRA~3\ASUS
2011-03-27 19:20:14 -------- d-----w- C:\Users\Ace\AppData\Local\ASUS
2011-03-27 19:17:35 -------- d-----w- C:\Program Files (x86)\Smith Micro
2011-03-27 06:51:02 -------- d-----w- C:\Users\Ace\AppData\Roaming\Zeon
2011-03-27 06:37:54 -------- d-----w- C:\Users\Ace\AppData\Local\Best Buy pc app
2011-03-26 18:34:28 99176 ----a-w- C:\Windows\SysWow64\PresentationHostProxy.dll
2011-03-26 18:34:28 49472 ----a-w- C:\Windows\SysWow64\netfxperf.dll
2011-03-26 18:34:28 48960 ----a-w- C:\Windows\System32\netfxperf.dll
2011-03-26 18:34:28 444752 ----a-w- C:\Windows\System32\mscoree.dll
2011-03-26 18:34:28 320352 ----a-w- C:\Windows\System32\PresentationHost.exe
2011-03-26 18:34:28 297808 ----a-w- C:\Windows\SysWow64\mscoree.dll
2011-03-26 18:34:28 295264 ----a-w- C:\Windows\SysWow64\PresentationHost.exe
2011-03-26 18:34:28 1942856 ----a-w- C:\Windows\System32\dfshim.dll
2011-03-26 18:34:28 1130824 ----a-w- C:\Windows\SysWow64\dfshim.dll
2011-03-26 18:34:28 109912 ----a-w- C:\Windows\System32\PresentationHostProxy.dll
2011-03-26 16:24:35 -------- d-----w- C:\Users\Ace\AppData\Local\Deployment
2011-03-26 16:24:35 -------- d-----w- C:\Users\Ace\AppData\Local\Apps
2011-03-26 16:24:34 -------- d-----w- C:\Users\Ace\AppData\Local\SRS Labs
2011-03-26 16:24:33 -------- d-----w- C:\Users\Ace\AppData\Roaming\Intel
2011-03-26 08:17:16 58288 ----a-w- C:\Windows\SysWow64\rpcnet.dll
2011-03-26 08:17:16 58288 ------w- C:\Windows\SysWow64\rpcnet.exe
2011-03-26 08:16:55 13160 ----a-w- C:\Windows\SysWow64\Upgrd.exe
==================== Find3M ====================
2011-04-16 17:21:06 17920 ----a-w- C:\Windows\SysWow64\rpcnetp.dll
2011-04-16 17:20:57 17920 ----a-w- C:\Windows\SysWow64\rpcnetp.exe
2011-04-16 17:20:57 17920 ----a-w- C:\Windows\System32\rpcnetp.exe
2011-02-15 20:33:42 34816 ----a-w- C:\Windows\SysWow64\identprv.dll
2011-01-26 06:53:10 982912 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys
2011-01-26 06:53:10 265088 ----a-w- C:\Windows\System32\drivers\dxgmms1.sys
2011-01-26 06:31:20 144384 ----a-w- C:\Windows\System32\cdd.dll
============= FINISH: 10:50:07.65 ===============

Attach log:
DDS (Ver_11-03-05.01)
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 3/26/2011 9:23:16 AM
System Uptime: 4/16/2011 10:20:51 AM (0 hours ago)
Processor: Intel(R) Core(TM) i5 CPU M 480 @ 2.67GHz | Socket 989 | 2667/533mhz
==== Disk Partitions =========================
==== Installed Programs ======================
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Alcor Micro USB Card Reader
ASUS AI Recovery
ASUS FancyStart
ASUS LifeFrame3
ASUS Live Update
ASUS MultiFrame
ASUS SmartLogon
ASUS Splendid Video Enhancement Technology
ASUS U Series Bamboo ScreenSaver
ASUS Virtual Camera
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver
ATK Package
Best Buy pc app
Bing Bar
Bing Bar Platform
Bing Rewards Client Installer
CyberLink LabelPrint
CyberLink Power2Go
Intel(R) Control Center
Intel(R) Graphics Media Accelerator Driver
Intel(R) Management Engine Components
Junk Mail filter update
Kaspersky Anti-Virus 2010
Mesh Runtime
Messenger Companion
Microsoft Default Manager
Microsoft Office 2010
Microsoft Search Enhancement Pack
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Mozilla Firefox 4.0 (x86 en-US)
MSXML 4.0 SP3 Parser (KB973685)
NEC Electronics USB 3.0 Host Controller Driver
Nuance PDF Reader
Realtek High Definition Audio Driver
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Windows Live Communications Platform
Windows Live Essentials
Windows Live Installer
Windows Live Mail
Windows Live Mesh
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Messenger
Windows Live Messenger Companion Core
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
Wireless Console 3
==== End Of File ===========================

Here goes nothing!
Active Member
Posts: 1
Joined: April 16th, 2011, 8:12 am
Register to Remove

Re: New Computer Infected/Slow (Why I can't have nice things

Unread postby Carolyn » April 17th, 2011, 3:09 pm

I'm reviewing your logs and will post back shortly.
User avatar
MRU Emeritus
MRU Emeritus
Posts: 4701
Joined: April 18th, 2007, 9:36 am
Location: Maine

Re: New Computer Infected/Slow (Why I can't have nice things

Unread postby Carolyn » April 17th, 2011, 3:57 pm

Hello and Welcome to the forums!

My name is Carolyn and I'll be glad to help you with your computer problems.

Please do not run any other tool until instructed to do so!
Please reply to this thread, do not start another!
Please tell me about any problems that have occurred during the fix.
Please tell me of any other symptoms you may be having as these can help also.
Please try as much as possible not to run anything while executing a fix.

If you follow these instructions, everything should go smoothly.


Multiple Anti-virus Programs
You are operating your computer with multiple Anti-virus programs running in memory at once:
Kaspersky Anti-Virus 2010
Trend Micro Titanium

Anti-virus programs take up an enormous amount of your computer's resources when they are actively scanning your computer. Having two anti-virus programs running at the same time can cause your computer to run very slow, become unstable and even, in rare cases, crash. Please remove one of them NOW.


Please download Malwarebytes' Anti-Malware and save it to a convenient location.
  1. Right click on mbam-setup.exe and select "Run as administrator" to install it.
  2. Before clicking the Finish button, make sure that these 2 boxes are checked (ticked):
      Update Malwarebytes' Anti-Malware
      Launch Malwarebytes' Anti-Malware
  3. Malwarebytes' Anti-Malware will now check for updates. If your firewall prompts, please allow it. If you can't update it, select the Update tab. Under Update Mirror, select one of the websites and click on Check for Updates.
  4. Select the Scanner tab. Click on Perform full scan, then click on Scan.
  5. Leave the default options as it is and click on Start Scan.
  6. When done, you will be prompted. Click OK, then click on Show Results.
  7. Check (tick) all items except items in the C:\System Volume Information folder and click on Remove Selected.
  8. After it has removed the items, Notepad will open. Please post this log in your next reply. You can also find the log in the Logs tab. The bottom most log is the latest.

Download and run OTL

Download OTL by Old Timer and save it to your Desktop.
  • Right click on OTL.exe and select "Run as administrator" to run it.
  • Under Extra Registry section, select Use SafeList.
  • Click the Scan All Users checkbox.
  • Click on Run Scan at the top left hand corner.
  • When done, two Notepad files will open.
    • OTL.txt <-- Will be opened
    • Extras.txt <-- Will be minimized
  • Please post the contents of these 2 Notepad files in your next reply.

Please post the following:
  • The Malwarebytes' log
  • The OTL.txt logfile
  • The Extras.txt logfile
User avatar
MRU Emeritus
MRU Emeritus
Posts: 4701
Joined: April 18th, 2007, 9:36 am
Location: Maine

Re: New Computer Infected/Slow (Why I can't have nice things

Unread postby Carolyn » April 21st, 2011, 7:12 am

Due to a lack of response, this topic is now closed.

If you still require help, please open a new thread in the Infected? Virus, malware, adware, ransomware, oh my! forum, include a fresh FRST log, and wait for a new helper.
User avatar
MRU Emeritus
MRU Emeritus
Posts: 4701
Joined: April 18th, 2007, 9:36 am
Location: Maine
Register to Remove

  • Similar Topics
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!

Who is online

Users browsing this forum: No registered users and 56 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware