Computer slow [Solved]

It's a llittle faster but not a lot faster.

GB

We're getting there.

I went to another website that I thought was reputable and downloaded what I thought was FRST

You should not have downloaded from anywhere except the sites I gave you links to, (but I think you know that now). Can you remember which site it was?


Uninstall programs

Please uninstall any AVG product left on your computer.

• click Start, Control Panel, Programs and Features
• click on AVG PC TuneUp 2014 and then Uninstall
• repeat this for any other AVG entry.

If you are prompted for an administrator password or confirmation, type the password or provide confirmation.

================================================

Run Farbar Recovery Scan Tool

Open notepad. Please copy the contents of the code box below and paste it into Notepad.

CustomCLSID: HKU\S-1-5-21-1992874582-3349113656-4066416677-1001_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> No Filepath
CustomCLSID: HKU\S-1-5-21-1992874582-3349113656-4066416677-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Sharon\AppData\Local\Google\Update\1.3.27.5\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1992874582-3349113656-4066416677-1001_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> No Filepath
CustomCLSID: HKU\S-1-5-21-1992874582-3349113656-4066416677-1001_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\Sharon\AppData\Local\Citrix\GoToMeeting\1440\G2MOutlookAddin.dll No File
CustomCLSID: HKU\S-1-5-21-1992874582-3349113656-4066416677-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Sharon\AppData\Local\Google\Update\1.3.26.9\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-1992874582-3349113656-4066416677-1001_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> No Filepath
Task: {09F713C9-DD9B-446B-A2F3-0C4F27A5D403} - System32\Tasks\Validate Installation => C:\Program Files\user extensions\updater.exe [2015-07-21] () <==== ATTENTION
Task: {70150072-3745-4970-92F2-319F581F5B89} - System32\Tasks\One System Care Monitor => C:\Program Files\OneSystemCare\CleanupConsole.exe
Task: {D19CEAE8-8D50-43AA-BE02-9BD931893253} - System32\Tasks\One System CarePeriod => C:\Program Files\OneSystemCare\OneSystemCare.exe
Task: {DFF5F404-E5D1-4C9B-A6DF-AD7A86B8B840} - System32\Tasks\GeniusBox => cmd.exe /C start "" "C:\Program Files\user extensions\client.exe" <==== ATTENTION
Task: {E37A6FDD-D5C9-4E94-B251-B372F6A2DCFE} - System32\Tasks\One System Care Run Delay => C:\Program Files\OneSystemCare\OneSystemCare.exe
Task: {F49EF02D-3499-4122-A306-8768A7A6322E} - System32\Tasks\Check Updates => C:\Program Files\user extensions\updater.exe [2015-07-21] () <==== ATTENTION
Task: {FC86BC9D-A39B-4C5F-A3E6-D9E2CFB5D088} - \OptimusNitro_Start No Task File <==== ATTENTION
2014-07-14 02:26 - 2014-07-14 02:26 - 00585528 _____ () C:\Program Files\AVG\AVG PC TuneUp\avgreplibx.dll
2014-07-14 02:26 - 2014-07-14 02:26 - 00357176 _____ () C:\Program Files\AVG\AVG PC TuneUp\tuavgx.dll
2015-07-21 03:54 - 2015-07-21 03:54 - 00076800 _____ () C:\Program Files\user extensions\Client.exe
FirewallRules: [{4F4D0146-ADF9-4BA9-B769-B9BE6A194012}] => (Allow) C:\Program Files\PremierOpinion\pmropn.exe
FirewallRules: [{976E81F9-33D6-45A9-905C-63E8E6B78923}] => (Allow) C:\Program Files\PremierOpinion\pmropn.exe
C:\Program Files\OneSystemCare\CleanupConsole.exe
C:\Program Files\AVG
C:\Program Files\user extensions\Client.exe
C:\Program Files\PremierOpinion

NOTE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

• save the files as fixlist.txt in the same folder as FRST – NOTE: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work
• run FRST64 then click Fix just once and wait
• it will create a log (Fixlog.txt); please post it to your reply.

================================================

Please run AdwCleaner again and FRST again and send the new log..

Logs to include in the next post:

Fixlog.txt
New AdwCleaner log
New FRST log

Thanks

Satchfan

I'd like a new FRST log: that one was produced before the AdwCleaner log.

Thanks

Satchfan

Thanks gb but I'd like a new normal Farbar scan.

Just run FRST, choose Scan and send the new log please.

That’s looking good.

Run Farbar Recovery Scan Tool

Open notepad. Please copy the contents of the code box below and paste it into Notepad.

2015-07-21 03:54 - 2015-07-21 03:54 - 00000064 _____ C:\Users\Sharon\AppData\Local\b74278e376736ee8626f0d56a9de8c47
2015-07-21 03:36 - 2015-07-21 03:36 - 00098644 _____ C:\Users\Sharon\Desktop\avgremover.log
2015-07-20 19:31 - 2012-07-09 10:10 - 00000000 ___HD C:\$AVG
2015-07-20 21:22 - 2014-11-04 14:23 - 00000000 ____D C:\ProgramData\AVG2015
2015-07-01 12:53 - 2014-04-14 12:13 - 00000000 ____D C:\Users\Sharon\AppData\Local\AVG
2013-05-21 03:10 - 2014-01-30 13:39 - 0003736 _____ () C:\Program Files\Mozilla Firefoxavg-secure-search.xml
2015-07-21 03:54 - 2015-07-21 03:54 - 0000064 _____ () C:\Users\Sharon\AppData\Local\b74278e376736ee8626f0d56a9de8c47
C:\Users\Sharon\Desktop\avgremover.log
C:\$AVG
C:\ProgramData\AVG2015
C:\Users\Sharon\AppData\Local\AVG
C:\Program Files\Mozilla Firefoxavg-secure-search.xml

NOTE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

• save the files as fixlist.txt in the same folder as FRST – NOTE: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work
• run FRST64 then click Fix just once and wait
• it will create a log (Fixlog.txt); please post it to your reply.

===================================================

Let’s run an online scan to be sure nothing is left and if that’s clear I’ll send instructions to tidy up.


Run ESET Online Scan

Note: This may take a long time so please be patient.

IMPORTANT Please make sure you uncheck the box next to Remove found threats. Eset will detect anything that looks even slightly suspicious, which could include legitimate program files. If you do not uncheck the box, Eset will automatically remove all suspicious files which could leave some of your software inoperable.

Note: You can use Internet Explorer, FireFox or  Chrome for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

Hold down Control and click on the following link to open ESET OnlineScan in a new window.

ESET OnlineScan

• click the Eset online Scanner button
• for alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  

  
  o    click on esetinstaller.exe to download the ESET Smart Installer. Save it to your desktop.
  o    double click on the Eset installer icon on your desktop.
   

• check Yes, I accept the Terms of Use
• click the Start button
• accept any security warnings from your browser
• check Enable detection of potentially unwanted applications
• click Advanced settings and select the following:
  

  
  o    scan archives
  o    scan for potentially unsafe applications
  o    enable Anti-Stealth technology

  
  Note: Do not check Remove found threats
   

• ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
• when the scan completes, push List of found threats
• push Export to Text file and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  
  

  Note - if ESET doesn't find any threats, no report will be created.
   

• push the back button.
• push Finish

When the scan is complete:

If no threats were found:
 

o    put a checkmark in "Uninstall application on close"
o    close program
o    report to me that nothing was found.
 

If threats were found:

o    click on "list of threats found"
o    click on "export to text file" and save it as ESET results and save to the desktop
o    Click on back
o    put a checkmark in "Uninstall application on close"
o    click on finish
o    close program
o    copy and paste the report here.
 

Thanks

Satchfan

 

Those appear to be the ones found in the previous scan and should have been removed with the instructions I gave at the time. In case you didn’t follow the instructions to delete them I’ll give them again.


Please copy all text in the code box below and paste it into Notepad:

@echo off
del /f /s /q "C:\Program Files\HP OFFICEJET 6210 Driver Utility\driverlib.dll”
del /f /s /q "C:\Users\Sharon\Downloads\ccsetup507 (1).exe”
del /f /s /q "C:\Users\Sharon\Downloads\ccsetup507.exe”
del /f /s /q "C:\Users\Sharon\Downloads\FreemakeVideoDownloader_3.5.0.7.exe”
del /f /s /q "C:\Users\Sharon\Downloads\hp-officejet-6210-driver-utility.exe”
del /f /s /q "C:\Users\Sharon\Downloads\HSS-3.42-install-e-680-plain.exe”
del /f /s /q "C:\Users\Sharon\Downloads\OptimusNitroSetup.exe”
del /f /s /q "C:\Users\Sharon\Downloads\youtube_downloader_hd_setup.exe”
del %0

• save the Notepad file to your desktop and name it delfiles.bat
• save type as "All Files"
• on your desktop, double-click on delfiles.bat to run it, (a black CMD window will flash, then disappear - this is normal).

The files/folders, if found, will have been deleted and the "delfile.bat" file will also be deleted.

=========================================

Let's do another (shorter) scan to be sure.

Please be patient as scanning may take some time. If you have problem running the scan, you might want to disable any real time protection that you have.

• click here to go to BitDefender QuickScan page.

For Firefox users:

o    Click on Scan Now. You will be prompted to install a plug-in: allow it. (In case you get stuck, refresh the page to try again).
o    A Software Installation window will appear. Click Install Now and the plugin will be installed as an Add-on.
o    Restart Firefox when done. Go back to the BitDefender QuickScan page again and click on Free Scan Now and proceed accordingly.
 

For Internet Explorer users:

o    Click on Scan Now. You will be prompted to install an ActiveX control. Please install.
o    The page will refresh. Click on Scan Now again and proceed accordingly.

• when the scan has completed, click on View report and a Notepad log will open.
• if there are any infections found, you will get a warning and the link to the report will be displayed as the number of infections. Click on it.

Post back the contents of this report. It can also be found at C:\Documents and Settings\\Application Data\QuickScan (“username” is the Windows log-in name.

Satchfan

Satchfan,

I could have sworn tha tI deleted the log files from both ESET and FRST before I did the scans.  Maybe I am wrong though.  I just opened FRST logfile and it said it had yesterday's date.  I ran te script you  provided and ran BitDefender scan.  It said tere were no infections.  I did not see a log on the desktop.  I also did a search with the file name you provided and the computer could not find it.  I hope this is what you need.

Thanks,

GB

I would say that your computer is clean if BitDefender found nothing.

Are there any remaining problems?

I am travelling back home today so if all is well I'll send instructions to tidy up but my reply will be delayed.

Satchfan

Satchfan,

Thanks for your help.  I appreciate it.  However, the computer does not seem to work much better.  Maybe I need more RAM.  I did not download an anti-virus yet after deleting AVG.  Would Avira work better?  You also said I need the Service pac.

Thanks,

GB

2GB is not bad for Vists so shouldn't be causing any slowness.

I’ve looked over one of your logs again and noticed some entries that may be contributing to the problem so we’re not quite finished yet.

First:

Antivirus

Do NOT install more than one or they will fight against each other and render both ineffective.

Here are some of the better AV products. Download and install one of them:

Bitdefender Antivirus Free Edition
Free Avast Home Edition - includes Dropbox or Google Chrome during installation - pre-checked by default
Avira AntiVir® Personal Edition Classic - includes an option to install Avira Browser Safety Add-on to your browser
Microsoft Security Essentials - de-select the option to join the customer experience improvement program

===================================================

Run Farbar Recovery Scan Tool

Open notepad. Please copy the contents of the code box below and paste it into Notepad.

FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\[removed]
FF Extension: Freemake Video Downloader Plugin - C:\Program Files\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\[removed] [2013-04-25]
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\[removed]
FF Extension: Freemake Youtube Download Button - C:\Program Files\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\[removed] [2013-04-25]
CHR Extension: (Freemake Video Downloader) - C:\Users\Sharon\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf [2013-05-03]
CHR HKLM\…\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - C:\Program Files\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2013-04-25]

NOTE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

• save the files as fixlist.txt in the same folder as FRST – NOTE: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work
• run FRST64 then click Fix just once and wait
• it will create a log (Fixlog.txt); please post it to your reply.

Please run AdwCleaner again and then FRST after running AdwCleaner and send the new logs.

Logs to include:

Fixlog.txt
AdwCleaner log
New FRST.txt

Satchfan

Satchfan

 I tried this morning and then again tonight.  I did the scan but the log did not show on the desktop.  Before I did scan I deleted all files of FRST except program.  At finish, a folder showed up on desktop called FRST Older…  I could not delete it and I tried to open it and it started to run like a program.  Got a message saying I could not delete it.

Thanks GB