This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Very slow PC with at least one infection [Solved]

17 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

TDSSKiller came back just fine and what RogueKiller found is nothing to worry about. Out of all the scans we have run nothing is finding the rootkit that aswMBR has found, I am starting to think it may be a false positive.

 

Let me ask you, how is this system running now, any odd behavior ??

 

Lets check that file

 

You need to Enable Windows to Show all Files and Folders, you can find the instructions Here
 
Go to Jotti's Malware Scan and submit this file for analysis. Just Choose file and then Submit file , when done and the report loads just copy and paste the URL back into this thread for me to see
 
 
C:\windows\system32\csrsrv.dll <–This file

Hi Ken545,

 

Seems to be running better. Startup times were similar to the splash screen, "starting windows", black screen, and "welcome"; then the desktop came up at 1:39 cf 1:53 before and got to a stable desktop at 3:05 cf 3:48 before. Not big changes but going in the right direction.Chrome opened in 11 secs without any odd messages about processing requests now.

 

Here is the Jotti scan report link:

https://virusscan.jotti.org/en-US/filescanjob/hnmjhzax21

 

Where to now?

That Jotti scan shows that that file is fine, its not infected, just a false positive by aswMBR

 

If files have been altered or replaced by malware, Combofix has sigcheck option that will show on the log and it did not show this.

 

Looks like where done here, glad things are ok. I will leave this thread open for maybe 3 days, if within that time frame you feel we need to recheck it just post back

 

This will uninstall Combofix and all of its logs

 

Click Start > Run and copy/paste the following bolded text into the Run box and click OK:
 
ComboFix /Uninstall
 
 
========================================================
 
 

Double click on AdwCleaner.exe to run the tool again.
  •  
  • Click on the Uninstall button.
  • Click Yes when asked are you sure you want to uninstall.
  • Both AdwCleaner.exe, its folder and all logs will be removed.
 
 
 
==========================================================
 
 
Please download DelFix and save the file to your Desktop.
 
[external image: DelFix_zps139e2ea1.jpg]
 
  •  
  • Windows XP Double Click DelFix.exe to run the program. 
  • Windows Vista > Win 7 > Win 8 Right Click on DelFix.exe and select RUN AS ADMINISTRATOR 
  • Checkmark " Remove Disinfection Tools"
  • Click the Run button
 
 
This will remove the specialised tools we used to clean your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually
 
 
 
 
So How did I get infected in the first place <– Some reading for you to keep yourself safe online
 
 
Safe Surfn
Ken
 
 
 
 

 

Hi Ken545,
 
Thanks again for your excellent help.
 
I've run MS Office 2010 programs: PowerPoint, Publisher and Word and all ran nicely; no delays to speak of.
 
I've run the removal tasks you gave. MalwareBytes Anti-Rootkit exe file is still on the desktop. I ran RevoUninstaller in Hunter mode to uninstall it twice; the first time it reported one leftover registry entry which I deleted, the second time it report no leftover items. There is nothing that looks like MalwareBytes in the Processes tab in Task Manager. I shut down the PC then started again. The exe file is still on the desktop. Do I just delete it?
 
One last bit of advice from you, please.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI