System running very slowly, unresponsive many times [Solved]

For the past 3 days my system has been running very slow, if I leave for even a half hour it takes several minutes to get back to running again. I ran malwarebytes and cleaned the pup files found but still the problem persists.

There’s no sign of anything bad on your computer but a few things that need tidying up.

First

You need to move Farbar Recovery Scan Tool to your desktop otherwise fixes will not work.

• go to your Downloads folder and locate Farbar Recovery Scan Tool
• right click and select Cut
• go to an empty spot on your desktop, right click and select Paste

Farbar Recovery Scan Tool should now be on your desktop.

================================================

Run Farbar Recovery Scan Tool

Open notepad. Please copy the contents of the code box below and paste it into Notepad.

CloseProcesses:
HKU\S-1-5-21-1069211171-1032678597-3133260682-1001\…\MountPoints2: {14d88b8c-41df-11e5-81d8-00262d289fc4} - G:\LG_PC_Programs.exe
HKU\S-1-5-21-1069211171-1032678597-3133260682-1001\…\MountPoints2: {2ed78b9e-4ad6-11e4-b18e-00262d289fc4} - G:\LG_PC_Programs.exe
HKU\S-1-5-21-1069211171-1032678597-3133260682-1001\…\MountPoints2: {a21070b2-0165-11e6-bda4-00262d289fc4} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-1069211171-1032678597-3133260682-1001\…\MountPoints2: {bb746c77-426c-11e4-b370-00262d289fc4} - G:\LaunchU3.exe -a
HKU\S-1-5-21-1069211171-1032678597-3133260682-1001\…\MountPoints2: {ce33646d-05b5-11e6-8974-00262d289fc4} - G:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-1069211171-1032678597-3133260682-1001\…\MountPoints2: {eabd1f25-3ae8-11e4-ae5d-806e6f6e6963} - D:\setup\rsrc\Autorun.exe
HKU\S-1-5-18\…\Run: [AviraSpeedup] => "C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe" -autorun
ShellIconOverlayIdentifiers: [    BoxSyncFileLocked] -> {2a607da5-abe8-358e-a881-c0f5faf2d3a5} =>
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  -> No File
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  -> No File
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} =>  -> No File
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} =>  -> No File
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  -> No File
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} =>  -> No File
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  -> No File
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} =>  -> No File
ShortcutTarget: Dropbox.lnk -> C:\Users\Bryan\AppData\Roaming\Dropbox\bin\Dropbox.exe (No File)
BootExecute: autocheck autochk * sdnclean64.exe
SearchScopes: HKLM -> {FCF54A22-DAC4-463D-B5F0-681321A7F67D} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKLM-x32 -> {FCF54A22-DAC4-463D-B5F0-681321A7F67D} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1069211171-1032678597-3133260682-1001 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_enUS605
SearchScopes: HKU\S-1-5-21-1069211171-1032678597-3133260682-1001 -> {FCF54A22-DAC4-463D-B5F0-681321A7F67D} URL = hxxps://www.google.com/search?q={searchTerms}
S2 NetDrive2_Service_NetDrive2; C:\Program Files\NetDrive2\nd2svc.exe [X]
S0 eorclc; no ImagePath
S3 avchv; system32\DRIVERS\avchv.sys [X]
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
2017-04-14 21:22 - 2016-08-20 11:17 - 00000000 ____D C:\Users\Bryan\AppData\Roaming\IObit
C:\Users\Bryan\AppData\Roaming\wklnhst.dat
C:\Users\Bryan\AppData\Local\resmon.resmoncfg
C:\Users\Bryan\AppData\Local\Zip-File-Opener_1706.rar
C:\ProgramData\Ament.ini
C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
C:\Users\Bryan\AppData\Local\Temp\ckxj-cvh.dll
CustomCLSID: HKU\S-1-5-21-1069211171-1032678597-3133260682-1001_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\Bryan\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-1069211171-1032678597-3133260682-1001_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Bryan\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-1069211171-1032678597-3133260682-1001_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Bryan\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll => No File
IE trusted site: HKU\S-1-5-21-1069211171-1032678597-3133260682-1001\…\facebook.com -> hxxps://staticxx.facebook.com
IE trusted site: HKU\S-1-5-21-1069211171-1032678597-3133260682-1001\…\facebook.net -> hxxps://connect.facebook.net
IE trusted site: HKU\S-1-5-21-1069211171-1032678597-3133260682-1001\…\fbcdn.net -> hxxps://static.xx.fbcdn.net
IE trusted site: HKU\S-1-5-21-1069211171-1032678597-3133260682-1001\…\google-analytics.com -> hxxps://www.google-analytics.com
IE trusted site: HKU\S-1-5-21-1069211171-1032678597-3133260682-1001\…\hosts -> hxxps://hosts
IE trusted site: HKU\S-1-5-21-1069211171-1032678597-3133260682-1001\…\paragon-software.com -> hxxps://bo4-fe.paragon-software.com
IE trusted site: HKU\S-1-5-21-1069211171-1032678597-3133260682-1001\…\pch.com -> hxxps://pch.com
IE trusted site: HKU\S-1-5-21-1069211171-1032678597-3133260682-1001\…\pga.com -> hxxps://pga.com
FirewallRules: [TCP Query User{022FA091-367D-4079-A8A2-ED2592DD7D24}C:\program files (x86)\frostwire\frostwire.exe] => (Block) C:\program files (x86)\frostwire\frostwire.exe
FirewallRules: [UDP Query User{09F60FA5-71A9-473F-8B6A-E4D4253CEA95}C:\program files (x86)\frostwire\frostwire.exe] => (Block) C:\program files (x86)\frostwire\frostwire.exe
C:\Program Files (x86)\Avira
C:\Users\Bryan\AppData\Roaming\IObit
C:\Users\Bryan\AppData\Roaming\wklnhst.dat
C:\Users\Bryan\AppData\Local\resmon.resmoncfg
C:\Users\Bryan\AppData\Local\Zip-File-Opener_1706.rar
C:\ProgramData\Ament.ini
C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
C:\Users\Bryan\AppData\Local\Temp\ckxj-cvh.dll
C:\program files (x86)\frostwire
Hosts:
EmptyTemp:

NOTE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

• save the files as fixlist.txt in the same folder as FRST – NOTE: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work
• run FRST64 then click Fix just once and wait
• it will create a log on your desktop, (Fixlog.txt); please post it to your reply.

================================================

Run Malwarebytes Anti-Malware

Please download and run the installer for Malwarebytes 3.0.

• follow the prompts to install the program, (Malwarebytes 3.0 will automatically upgrade Malwarebytes Anti-Malware 2.x to Malwarebytes 3.0)
• at the end, be sure a checkmark is placed next to the following
  • Launch Malwarebytes Anti-Malware
  • a 14 day trial of the Premium features is pre-selected: deselect this if you don’t want it, (it won’t diminish the scanning and removal capabilities of the program).
• click Finish.
• on the Dashboard, click Update Now
• after the update completes, click the Scan Now' button.
• if an update is available, clicking the Update Now button will update it
• a Threat Scan will begin.
• when the scan is complete, if malware has been detected, click Apply Actions to allow MBAM to clean what was found
• when the prompt to restart the computer appears, click Yes.
• after the restart once you are back at your desktop, open MBAM once more
• click on the ‘History’ tab, the ‘Application Logs’
• double-click on the scan log which shows the date and time of the scan just performed.
• click Copy to Clipboard
• please paste the contents of the clipboard into your reply.

================================================

Run Security Check

Download Security Check by screen317 from here.

• save it to your Desktop.
• double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
• a Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE: If you get the following message: UNSUPPORTED OPERATING SYSTEM! ABORTED!, try rebooting the system and then run SecurityCheck again.

Logs to include with the next post:

Fixlog.txt
Mbam.txt
checkup.txt

Satchfan

Do you want me to run Farbar tool first then open notepad and paste the script you wrote or do notepad first then run farbar?

• move FRST to your desktop
• run Notepad and save the file to your desktop
• open FRST and click 'Fix'.

All looks good.

Any change?

Seems to be running smoother. thank you very much for your time and help. When I use CC cleaner what are the best settings to use?

I have never used CCleaner but from information I have it's a good tool to use and would advise you to allow it to do the following:

• Internet Explorer - Deletes Temporary Internet files , history, cookies, autocomplete from history, and index.dat.
• Firefox - Deletes Temporary files, history, cookies, download history, and form history.
• Google Chrome - Deletes Temporary files, history, cookies, download history, and form history.
• Opera - Deletes Temporary files, history, and cookies.
• Safari - Deletes Temporary files, history, cookies, and form history.
• Windows - Deletes Recycle Bin, Recent Documents, Temporary files and Log files.

However,  I also suggest that you never allow it to 'clean' the registry. ALL registry 'cleaners' can do more harm than good.

I'll leave this open for 24 hours in case there are any problems after which I'll close it.

Safe computing

Satchfan

I'm sorry but in the last ten minutes things have gotten bad again. The system hangs up for minutes at a time, I got the option to wait or kill the web page and decided to wait, it took about seven minutes for the page to become active again. I wonder if it may be the hard drive is failing, do you know of a program that I can download and run to get a good picture of my drives health without having to burn a disc to do so.

Let’s check your hard drive.

• go to Start and type in cmd
• right-click on the cmd icon above, and click Run As Administrator
• type chkdsk c: /r, (don't forget the spaces: there are two, chkdsk^c/:^/r) and hit Enter
• type Y to agree to run at restart
• type Exit and hit enter.

Now reboot your computer and let Chkdsk run.

Please go here for how to view the resulting log and let me know how it goes.

Nearly midnight here and I'm busy in the morning but will get back as soon as I can

Satchfan

Here is the chkdsk log file. 

Sorry for the delay, the scan took several hours to complete. I had to do things early today and just got back home.

Will this scan be able to detect if the drive is failing?

Yes, It'll give a good indication.