Struggling with laptop part 2, back for 2020 [Solved]

Over a year and a half later, I'm back. Same thing as last time, everything's taking forever to launch and going ridiculously slow once it does. Disk usage is constantly at 100%. Looking over the thread from last year, I was asked to download Farbar Recovery Scan Tool and post what it said, so I'll do that again if it's still the right way to start. Should I use the same download link as I was given last year? https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 

Hello Fredbob392 and welcome to WTT.

My name is Satchfan and I would be glad to help you with your computer problem.

Please read the following guidelines which will help to make cleaning your machine easier:

• please follow all instructions in the order posted
• please continue to review my answers until I tell you your machine appears to be clean, (absence of symptoms does not mean that everything is clear)
• all logs/reports etc. must be posted in Notepad. Please ensure that word wrap is unchecked. In Notepad click Format and uncheck Word wrap if it is checked
• if you don't understand something, please don't hesitate to ask for clarification before proceeding
• the fixes are specific to your problem and should only be used for this issue on this machine
• please reply within 3 days. If you do not reply within this period I will post a reminder but topics with no reply in 4 days will be closed!

IMPORTANT:

Please DO NOT install/uninstall any programmes unless asked to.
Please DO NOT run any scans other than those requested

===================================================

Note: Please complete these tasks in the order given in the instructions.

===================================================

Run Malwarebytes Anti-Malware

You may have Malwarebytes Anti-Malware installed but if not, you can download it from here.

• run the programme
• click on the Scan
• the scan will begin when it has updated itself
• when the scan has completed and if malware was found, click the Quarantine Selected button to allow MBAM to quarantine what was found
• if prompted to restart the computer, close all other programmes and click Yes to restart your computer
• once you are back at your desktop, open MBAM once more
• click on the ‘Reports’ tab
• double-click on the most recent Scan Report
• click on Export, then Copy to Clipboard

Please paste the contents of the clipboard into your next reply to me.

===================================================

Download and run AdwCleaner

Download AdwCleaner from here and save it to your desktop.

• run AdwCleaner by clicking on Scan Now
• when it has finished, leave everything that was found checked, (ticked), then click on Clean and Repair
• if it asks to reboot, allow the reboot
• on reboot a log will be produced; please attach the content of the log to your next reply.

===================================================

Run Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• press Scan button
• it will produce a log called Frst.txt in the same directory the tool is run from
• please copy and paste log back here.
• the first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the Frst.txt into your reply.

Logs to include with next post:

AdwCleaner log
Mbam.txt
Frst.txt
Addition.txt

Thanks

Satchfan

Thank you. For the first thing, nothing was detected. Computer crashed seemingly right after if finished installing, gave me the message "Stop code: Driver unloaded without cancelling pending operations. What failed: mbam.sys" Not sure if that's related

should I check to quarantine the preinstalled software?

Yes

There are no infections on your computer, just a bit of tidying up and fixing the Start menu.

The slowness will be largely caused by McAfee and unless you pay for it, I’d suggest that you uninstall it and let Microsoft Security, (previously known as Windows Defender), look after your security together with Malwarebytes. Also, BitRaider is constantly running in the background.

================================================

P2P - I see you have P2P software, (uTorrent), installed on your machine.

We are not here to pass judgment on file-sharing as a concept but we will warn you that engaging in this activity will always make your computer very susceptible to infection and re-infection.

Please note: Even if you are using a ‘safe’ P2P programme, it is only the programme that is safe. You will be sharing files from uncertified sources, and these are more often than not, infected. Those who write malware use P2P file-sharing as a major vehicle to spread their wares.

Please see these topics for more information:

P2P File Sharing Risks.

Pirated Software is All Fun and Games Until Your Data’s Stolen.

I would strongly recommend that you uninstall it now.

Should you decide to keep it, please don’t use it until we have finished up here.

================================================

Note: Please complete these tasks in the order given in the instructions.

================================================

You need to move Farbar Recovery Scan Tool to your desktop otherwise fixes will not work.

• go to your Downloads folder and locate FRST64
• right click and select Cut
• go to an empty spot on your desktop, right click and select Paste

Farbar Recovery Scan Tool should now be on your desktop.

================================================

Run Farbar Recovery Scan Tool

Open notepad. Please copy the contents of the code box below and paste it into Notepad.

CloseProcesses:
S2 Dell SupportAssist Remediation; "C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe" [X]
Google Update Helper (HKLM-x32\…\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.51 - Google LLC) Hidden
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
CMD: taskkill /f /im StartMenuExperienceHost.exe
CMD: start C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
EmptyTemp:

NOTE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

• save the files as fixlist.txt in the same folder as FRST – NOTE: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work
• run FRST64 then click Fix just once and wait
• it will create a log on your desktop, (Fixlog.txt); please post it to your reply.

================================================

Uninstall programmes

Your version of Java is out-of-date and need to be removed and updated. Aso, Google Update Helper has been found to be bundled with 3rd party software.

Press the Windows Key + R at the same time, then type appwiz.cpl then Enter.

Please uninstall the following programmes:

Google Update Helper
jre1.8.0_231

You can install the latest version of Java here

Even though I just had you get the latest version of Java, there is a vulnerability with regards to Java and web browsers, therefore I recommend that you disable java in web browsers.

More information can be found here.

================================================

Please run FRST again and make sure there is a checkmark next to ‘Addition.txt’ before you hit Scan.

Logs to include with next post:

Fixlog.txt
New Frst.txt
New Addition.txt

When I try to enter "chrome://plugins" in the bar to disable java, I get a page that makes me suspect I'm making an obvious mistake.

I don't use chrome but Googling it suggests that you may need to disable it via Options > Under the Hood > Privacy > Content Settings > Plug-ins.

==============

You have Dell Data Vault constanly running and by all accounts this uses up a lot of processor power. Nobody seems to know exactly what it does but it is unnecessary so I suggest that you disable it.

Change Dell Data Vault Collector

• press the Windows key + R and type services.msc, then click OK
• in the list of services, scroll down to Dell Data Vault Collector
• double-click on it, then click the ‘General’ tab
• under ‘Service status’, click on Stop
• in the ‘Startup type’ list change it to Disabled
• click Apply, and then click OK
• reboot the computer.

Let me know how things are now.

Satchfan

Hello Fredbob392

It has been 3 days since I sent my last reply about your computer problem.

Please let me know if you still need help.

If I do not hear from you within 24 hours I'll assume that you no longer need help and close this topic.

Satchfan

Hey, sorry, work's been giving me crazy hours lately. I did the last couple of things you suggested and so far things definitely seem to be working faster. Thank you.

so far things definitely seem to be working faster

Are you happy to tidy up and close this?

Yes, what do I need to do?

Your computer appears to be clean. Now that it seems to be running well, let’s tidy up

Run KpRm

Download KpRm by kernel-panik and save it to your desktop.

• right-click kprm.exe and select Run as Administrator
• put a check mark next to these items:
  

  
  Delete tools
  Delete Now
   

• click Run.
• when it has finished, it will create and open a log and then delete itself.

===================================================

Recommended

Update and run Malwarebytes. This really is an excellent program that you should update and run on a regular basis, probably weekly.

===================================================

I also recommend that you read the following:

Simple and easy ways to keep your computer safe and secure on the Internet by Lawrence Abrams

Answers to Common Security Questions - Best Practices by quietman7

I will keep this open for 24 hours in case you have any problems, after which I’ll close the topic.

Safe computing

Satchfan

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.