[xCherryXSherryx]

I got this laptop last month and already it's taking 3 minutes+ just to load firefox (without any other programs open). I tried scanning my system with my antivirus, but it's being inconsistent. It'd say there are 20 infected files, and if you scan again without quarantining (which I did by accident), it would say there wasn't any problem at all. I removed the spyware and although it's not as slow as it was before, the startup time is still a LOT longer than usual, and firefox STILL stops responding every 2-3 minutes. I really don't know what the problem is...help?

[Advertisements]

My laptop has 4 gb of DDR memory and I'm using Windows 7 64-bit.

[xCherryXSherryx]

My laptop has 4 gb of DDR memory and I'm using Windows 7 64-bit.

[sari]

r0adra93,

You may not reply to topics in this forum. As per our Terms of Use:

Because of the potential for harm, only staff members approved for malware removal are allowed to offer malware removal advice or reply to malware topics.

Please respect the rules you agreed to when you joined the forum.

xCherryxSherryx, please wait for one of our qualified staff members to respond to your topic.

[Essexboy]

Hi there let me see what you have

GMER Rootkit Scanner - Download - Homepage
[*] Download GMER
[*] Extract the contents of the zipped file to desktop.
[*] Double click GMER.exe.

[*] If it gives you a warning about rootkit activity and asks if you want to run a full scan...click on NO, then use the following settings for a more complete scan..
[*] In the right panel, you will see several boxes that have been checked. Ensure the following are UNCHECKED ...

• IAT/EAT
• Drives/Partition other than Systemdrive (typically C:\)
• Show All (don't miss this one)
  
  Click the image to enlarge it

• Then click the Scan button & wait for it to finish.
• Once done click on the [Save..] button, and in the File name area, type in "ark.txt"
• Save the log where you can easily find it, such as your desktop.

**Caution**Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries
Please copy and paste the report into your Post.

THEN

Download OTL to your Desktop

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• Select Scan all users
• Under the Custom Scan box paste this in
  
  
  netsvcs
  drivers32
  %SYSTEMDRIVE%\*.*
  %systemroot%\system32\*.wt
  %systemroot%\system32\*.ruy
  %systemroot%\Fonts\*.com
  %systemroot%\Fonts\*.dll
  %systemroot%\Fonts\*.ini
  %systemroot%\Fonts\*.ini2
  %systemroot%\Fonts\*.exe
  %systemroot%\system32\spool\prtprocs\w32x86\*.*
  %systemroot%\REPAIR\*.bak1
  %systemroot%\REPAIR\*.ini
  %systemroot%\system32\*.jpg
  %systemroot%\*.jpg
  %systemroot%\*.png
  %systemroot%\*.scr
  %systemroot%\*._sy
  %APPDATA%\Adobe\Update\*.*
  %ALLUSERSPROFILE%\Favorites\*.*
  %APPDATA%\Microsoft\*.*
  %PROGRAMFILES%\*.*
  %APPDATA%\Update\*.*
  %systemroot%\*. /mp /s
  CREATERESTOREPOINT
  %systemroot%\System32\config\*.sav
  %ALLUSERSPROFILE%\Start Menu\*.lnk /x
  %systemroot%\system32\config\systemprofile\*.dat /x
  %systemroot%\*.config
  %systemroot%\system32\*.db
  %PROGRAMFILES%\bak. /s
  %systemroot%\system32\bak. /s
  HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
  
  
• Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Post both logs

[xCherryXSherryx]

My antivirus finally decided to work and pick up the 3 infected files that were making my computer lag. But thanks posting anyway x]

[Essexboy]

It may be advisable to run GMER and OTL to ensure that it has all gone. I will check the logs if you wish

[Essexboy]

It may be advisable to run GMER and OTL to ensure that it has all gone. I will check the logs if you wish

[Essexboy]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.