[Krockz1993]

I ran the DPC program/. No response to mouse movement. Was rapidly moving it the entire test. Screenshot attached. 

 

The H1Z1 game I returned. My ram could not keep up at all and yes lead to quite the leek. From everything I have read it requires 6-8gb to run properly. Will be waiting till I upgrade my ram. 

 

I have not typed anything random into the search bar. This is also a new machine so I don't think it would be malware as I have never really had that issue with computers. If scanning for malware is the next step I would be happy to comply

Attached Thumbnails

• 

[Advertisements]

I didn't see any malware but it won't hurt to see if Rogue Killer finds anything.

This is the official g2g canned instructions.  It hasn't been updated in a while so may not be exactly accurate but it should get you started.  Best not to delete anything until I look at it.

Download  RogueKiller (by tigzy) on the desktop

Quit all programs

Start RogueKiller.exe by right clicking and Run As Admin.

Wait until Prescan has finished ...

Click on Scan. Once finished, click on Report

 

Please post the contents of the RKreport.txt in your next Reply.

[RKinner]

I didn't see any malware but it won't hurt to see if Rogue Killer finds anything.

This is the official g2g canned instructions.  It hasn't been updated in a while so may not be exactly accurate but it should get you started.  Best not to delete anything until I look at it.

Download  RogueKiller (by tigzy) on the desktop

Quit all programs

Start RogueKiller.exe by right clicking and Run As Admin.

Wait until Prescan has finished ...

Click on Scan. Once finished, click on Report

 

Please post the contents of the RKreport.txt in your next Reply.

[Krockz1993]

RogueKiller V12.9.6.0 (x64) [Jan 30 2017] (Free) by Adlice Software

mail : http://www.adlice.com/contact/

Feedback : http://forum.adlice.com

Website : http://www.adlice.co...ad/roguekiller/

Blog : http://www.adlice.com

 

Operating System : Windows 10 (10.0.14393) 64 bits version

Started in : Normal mode

User : Kyle [Administrator]

Started from : C:\Users\Kyle\Downloads\RogueKillerX64.exe

Mode : Scan -- Date : 02/05/2017 20:27:16 (Duration : 00:28:58)

 

¤¤¤ Processes : 0 ¤¤¤

 

¤¤¤ Registry : 9 ¤¤¤

[PUP.Gen1] (X64) HKEY_USERS\S-1-5-21-2451191991-901654944-1593775084-1003\Software\OCS -> Found

[PUP.Gen1] (X86) HKEY_USERS\S-1-5-21-2451191991-901654944-1593775084-1003\Software\OCS -> Found

[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-2451191991-901654944-1593775084-1003\Software\Microsoft\Internet Explorer\Main | Start Page : http://oem17win10.msn.com/?pc=NMTE -> Found

[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-2451191991-901654944-1593775084-1003\Software\Microsoft\Internet Explorer\Main | Start Page : http://oem17win10.msn.com/?pc=NMTE -> Found

[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-2451191991-901654944-1593775084-1003\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://oem17win10.msn.com/?pc=NMTE -> Found

[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-2451191991-901654944-1593775084-1003\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://oem17win10.msn.com/?pc=NMTE -> Found

[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{83ace8cd-f537-46c0-a4ae-bb423f4b6188} | DhcpNameServer : 10.0.1.1 10.0.1.3 ([][])  -> Found

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2451191991-901654944-1593775084-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_TrackProgs : 0  -> Found

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2451191991-901654944-1593775084-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_TrackProgs : 0  -> Found

 

¤¤¤ Tasks : 0 ¤¤¤

 

¤¤¤ Files : 0 ¤¤¤

 

¤¤¤ WMI : 0 ¤¤¤

 

¤¤¤ Hosts File : 0 ¤¤¤

 

¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤

 

¤¤¤ Web browsers : 2 ¤¤¤

[PUM.HomePage][Chrome:Config] Default [SecurePrefs] : homepage [https://news.google....=nn&authuser=0]-> Found

[PUM.HomePage][Chrome:Config] Default [SecurePrefs] : session.startup_urls [https://news.google....=nn&authuser=0]-> Found

 

¤¤¤ MBR Check : ¤¤¤

+++++ PhysicalDrive0: TOSHIBA DT01ACA100 ATA Device +++++

--- User ---

[MBR] ae1a9568bac6930c7e920b787da6578b

[BSP] 31993e546152540a86c4d2750d7d6313 : Windows Vista/7/8 MBR Code

Partition table:

0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 500 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]

1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 1026048 | Size: 953366 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]

User = LL1 ... OK

User = LL2 ... OK

 

[RKinner]

You can let roguekiller delete these:

 

[PUP.Gen1] (X64) HKEY_USERS\S-1-5-21-2451191991-901654944-1593775084-1003\Software\OCS -> Found

[PUP.Gen1] (X86) HKEY_USERS\S-1-5-21-2451191991-901654944-1593775084-1003\Software\OCS -> Found

 

[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2451191991-901654944-1593775084-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_TrackProgs : 0  -> Found

[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2451191991-901654944-1593775084-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_TrackProgs : 0  -> Found

 

I don't think the others are bad but if you want to remove them that's OK.  

If you remove this one:

[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{83ace8cd-f537-46c0-a4ae-bb423f4b6188} | DhcpNameServer : 10.0.1.1 10.0.1.3 ([][])  -> Found

You will probably have to reboot and it will come back since it's just a DNS different from the usual 192.168.x.x

[Krockz1993]

Done, What next sir?

[RKinner]

How is it running now?  Was it just that one game that didn't want to work?

[Krockz1993]

Best Answer

Computer is running about the same. Not to slow not to fast. I'm going to be ordering a SSD and 8gb of faster ram. That should help quite a bit. 

 

Plan on dual booting with arch on the SSD and windows on the HDD. I appreciate all of your help! I learned a few things while working with you so thats awesome. I will check this thread one last time after this post to see if anything else is recommended. If not it can be closed. Cheers!