TechSpot

Computer freezing, running slow. 8 steps attached

By sreincke
Dec 8, 2009
  1. Hi, my computer just started having some issues. It locks up when powering on at least 2 out of 3 attempts. When I do get it to power up, it ususally freezes within 15-20 minutes randomly. Sometimes while using internet, sometimes not. My AVG antivirus is not recognizing any issues, and I am ot sure what to do. All I know it is very annoying to have to restart computer every 20 minutes or so.

    Thanks!
     
  2. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

  3. sreincke

    sreincke TS Rookie Topic Starter

    Avira Antivir now installed

    I have attached the log of the full scan from Avira. I will let you know if the freezing problem persists.

    Thanks.
     
  4. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    If you don't mind me saying. The real issue here is Limewire and sharing files on your computer to others, and other computers to you
    I'll never feel that can be safe, however others explain it to me (1000 bitten, twice shy ;))
     
  5. sreincke

    sreincke TS Rookie Topic Starter

    limewire

    I thought I removed it. Did I only remove part of it?
     
  6. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Can you update Malwarebytes again, then run another quick scan, and save the log to be attached to a new reply


    Combofix:
    • Download [​IMG]Combofix to your desktop.
    • Disable your Antivirus (as Combofix will remove any found malwares)
    • Double click ComboFix & follow the prompts.
    • A window will open with a warning.
    • When the scan completes it will open a text window. Please save the log to be attached to a new reply


    Restart


    Run another fresh HJT Scan only log, and save the log to be attached to a new reply



    3 Attachments[​IMG] required:
    1. Malwarebytes
    2. Combofix
    3. HijackThis
     
  7. sreincke

    sreincke TS Rookie Topic Starter

    All attached

    Thank you for your help! All requested attachments are attached.
     
  8. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    You are still infected. Please follow the following precisely (we don't want to mess up Windows ;))

    Also, allow any Firewall message that may pop up


    1. Download Atapi.zip to your Desktop
      • Extract Atapi.zip file directly to your Desktop, giving Atapi.sys

    2. Start > Run > cmd /c del /a/f/q c:\atapi.sys > ok

    3. Start > Run > cmd /c start /min cmd /c "copy %windir%\system32\drivers\atapi.sys Desktop\*.suspect >log.txt&log.txt"
      • You will get "1 file(s) copied." Please close this Notepad

    4. Start > Run > cmd /c start /min cmd /c "copy Desktop\atapi.sys %windir%\system32\drivers\atapi.sys >log.txt&log.txt"
      • You will get "1 file(s) copied." Please close this Notepad

    5. Start > Run > cmd /c start /min cmd /c "copy Desktop\atapi.sys c:\atapi.sys >log.txt&log.txt"
      • You will get "1 file(s) copied." Please close this Notepad

    6. Start > Run > cmd /c start /min cmd /c "dir /a c:\atapi.sys >log.txt&log.txt"
      • Please save the text file to be attached to a new reply
    Restart

    Run Combofix again, attach[​IMG] the log

    :)
     
  9. sreincke

    sreincke TS Rookie Topic Starter

    clarification

    kimbo-

    Not sure if I am doing this right. I downloaded the atapi.zip to the desktop. However, when "extracting" I am getting the following message. "Cannot start winzip! Required file winzip.chm was not found in same folder as winzip."

    To be clear on how to extract: Right click the atapi desktop icon, then winzip, then extract to? This is when the above error comes up.

    Thanks again for your help and patience with me!!
     
  10. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Well just uninstall Winzip its obviously corrupt

    I use WinRAR: http://www.rarlab.com/rar/wrar391b2.exe
    That link is to the newest "Trial" version, but its free for a little while

    Install WinRAR and associated all the archives (like ZIP and all the rest to it) then finally right mouse drag the Atapi.zip file to a blank area on your Desktop, thus extracting it directly to your Desktop (ie not in its own folder) It says "extract here" I'm pretty sure :)
     
  11. sreincke

    sreincke TS Rookie Topic Starter

    ok. now do this I issume?
    The Log is attached.

    Thanks!





    Start > Run > cmd /c del /a/f/q c:\atapi.sys > ok


    Start > Run > cmd /c start /min cmd /c "copy %windir%\system32\drivers\atapi.sys Desktop\*.suspect >log.txt&log.txt"
    You will get "1 file(s) copied." Please close this Notepad


    Start > Run > cmd /c start /min cmd /c "copy Desktop\atapi.sys %windir%\system32\drivers\atapi.sys >log.txt&log.txt"
    You will get "1 file(s) copied." Please close this Notepad


    Start > Run > cmd /c start /min cmd /c "copy Desktop\atapi.sys c:\atapi.sys >log.txt&log.txt"
    You will get "1 file(s) copied." Please close this Notepad


    Start > Run > cmd /c start /min cmd /c "dir /a c:\atapi.sys >log.txt&log.txt"
    Please save the text file to be attached to a new reply
     
     
  12. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Ah huh, ..... And the rest I asked for too :rolleyes: (being really the most important part missing :D )
     
  13. sreincke

    sreincke TS Rookie Topic Starter

    oops!

    This is what you need!!
     
  14. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Yep that's it :grinthumb

    But, :( Not done properly.

    Please do those commands up there again (precisely ;))
     
  15. sreincke

    sreincke TS Rookie Topic Starter

    clarify

    Ok. Do I include the quote marks? " " " ? I just copied the commands from the post to the start>Run
     
  16. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Yes... yes you do :)

    You do exactly as I stated

    I actually copy the bold txt (and quotes) above :rolleyes: and Paste, that's a lot easier :grinthumb
     
  17. sreincke

    sreincke TS Rookie Topic Starter

    Crossing fingers

    I hope this is correct. I copy and pasted.

    When first running combofix it "detected the presence of a rootkit activity and needs to reboot the machine"

    When it rebooted, it froze. I manually rebooted, and locked up again while rebooting, and 2 nd time was a charm.
     
  18. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Nope :( It's persistent I'll say that

    Lets try another option to remove this infection

    Download MBR.exe and save it to your c:\ root directory, so its at c:\mbr.exe

    Click on Start > Run and type in cmd and click OK.

    Type in: c:\mbr.exe -f and then press the Enter key

    Restart

    Please provide another Combofix log as an attachment (I know, I know, but it only takes about 10 mins)
     
  19. sreincke

    sreincke TS Rookie Topic Starter

    Report attached

    Report attached.

    Hopefully not a coincedence, but my computer seems to be running better.
     
  20. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    It's finally gone :grinthumb

    Now lets cleanup all this stuff
    You can start by deleting all that "atapi" stuff on your Desktop
    And deleting MBR.exe located at C:\


    Un-install Combofix
    • Click START then RUN
    • Now type Combofix /uninstall in the runbox and click OK
    • Any popup errors about Antivirus just ok or close
    Note: 1 space after ComboFix in that uninstall command



    Uninstall SUPERAntispyware
    Start > Control Panel > Add/Remove Programs > SUPERAntispyware > Uninstall



    Update Java and remove older Java versions
    Run JavaRa
    This will remove all your old Java stuff (that is not required)
    It will also help you check for new Java updates Runtime updates
    Or just go here and auto check: http://java.com/en/download/installed.jsp?detect=jre&try=1



    Download and run TFC http://oldtimer.geekstogo.com/TFC.exe
    Your computer may need to Restart



    Clear & Reset System Restore's Cache
    Go to Start >> Run - type or copy/paste control sysdm.cpl,,4 and then press Enter
    • Tick on the checkbox - Turn off System Restore on all drives
    • Click Apply
    Turn it back 'On' by unticking the same checkbox & click Apply, and then OK


    Restart, and let me know how its performing
     
  21. sreincke

    sreincke TS Rookie Topic Starter

    Much better.....

    The computer has still been freezing when "re-booting". It freezes on the screen that looks like this:

    Top right hand corner- F2=setup, F12= boot menu
    Center- DELL, www.dell.com
    Bottom center- Dimension E521, BIOS revision 1.1.4


    On a happy note, once the computer does boot, (sometimes takes 2-3 tries), everything is working great. Once booted, the computer has not froze up on me yet.
     
  22. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    I have seen this freeze at POST (by the way, nothing to do with Windows)
    Due to Hard Drive or CD/DVD Drive (or data cabling to them) hardware issue
    I suspect Hard Drive
     
  23. sreincke

    sreincke TS Rookie Topic Starter

    Everything is running great once I get it to boot.
    It still freezes while booting sometimes. Any ideas?
     
  24. sreincke

    sreincke TS Rookie Topic Starter

    Is it fixable?
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.