TechSpot

Page Not Responding, Freezing, and Very Slow :(

Inactive
By singlelady78
Nov 16, 2013
  1. Please help, I've tried everything I know I could do but the problem seems to just get worse. Pages stop responding or stop working, everything freezes up all the time where I have to restart by pressing the power button, the PC is so slow. I'm so aggravated with this laptop, I just want to throw it across the room. Hope someone out there can help this poor gal.

    Malwarebytes Anti-Malware 1.75.0.1300
    www.malwarebytes.org
    Database version: v2013.11.16.07
    Windows Vista Service Pack 2 x86 NTFS
    Internet Explorer 9.0.8112.16421
    Mary :: MARY-PC [administrator]
    11/16/2013 9:13:17 PM
    mbam-log-2013-11-16 (21-13-17).txt
    Scan type: Quick scan
    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Shuriken | PUP | PUM | P2P
    Scan options disabled: Heuristics/Extra
    Objects scanned: 40685
    Time elapsed: 20 minute(s), 7 second(s)
    Memory Processes Detected: 0
    (No malicious items detected)
    Memory Modules Detected: 0
    (No malicious items detected)
    Registry Keys Detected: 0
    (No malicious items detected)
    Registry Values Detected: 0
    (No malicious items detected)
    Registry Data Items Detected: 0
    (No malicious items detected)
    Folders Detected: 0
    (No malicious items detected)
    Files Detected: 0
    (No malicious items detected)
    (end)
    DDS (Ver_2012-11-20.01) - NTFS_x86
    Internet Explorer: 9.0.8112.16520 BrowserJavaVersion: 10.25.2
    Run by Mary at 21:50:57 on 2013-11-16
    .
    ============== Running Processes ================
    .
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\SLsvc.exe
    C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    C:\Windows\system32\WLANExt.exe
    C:\Windows\System32\spoolsv.exe
    C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
    C:\Windows\ehome\ehRecvr.exe
    C:\Windows\ehome\ehsched.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\SearchIndexer.exe
    C:\Program Files\AVAST Software\Avast\AvastUI.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Windows\system32\DllHost.exe
    C:\Windows\system32\DllHost.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\svchost.exe -k rpcss
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Windows\system32\svchost.exe -k apphost
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Windows\System32\svchost.exe -k ipripsvc
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Windows\system32\svchost.exe -k iissvcs
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://www.yahoo.com/
    BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
    BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
    TB: <No Name>: {71576546-354D-41C9-AAE8-31F2EC22BF0D} - LocalServer32 - <no file>
    TB: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
    mRun: [AvastUI.exe] "c:\program files\avast software\avast\AvastUI.exe" /nogui
    uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
    mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
    mPolicies-System: EnableUIADesktopToggle = dword:0
    mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
    .
    INFO: HKCU has more than 50 listed domains.
    If you wish to scan all of them, select the 'Force scan all domains' option.
    .
    .
    INFO: HKLM has more than 50 listed domains.
    If you wish to scan all of them, select the 'Force scan all domains' option.
    .
    DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
    DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
    TCP: NameServer = 192.168.254.254
    TCP: Interfaces\{2EAD9BDF-540D-4F9F-8BD4-6DF9813F89A4} : DHCPNameServer = 192.168.254.254
    Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
    Notify: igfxcui - igfxdev.dll
    SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
    LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg
    mASetup: {A509B1FF-37FF-4bFF-8CFF-4F3A747040FF} - c:\windows\system32\rundll32.exe c:\windows\system32\advpack.dll,launchinfsectionex c:\program files\internet explorer\clrtour.inf,DefaultInstall.ResetTour,,12
    .
    ============= SERVICES / DRIVERS ===============
    .
    R? clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86
    R? NisDrv;Microsoft Network Inspection System
    R? WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0
    S? aswFsBlk;aswFsBlk
    S? aswMonFlt;aswMonFlt
    S? aswRvrt;avast! Revert
    S? aswSnx;aswSnx
    S? aswSP;aswSP
    S? aswVmm;avast! VM Monitor
    S? avast! Antivirus;avast! Antivirus
    S? FontCache;Windows Font Cache Service
    S? iprip;RIP Listener
    .
    =============== File Associations ===============
    .
    FileExt: .txt: txtfile=c:\windows\system32\NOTEPAD.EXE %1 [UserChoice]
    .
    =============== Created Last 30 ================
    .
    2013-11-16 20:08:40 -------- d-----w- c:\users\mary\appdata\local\FileTypeAssistant
    2013-11-15 21:14:14 7796464 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{51baeb33-1df5-498c-a51f-0b083bdd9898}\mpengine.dll
    2013-11-14 02:58:52 297984 ----a-w- c:\windows\system32\gdi32.dll
    2013-11-14 02:58:26 993792 ----a-w- c:\windows\system32\crypt32.dll
    2013-11-14 02:57:22 444928 ----a-w- c:\windows\system32\IKEEXT.DLL
    2013-11-14 02:57:19 596480 ----a-w- c:\windows\system32\FWPUCLNT.DLL
    2013-11-08 17:48:07 -------- d-----w- c:\programdata\BlueSprig
    2013-11-08 17:20:42 -------- d-----w- c:\users\mary\appdata\roaming\BlueSprig
    2013-11-08 17:20:26 -------- dc----w- c:\program files\BlueSprig
    2013-11-06 00:24:36 -------- d-----w- c:\windows\system32\catroot2
    2013-11-05 23:53:57 -------- d-----w- c:\windows\system32\wbem\repository
    2013-11-04 23:58:11 -------- d-----w- c:\users\mary\appdata\local\CrashDumps
    2013-11-02 20:49:11 -------- d-----w- c:\programdata\SUPERSetup
    2013-10-30 11:36:32 -------- d-----w- c:\users\mary\appdata\local\Promosoft Corporation
    2013-10-25 01:01:38 -------- d-----w- c:\windows\system32\wbem\repository.002
    2013-10-18 20:14:21 -------- d-----w- c:\users\mary\appdata\roaming\AVAST Software
    .
    ==================== Find3M ====================
    .
    2013-11-14 16:02:25 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2013-11-14 16:02:25 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
    2013-11-12 01:27:34 774392 ----a-w- c:\windows\system32\drivers\aswSnx.sys
    2013-11-12 01:27:34 70384 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
    2013-11-12 01:27:33 43152 ----a-w- c:\windows\avastSS.scr
    2013-10-18 20:06:22 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
    2013-10-18 20:06:22 178304 ----a-w- c:\windows\system32\drivers\aswVmm.sys
    2013-10-13 09:48:06 1806848 ----a-w- c:\windows\system32\jscript9.dll
    2013-10-13 09:35:52 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
    2013-10-13 09:35:38 1129472 ----a-w- c:\windows\system32\wininet.dll
    2013-10-13 09:30:14 142848 ----a-w- c:\windows\system32\ieUnatt.exe
    2013-10-13 09:29:02 420864 ----a-w- c:\windows\system32\vbscript.dll
    2013-10-13 09:25:39 2382848 ----a-w- c:\windows\system32\mshtml.tlb
    2013-10-12 16:45:33 499712 ----a-w- c:\windows\system32\msvcp71.dll
    2013-10-12 16:45:33 348160 ----a-w- c:\windows\system32\msvcr71.dll
    2013-09-03 18:35:12 238872 ------w- c:\windows\system32\MpSigStub.exe
    2013-08-29 07:36:04 2050048 ----a-w- c:\windows\system32\win32k.sys
    2013-08-27 02:47:50 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
    2013-08-27 02:47:50 189952 ----a-w- c:\windows\system32\d3d10core.dll
    2013-08-27 02:47:50 160768 ----a-w- c:\windows\system32\d3d10_1.dll
    2013-08-27 02:47:50 1029120 ----a-w- c:\windows\system32\d3d10.dll
    2013-08-27 01:52:08 1172480 ----a-w- c:\windows\system32\d3d10warp.dll
    2013-08-27 01:50:40 486400 ----a-w- c:\windows\system32\d3d10level9.dll
    2013-08-27 01:32:20 683008 ----a-w- c:\windows\system32\d2d1.dll
    2013-08-27 01:28:36 1069056 ----a-w- c:\windows\system32\DWrite.dll
    2013-08-27 01:28:35 798208 ----a-w- c:\windows\system32\FntCache.dll
    .
    ============= FINISH: 21:51:13.76 ===============
    .
    ==== Installed Programs ======================
    .
    Update for Microsoft Office 2007 (KB2508958)
    Adobe Flash Player 11 ActiveX
    Adobe Flash Player 11 Plugin
    Adobe Reader XI (11.0.05)
    Adobe Shockwave Player 12.0
    Apple Application Support
    Apple Software Update
    Atheros Client Utility
    Atheros Driver Installation Program
    avast! Free Antivirus
    CCleaner
    Cisco EAP-FAST Module
    Cisco LEAP Module
    Cisco PEAP Module
    EPSON CX6000 Series User's Guide
    EPSON Printer Software
    EPSON Scan
    EPSON Stylus CX6000 Scanner Driver Update
    FileHippo.com Update Checker
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Intel(R) Graphics Media Accelerator Driver
    Internet Explorer (Enable DEP)
    Java 7 Update 25
    Java Auto Updater
    JetBoost
    JetClean
    Malwarebytes Anti-Malware version 1.75.0.1300
    Microsoft .NET Framework 3.5 SP1
    Microsoft .NET Framework 4 Client Profile
    Microsoft Application Error Reporting
    Microsoft Office 2007 Service Pack 3 (SP3)
    Microsoft Office Access MUI (English) 2007
    Microsoft Office Access Setup Metadata MUI (English) 2007
    Microsoft Office Enterprise 2007
    Microsoft Office Excel MUI (English) 2007
    Microsoft Office File Validation Add-In
    Microsoft Office Groove MUI (English) 2007
    Microsoft Office Groove Setup Metadata MUI (English) 2007
    Microsoft Office InfoPath MUI (English) 2007
    Microsoft Office OneNote MUI (English) 2007
    Microsoft Office Outlook MUI (English) 2007
    Microsoft Office PowerPoint MUI (English) 2007
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proofing (English) 2007
    Microsoft Office Publisher MUI (English) 2007
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office Word MUI (English) 2007
    Microsoft Silverlight
    Microsoft SkyDrive
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
    MSXML 4.0 SP3 Parser
    MSXML 4.0 SP3 Parser (KB2758694)
    OGA Notifier 2.0.0048.0
    Photo Explosion Special Edition
    QuickTime
    Revo Uninstaller 1.95
    Roxio Creator Audio
    Roxio Creator Copy
    Roxio Creator Data
    Roxio Creator DE
    Roxio Creator Tools
    Roxio Express Labeler 3
    Roxio Update Manager
    Security Update for CAPICOM (KB931906)
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2840629)
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2861697)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2832407)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2861188)
    Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596825) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2597973) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2687309) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2760411) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2760415) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2760585) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2760591) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2827326) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2827329) 32-Bit Edition
    Security Update for Microsoft Office Excel 2007 (KB2827324) 32-Bit Edition
    Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
    Security Update for Microsoft Office Outlook 2007 (KB2825644) 32-Bit Edition
    Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
    Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
    Security Update for Microsoft Office Publisher 2007 (KB2597971) 32-Bit Edition
    Security Update for Microsoft Office Word 2007 (KB2827330) 32-Bit Edition
    Spelling Dictionaries Support For Adobe Reader XI
    swMSM
    System Requirements Lab for Intel
    Update for 2007 Microsoft Office System (KB967642)
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
    Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
    Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
    Update for Microsoft .NET Framework 4 Client Profile (KB2836939)
    Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3)
    Update for Microsoft Office 2007 Help for Common Features (KB963673)
    Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
    Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2825642) 32-Bit Edition
    Update for Microsoft Office Script Editor Help (KB963671)
    .
    ==== End Of File ===========================
     
  2. Broni

    Broni Malware Annihilator Posts: 47,048   +256

  3. singlelady78

    singlelady78 TS Rookie Topic Starter Posts: 41

  4. singlelady78

    singlelady78 TS Rookie Topic Starter Posts: 41

    But actually it's way worse. Everytime I'm in the middle of something, like school work, shopping, or a download Windows pops up and stops the program saying something cause windows to stop working. Very aggravating!!
     
  5. Broni

    Broni Malware Annihilator Posts: 47,048   +256

    We already established that there was nothing malicious there and I asked you to start new topic in Windows forum.
     
  6. singlelady78

    singlelady78 TS Rookie Topic Starter Posts: 41

    That was 6 months ago! There is a new problem going on. If you don't want to help let me know and I will go somewhere else. Also, you wanted me to start a new forum because the Combofix messed up my laptop and it was stuck at configurating step 3. I finally figured it out myself, since you gave no help for something you told me to do and caused.
     
  7. Broni

    Broni Malware Annihilator Posts: 47,048   +256

    We can run some tools no problem.

    [​IMG] Download RogueKiller for 32bit or Roguekiller for 64bit to your Desktop.
    • Close all the running programs
    • Windows Vista/7 users: right click on RogueKiller.exe, click Run as Administrator
    • Otherwise just double-click on RogueKiller.exe
    • Pre-scan will start. Let it finish.
    • Click on SCAN button.
    • Wait until the Status box shows Scan Finished
    • Click on Delete.
    • Wait until the Status box shows Deleting Finished.
    • Click on Report and copy/paste the content of the Notepad into your next reply.
    • RKreport.txt could also be found on your desktop.
    • If more than one log is produced post all logs.
    • If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again

    [​IMG] Create new restore point before proceeding with the next step....
    How to: http://www.smartestcomputing.us.com/topic/63983-how-to-create-new-restore-point-all-windows/

    Download Malwarebytes Anti-Rootkit (MBAR) from HERE
    • Unzip downloaded file.
    • Open the folder where the contents were unzipped and run mbar.exe
    • Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
    • Click on the Cleanup button to remove any threats and reboot if prompted to do so.
    • Wait while the system shuts down and the cleanup process is performed.
    • Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
    • When done, please post the two logs produced they will be in the MBAR folder..... mbar-log-xxxxx.txt and system-log.txt
     


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.