Computer running very slow

[burnleyfan]

my computer is running very very slow and i think it is infected and need help.
heres my highjackthis log and superantispyware scan log, i also scanned with bytes anti-malware but it said the log file was either damaged or currupt to chould not attach it

 

[touch]

Hello burnleyfan.

Go to add/remove programs in controlpanel, and remove, if present:
AskBarDis
SweetIM

Uninstall your AVG Antivirus
Run the removal tool
Here is the 32Bit version: http://www.avg.com/filedir/util/avg_arm_sup_____.dir/avgremover.exe
If asked, reboot the computer

Then install Avira Free AntiVirus:
http://www.free-av.com/en/download/1/download_avira_antivir_personal__free_antivirus.html

Update, run a complete scan, have it to fix/quarantine what it find.

Any particular reason that you haven´t updated java ?

By the way, are you using Kontiki - I:\Program Files\Kontiki


If you can run malwarebyte properly now, please do, and attach the log it produce, along with new hijackthis log

 

[burnleyfan]

thanks for the help,
i did not update ava because my computer would not let me, but after scanning and removing some stuff with avira i tried again and was able to update java
malwarebytes anti malware still says the log is either damage or currupt after a scan so can't attach a log of that
and yes i am using kontiki but dont need it to start when i turn on my computer if that helps.

got malwarebytes log attached now

 

[touch]

Sounds good you was able to update java.

And I assume you want to keep - AskBar ?


Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any):
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - (no file)
O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - (no file)
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)


Reboot, attach new hijackthis log and tell how your computer are behaving now ?

 

[burnleyfan]

computer is running much faster now
attachted new highjack this log

 

[touch]

I´ve missed a line in hijackthis - sorry.

Have hijackthis to fix:
O4 - HKUS\S-1-5-18\..\Run: [A00F2A2B893.exe] I:\WINDOWS\TEMP\_A00F2A2B893.exe (User 'SYSTEM')

Click Start, and then click Run. Type cleanmgr, and then click OK.

Select the drive-letter for the current Windows installation and then click OK

Put a checkmark by the following ->

* Remove temporary Internet files.
* Remove downloaded program files .
* Empty the Recycle Bin.
* Remove Windows temporary files.
* Remove optional Windows components that you are not using.

Click OK
Click Yes to confirm deletion

Then, please attach a last hijackthis log

 

[burnleyfan]

heres the highjackthis log

 

[touch]

Looks clean - good job


How are the computer running now ?

 

[burnleyfan]

computers running great now, thanks for all your help pal

 

[touch]

My pleasure

I´ll suggest you uninstall hijackthis, and keep malwarebyte and/or Superantispyware.


You should Create a New Restore Point to prevent possible reinfection from an old one.
The easiest and safest way to do this is:
Go to Start > All Programs > Accessories > System Tools > System Restore
Select Create a restore point, and Ok it.
Next, go to Start > Run and type in cleanmgr
Select the More options tab
Choose the option to clean up system restore and OK it.

This will remove all restore points except the new one you just created.

I also suggest you read Tony Klein´s article :
"So how did I get infected in the first place?"

http://www.spywareinfoforum.com/index.php?showtopic=60955