Help
This topic is locked
Ok, I'm frustrated now. That machine is running so slow I'm having to look up information on a different machine.
KC
Forum Guidelines
Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help
Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic will be looked at and responded to. So please be patient. DO NOT RUN ComboFix unless requested to. Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log. When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc. Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.
Babylon Redirect Computer running slow and Babylon opening on new tabs, etc ...
#16
- Forum Regular
-
- Group: Malware Study Hall Junior
- Posts: 296
- Joined: 05-November 10
- Gender:Male
- Location:The Republic of Texas!
Posted 24 June 2011 - 01:21 PM
Back to top
#17
- Agent ST
-
- Group: Malware Response Team
- Posts: 12,662
- Joined: 15-March 09
- Gender:Male
- Location:Antarctica
Posted 24 June 2011 - 01:45 PM
Hi!
Sorry about that. Something wacky must have happened when I posted, because I had included more text then what had gotten posted to you.
I'm honestly not seeing any signs of malware in your logs. So I'm not convinced that the slowness issue is malware related. You should take a look at the link that I previously linked you to, and see if that addresses any of the issues with slowness.
The scans/fixes/scripts I've had you run haven't done all that much to be honest. When I had you run the OTL fix, I scripted away some of the Babylon remedies.
In the script I reset your host file and created a new restore point.
ComboFix didn't remove anything.
The only real thing we did was remove the Babylon remedies and update a few programs.
I don't see any signs of a rootkit on your computer, and we ran a couple of scans to search for such.
I wasn't ignoring it, it was going to be addressed in my final post, which seems to have gotten messed up.
In regards to the MSE issue, you may need to completely remove it, run the MSE removal tool and then re-install it, and see if that takes care of the issue.
If you had read my previous post you would have seen that I did instruct you to remove those leftover tools.
See this quote from my previous post:
I need to look into something, I'll post back later.
Sorry about that. Something wacky must have happened when I posted, because I had included more text then what had gotten posted to you.
Quote
First off the machine is running slower than when you started helping me. Are you sure one of your 'custom scans/scripts' didn't change something on the machine?
I'm honestly not seeing any signs of malware in your logs. So I'm not convinced that the slowness issue is malware related. You should take a look at the link that I previously linked you to, and see if that addresses any of the issues with slowness.
The scans/fixes/scripts I've had you run haven't done all that much to be honest. When I had you run the OTL fix, I scripted away some of the Babylon remedies.
In the script I reset your host file and created a new restore point.
ComboFix didn't remove anything.
The only real thing we did was remove the Babylon remedies and update a few programs.
I don't see any signs of a rootkit on your computer, and we ran a couple of scans to search for such.
Quote
Not only is the machine running slower it isn't running correctly. Things that SHOULD be loading on start up are not loading, like my virus scanner, MSE. I've mentioned it a couple of times during this thread but you seem to have ignored that.
In regards to the MSE issue, you may need to completely remove it, run the MSE removal tool and then re-install it, and see if that takes care of the issue.
Quote
Now we come to your 'All Clean' speech. I've followed your commands as requested yet there is still software on my desktop that didn't leave along with the reports. The others I've worked with had me clean ALL the tools off my machine.
See this quote from my previous post:
Quote
If you still have any tools or logs leftover on your computer you can go ahead and delete those off of your computer now.
I need to look into something, I'll post back later.
Have I helped you? If you'd like to assist in the fight against malware, click here 
The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.
The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.
#18
- Forum Regular
-
- Group: Malware Study Hall Junior
- Posts: 296
- Joined: 05-November 10
- Gender:Male
- Location:The Republic of Texas!
Posted 24 June 2011 - 02:06 PM
SweetTech, on 24 June 2011 - 01:45 PM, said:
Hi!
Sorry about that. Something wacky must have happened when I posted, because I had included more text then what had gotten posted to you.
I'm honestly not seeing any signs of malware in your logs. So I'm not convinced that the slowness issue is malware related. You should take a look at the link that I previously linked you to, and see if that addresses any of the issues with slowness.
Sorry about that. Something wacky must have happened when I posted, because I had included more text then what had gotten posted to you.
I'm honestly not seeing any signs of malware in your logs. So I'm not convinced that the slowness issue is malware related. You should take a look at the link that I previously linked you to, and see if that addresses any of the issues with slowness.
I don't mean to be rude, not at all but I think you're missing my point. I don't think the slowness is due to any malware. On the contrary, it was running 'fine but quirky' the first time I posted. Now it's so slow I can't even post from that machine.
Quote
The scans/fixes/scripts I've had you run haven't done all that much to be honest. When I had you run the OTL fix, I scripted away some of the Babylon remedies.
In the script I reset your host file and created a new restore point.
ComboFix didn't remove anything.
The only real thing we did was remove the Babylon remedies and update a few programs.
I don't see any signs of a rootkit on your computer, and we ran a couple of scans to search for such.
In the script I reset your host file and created a new restore point.
ComboFix didn't remove anything.
The only real thing we did was remove the Babylon remedies and update a few programs.
I don't see any signs of a rootkit on your computer, and we ran a couple of scans to search for such.
Which is what I needed. Babylon was what started the thread. I was unable to stop it and I appreciate that you saw that. Also IE wasn't allowing me to click on any of her Gmail links but other than those 2 things the machine was moving along fairly quickly.
Quote
In regards to the MSE issue, you may need to completely remove it, run the MSE removal tool and then re-install it, and see if that takes care of the issue.
I've already unintstalled MSE and I plan to put it back on there. I didn't use the tool you are referring to though I used the add/remove programs. Should I use the tool instead? I noticed when I ran the task manager that MSE was using a TREMENDOUS amount of resources which was unusual so I deleted it to see if that might solve some of the problem. So far it doesn't look like it has.
Quote
I need to look into something, I'll post back later.
Not a problem. I'll monitor the thread.
Thanks,
KC
#19
- Agent ST
-
- Group: Malware Response Team
- Posts: 12,662
- Joined: 15-March 09
- Gender:Male
- Location:Antarctica
Posted 24 June 2011 - 02:17 PM
Quote
I don't mean to be rude, not at all but I think you're missing my point. I don't think the slowness is due to any malware. On the contrary, it was running 'fine but quirky' the first time I posted. Now it's so slow I can't even post from that machine.
Quote
Which is what I needed. Babylon was what started the thread. I was unable to stop it and I appreciate that you saw that. Also IE wasn't allowing me to click on any of her Gmail links but other than those 2 things the machine was moving along fairly quickly.
Quote
I've already unintstalled MSE and I plan to put it back on there. I didn't use the tool you are referring to though I used the add/remove programs. Should I use the tool instead? I noticed when I ran the task manager that MSE was using a TREMENDOUS amount of resources which was unusual so I deleted it to see if that might solve some of the problem. So far it doesn't look like it has.
Quote
Not a problem. I'll monitor the thread.
This post has been edited by SweetTech: 24 June 2011 - 02:17 PM
Have I helped you? If you'd like to assist in the fight against malware, click here
The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.
The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.
#20
- Forum Regular
-
- Group: Malware Study Hall Junior
- Posts: 296
- Joined: 05-November 10
- Gender:Male
- Location:The Republic of Texas!
Posted 24 June 2011 - 02:22 PM
SweetTech, on 24 June 2011 - 02:17 PM, said:
I understand what you're saying.
If you look at our thread by post #4 I started complaining about the computer slowing down. That is right after the first OTL scan/fix and running CF. Could one of those things have changed something that didn't need changing?
Quote
The issues with Gmail and IE not working properly have been fixed, correct?
Yup!
Quote
Yeah, I'd honestly try the removal tool, and then try to re-install it to see if that fixes it.
I'll see what happens after it finishes the reload of MSE.
Quote
I'm assuming you'll be back?
Thanks!
KC
#21
- Agent ST
-
- Group: Malware Response Team
- Posts: 12,662
- Joined: 15-March 09
- Gender:Male
- Location:Antarctica
Posted 24 June 2011 - 02:46 PM
Quote
If you look at our thread by post #4 I started complaining about the computer slowing down. That is right after the first OTL scan/fix and running CF. Could one of those things have changed something that didn't need changing?
out causing any problems.
Quote
I'm assuming you'll be back?
Let me have you run a SFC /scannow scan and see if that does anything:
Run System File Checker
Make sure you have your XP Disc handy
The System File Checker (Sfc.exe) utility is used for scanning protected operating system files to verify their version and integrity. If System File Checker detects any operating system file with the incorrect file version, it replaces the corrupted file with a file that has the correct version from the Windows installation source files.
To use System File Checker, follow these steps:
- Click Start, click Run, type cmd.exe, and then click OK.
- At the command prompt, type sfc /purgecache, and then press ENTER.
Note You may be prompted to provide Windows installation source files when you run the sfc /purgecache command. If the command is completed successfully, you will receive the following message: - Windows File Protection successfully made the requested change.
- At the command prompt, type sfc /scannow, and then press ENTER.
Note
This command may take several minutes to finish. You may also be
prompted to provide Windows installation source files when you run the sfc /scannow command. - At the command prompt, type exit, and then press ENTER to close the command prompt.
This post has been edited by SweetTech: 24 June 2011 - 02:48 PM
Have I helped you? If you'd like to assist in the fight against malware, click here
The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.
The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.
#22
- Forum Regular
-
- Group: Malware Study Hall Junior
- Posts: 296
- Joined: 05-November 10
- Gender:Male
- Location:The Republic of Texas!
Posted 24 June 2011 - 02:52 PM
SweetTech, on 24 June 2011 - 02:46 PM, said:
Yep, I need to ponder some things.
Let me have you run a SFC /scannow scan and see if that does anything:
Run System File Checker
Make sure you have your XP Disc handy
The System File Checker (Sfc.exe) utility is used for scanning protected operating system files to verify their version and integrity. If System File Checker detects any operating system file with the incorrect file version, it replaces the corrupted file with a file that has the correct version from the Windows installation source files.
Let me have you run a SFC /scannow scan and see if that does anything:
Run System File Checker
Make sure you have your XP Disc handy
The System File Checker (Sfc.exe) utility is used for scanning protected operating system files to verify their version and integrity. If System File Checker detects any operating system file with the incorrect file version, it replaces the corrupted file with a file that has the correct version from the Windows installation source files.
This could be in issue. It's not my machine and since she bought it at Best Buy a few years ago ..... I'm sure she doesn't have the installation disk (they don't give them to you). Thoughts?
KC
#23
- Agent ST
-
- Group: Malware Response Team
- Posts: 12,662
- Joined: 15-March 09
- Gender:Male
- Location:Antarctica
Posted 24 June 2011 - 03:04 PM
Okay. That maybe a problem then, but I'd like to have you try running it anyways, and see if it will run.
Have I helped you? If you'd like to assist in the fight against malware, click here
The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.
The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.
#24
- Forum Regular
-
- Group: Malware Study Hall Junior
- Posts: 296
- Joined: 05-November 10
- Gender:Male
- Location:The Republic of Texas!
Posted 24 June 2011 - 03:13 PM
SweetTech, on 24 June 2011 - 03:04 PM, said:
Okay. That maybe a problem then, but I'd like to have you try running it anyways, and see if it will run.
Before I do that would you like to see if we can go back to a restore point? I would hate to kill her machine.
Thanks,
KC
#25
- Agent ST
-
- Group: Malware Response Team
- Posts: 12,662
- Joined: 15-March 09
- Gender:Male
- Location:Antarctica
Posted 24 June 2011 - 03:24 PM
It shouldn't kill her machine. Basically what will happen is it will perform a scan on the computer, and if any key system files are corrupted and that need to be replaced it will attempt to restore them from a hidden folder called DllCache. Sometimes this folder gets corrupted and some of the files that need to be replaced need to be copied from the Windows XP disc, so they can be copied into the DllCache, and be replaced. If any files need to be replaced with the CD, you should receive a prompt during the SFC /scannow scan informing you of such.
This post has been edited by SweetTech: 24 June 2011 - 03:31 PM
Have I helped you? If you'd like to assist in the fight against malware, click here
The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.
The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.
#26
- Forum Regular
-
- Group: Malware Study Hall Junior
- Posts: 296
- Joined: 05-November 10
- Gender:Male
- Location:The Republic of Texas!
Posted 24 June 2011 - 03:45 PM
SweetTech, on 24 June 2011 - 03:24 PM, said:
It shouldn't kill her machine. Basically what will happen is it will perform a scan on the computer, and if any key system files are corrupted and that need to be replaced it will attempt to restore them from a hidden folder called DllCache. Sometimes this folder gets corrupted and some of the files that need to be replaced need to be copied from the Windows XP disc, so they can be copied into the DllCache, and be replaced. If any files need to be replaced with the CD, you should receive a prompt during the SFC /scannow scan informing you of such.
Gotchya. I'll give it a shot then get back with you. Thanks!
KC
#27
- Agent ST
-
- Group: Malware Response Team
- Posts: 12,662
- Joined: 15-March 09
- Gender:Male
- Location:Antarctica
Posted 24 June 2011 - 07:44 PM
Okay. Let me know how that goes. 
Have I helped you? If you'd like to assist in the fight against malware, click here
The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.
The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.
#28
- Forum Regular
-
- Group: Malware Study Hall Junior
- Posts: 296
- Joined: 05-November 10
- Gender:Male
- Location:The Republic of Texas!
Posted 25 June 2011 - 01:16 PM
SweetTech, on 24 June 2011 - 07:44 PM, said:
Okay. Let me know how that goes.
Not so well. It is so slow now I had to boot it into Safe Mode to do ANYTHING. It is getting slower and slower. Personally I think it is loading something at start up that is causing the problem or something is hanging on load up.
ST, I think at this point you can close this thread. I'm going to try something different.
Thanks,
KC
#29
- Agent ST
-
- Group: Malware Response Team
- Posts: 12,662
- Joined: 15-March 09
- Gender:Male
- Location:Antarctica
Posted 25 June 2011 - 01:19 PM
Okay. If you think it's something at start-up then you may want to try this tool:
You may wish to try StartupLite. Simply download this tool to your desktop and run it. It will explain any optional auto-start programs on your system, and offer the option to stop these programs from starting at startup. This will result in fewer programs running when you boot your system, and should improve performance.
You may wish to try StartupLite. Simply download this tool to your desktop and run it. It will explain any optional auto-start programs on your system, and offer the option to stop these programs from starting at startup. This will result in fewer programs running when you boot your system, and should improve performance.
Have I helped you? If you'd like to assist in the fight against malware, click here
The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.
The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.
#30
- Agent ST
-
- Group: Malware Response Team
- Posts: 12,662
- Joined: 15-March 09
- Gender:Male
- Location:Antarctica
Posted 27 June 2011 - 10:08 AM
It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.
Have I helped you? If you'd like to assist in the fight against malware, click here
The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.
The instructions seen in this post have been specifically tailored to this user and the issues they are experiencing with their computer. If you think you have a similar problem, please first read this topic, and then begin your own, new thread. I do not offer private support via Private Message.
