BleepingComputer.com: Help: Slow/MalwareBytes/Infection

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.


If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Help: Slow/MalwareBytes/Infection

#1 User is offline   Nil Desperandum 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 41
  • Joined: 04-December 07

Posted 27 December 2011 - 03:39 PM

I noticed that my computer was running really slowly. Suspecting malware or spyware, I updated and then ran MalwareBytes. It found five infected files and offered to remove them (unlike Norton, it apparently does not offer to quarantine them). I clicked "remove." That was one week before Christmas. Since then, my computer has sped up some, but it has developed several other symptoms. First, when I start it, HP Total Care Advisor is supposed to open. Now, it starts to open, but then I get the message "HP Advisor is no longer working." It looks for a solution, but it never does, and I just close it now. Second, my computer now sometimes simply shuts down, out of the blue. (When I'm running Windows, the shutdown is usually slow, shutting Windows before shutting down the computer. A couple of times when not running Windows, though, it has simply shut down all at once.) Third, I often get messages that say something like "High CPU usage by: TCP/IP Ping Command." (I'm not sure it's always "TCP/IP Ping Command"--I only started noticing that part recently, although since I started noticing the "TCP/IP Ping Command" part, it has always been there, so I suspect it has been there every time.) Fourth, I sometimes get second windows opening that I didn't open, and sometimes tabs open that I didn't open, and sometimes tabs close without my closing them, and sometimes all of my tabs (and therefore Windows itself) close without my closing them. (There are certain URL's that often seem to be repeated. Something like "displayadfeed" is one of them; something like "jemancv" is another. They end up at a variety of sites, some of which aren't even working.) It doesn't usually redirect a Window already open, but I can't swear that it never has.

The only symptom my computer displayed prior to my updating and running MalwareBytes and removing the five infected files was extreme slowness.

Can anyone help?

#2 User is offline   Broni 

  • The Coolest BC Computer
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 22,167
  • Joined: 01-February 08
  • Gender:Male
  • Location:Daly City, CA

Posted 27 December 2011 - 07:28 PM

Please follow the instructions in ==>This Guide<== starting at Step 6. If you cannot complete a step, skip it and continue.

Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.

If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.

It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.

If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.
My Website

Posted Image

My help doesn't cost a penny, but if you'd like to consider a donation, click Posted Image




#3 User is offline   Nil Desperandum 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 41
  • Joined: 04-December 07

Posted 29 December 2011 - 04:08 PM

View PostNil Desperandum, on 27 December 2011 - 03:39 PM, said:

Third, I often get messages that say something like "High CPU usage by: TCP/IP Ping Command." (I'm not sure it's always "TCP/IP Ping Command"--I only started noticing that part recently, although since I started noticing the "TCP/IP Ping Command" part, it has always been there, so I suspect it has been there every time.)

About that point: I've been paying more attention, and it's not always "TCP/IP Ping Command." Sometimes it's "Internet Explorer" or "Host Process for Windows Server" or something to do with a chess program I was running (an old version of Fritz).

I'll follow the instructions in the above post later on.

Nil Desperandum

#4 User is offline   Broni 

  • The Coolest BC Computer
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 22,167
  • Joined: 01-February 08
  • Gender:Male
  • Location:Daly City, CA

Posted 29 December 2011 - 04:23 PM

All those messages will require tools not allowed in this forum thus my previous reply.
My Website

Posted Image

My help doesn't cost a penny, but if you'd like to consider a donation, click Posted Image




#5 User is offline   Nil Desperandum 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 41
  • Joined: 04-December 07

Posted 01 January 2012 - 07:48 PM

OK, I've run defogger (without rebooting, which wasn't asked for) and I've run DDS, generating DDS.txt and Attach.txt, and I've run Gmer, generating ark.txt, and have started a new topic whose title begins with "Google Redirect" (I don't remember the full title), including the DDS.txt text in the body of the post and Attach.txt and ark.txt attached to it.

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users