Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Firefox Browser slow


  • Please log in to reply
16 replies to this topic

#1 smartjock99

smartjock99

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:10:27 PM

Posted 23 November 2012 - 07:58 PM

My son's computer's firefox and IE explorer browsers are running very slow. He got some sort of virus on his system. I did a system restore back to a couple of days ago and then I ran Malwarebytes, which seemed to get rid of the virus. But I was still getting a message that his firefox was running (when it was not). I brought up the task manager and rebooted the system, but that problem was still there. IE works, but it's very slow.

Any help that can be provided would be appreciated.

Edited by bloopie, 29 November 2012 - 11:51 AM.
Mod Edit: Moved from Windows 7 to AII. ~ bloopie


BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:27 PM

Posted 23 November 2012 - 08:29 PM

Hello smartjock -
Please read How to Enable or Disable System Restore in Windows 7
System restore can't usually remove an infection. Usually infections can embed themselves in restore points, so it can sometimes be best to disable system restore (which deletes restore points) and then re-enabling it after the infection is gone.
Disable System Restore, while you are trying to remove the problem, as you are keeping the infection in a Restore Point.

Once you have disabled System restore, Update your Malwarebytes program and re-scan -
Now download SuperAntiSpyware free Update the program and Quick scan with this also -
Please post both scan logs back in your next reply.

Thank You -

#3 smartjock99

smartjock99
  • Topic Starter

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:10:27 PM

Posted 23 November 2012 - 08:57 PM

Now in progress. I'll post the logs when it's done.

#4 smartjock99

smartjock99
  • Topic Starter

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:10:27 PM

Posted 23 November 2012 - 09:36 PM

Both scans are done and attached. I removed all the threats detected by the Superantispyware program.

Attached Files



#5 smartjock99

smartjock99
  • Topic Starter

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:10:27 PM

Posted 23 November 2012 - 10:27 PM

A couple of other things I've noticed on his computer. When I type a specific destination into the menu bar (e.g. avast.com), google is redirecting the request to something else (e.g. norton). It's also not remembering things (like my user sign-on for this site).

#6 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:27 PM

Posted 23 November 2012 - 10:46 PM

So far it has cleaned the Tracking cookies - Just to check updated programs >>
Download Security Check by Screen317 from HERE or HERE, and save it to your Desktop.
* Double-click SecurityCheck.exe
* Follow the onscreen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt; please Copy / Paste the contents of that document.
Note: If a security program requests permission to access the Internet, allow it to do so.

And a scan with an online scanner that is a bit deeper than your Antivirus - I'd like us to scan your machine with ESET OnlineScan
Click on the following link to open ESET OnlineScan
You may be prompted to disable any antivirus programs for this to run, Information on A/V control (temp disable) HERE if needed -
Download ESET online Scanner this may take a while to load the base program and then the updated definitions -
Please post any items that are found -

Thank You -
Spelling edit -

Edited by noknojon, 23 November 2012 - 10:49 PM.


#7 smartjock99

smartjock99
  • Topic Starter

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:10:27 PM

Posted 24 November 2012 - 11:13 AM

Here are the results of the Security Scan:

5 Results of screen317's Security Check version 0.99.54
Windows 7 Service Pack 1 x86 (UAC is enabled)
Internet Explorer 9
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Disabled!
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
SUPERAntiSpyware
Malwarebytes Anti-Malware version 1.65.1.1000
CCleaner
JavaFX 2.1.1
Java™ 6 Update 26
Java 7 Update 7
Java™ 6 Update 7
Java version out of Date!
Adobe Flash Player 11.4.402.287
Adobe Reader 9 Adobe Reader out of Date!
Mozilla Firefox (17.0)
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````

And here are the results of the ESET Online Scanner:

C:\Users\Robo800\AppData\Local\Temp\66BE.tmp Win32/Olmasco.AA trojan cleaned by deleting - quarantined
C:\Users\Robo800\AppData\Local\Temp\B6E0.tmp Win32/Olmasco.AA trojan cleaned by deleting - quarantined
C:\Users\Robo800\AppData\Local\Temp\l41GOG7wqBTJ6A.exe.tmp a variant of Win32/Kryptik.APEE trojan cleaned by deleting - quarantined
C:\Users\Robo800\AppData\Roaming\Vitalsystems.exe a variant of MSIL/Kryptik.CB trojan cleaned by deleting - quarantined
C:\Users\Robo800\Downloads\cnet2_FreeFLACToMP3Converter_exe.exe a variant of Win32/InstallCore.D application cleaned by deleting - quarantined
C:\Users\Robo800\Downloads\SoftonicDownloader_for_windows-movie-maker.exe Win32/SoftonicDownloader.D application cleaned by deleting - quarantined
C:\Users\Robo800\Downloads\VLC_32.exe a variant of Win32/InstallIQ application cleaned by deleting - quarantined
Operating memory a variant of Win32/Olmasco.AD trojan

#8 smartjock99

smartjock99
  • Topic Starter

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:10:27 PM

Posted 27 November 2012 - 11:59 PM

I haven't heard from anyone in 4 days now. Is there another person who could help me?

#9 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:27 PM

Posted 28 November 2012 - 08:17 PM

Hi -
After the ESET scan that removed about 7 infections, is the problem still the same, or what is the current situation ??

Thank You -

#10 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:27 PM

Posted 28 November 2012 - 08:56 PM

To follow on -
There is no Antivirus program listed, and the Firewall is noted as Off, please select a free Antivirus like Microsoft Security Essentials
Please ask for help if you need it, to activate the settings for Real time Protection =
Now open Control Panel and click on Windows Firewall - Make sure this is turned ON -
Adobe Reader XI (11.0) is now the current version. Download from HERE but always untick the Free Google Add-on Bar
Please note, depending on your settings, you may have to temporarily disable your antivirus software.
Please go to Control Panel and see if there is a Java Icon (Coffee cup). Open the program there and select the Second Tab which is Update then follow directions to update to current Version 7 Update 9. Now in Programs and features remove Java™ 6 Update 26 - Java 7 Update 7 - Java™ 6 Update 7

Please let us know of your current problems, and if there are problems with any updates -

Thank You -

#11 smartjock99

smartjock99
  • Topic Starter

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:10:27 PM

Posted 28 November 2012 - 10:57 PM

The browser is still slow and I'm getting re-directed to different sites (e.g. I want to put AVAST on, but when I type in the site, I get redirected to Norton). Better than being redirected to porn sites, but...

I'll try the microsoft security essentials first.

#12 Jonathan James

Jonathan James

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:11:27 PM

Posted 28 November 2012 - 11:22 PM

Two months ago I also faced similar kind of problem.I think it would be because of some virus/worms the system files were infected and corrupted.I would recommend you to create a backup and reinstall the operating system.Install Deepfreeze so that you can restore your system without any issue.You can use Google Chrome,Opera or Safari if Firefox is causing any kind of trouble to your system.

#13 smartjock99

smartjock99
  • Topic Starter

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:10:27 PM

Posted 28 November 2012 - 11:54 PM

It's a bit quicker now - Microsoft Security Essentials is now installed and it keeps detecting and quarantining Trojan:Win32/Sirefef.AB and variants of this. I've updated Java and Adobe reader.

It's still not remembering me at bleepingcomputer.com on my son's computer, so I'm not sure if we're out of the woods yet.

I also removed Superantispyware from the computer on the "advice" of Microsoft Security Essentials when I installed the latter program. I can reinstall the former (if I should).

I just tried google and going to AVAST - it redirected me to the Norton Internet Security page which it should not do.

Edited by smartjock99, 28 November 2012 - 11:58 PM.


#14 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:27 PM

Posted 29 November 2012 - 12:00 AM

Could you please try This Link and tell me where it sends you -

Please download MiniToolBox, Save it to your desktop and run it.

Checkmark the following boxes:
•Flush DNS
•Report IE Proxy Settings
•Reset IE Proxy Settings
•Report FF Proxy Settings
•Reset FF Proxy Settings
•List content of Hosts
•List IP configuration
•List last 10 Event Viewer log
•List Installed Programs
•List Users, Partitions and Memory size.
•List Minidump Files

Click Go and copy / paste the result (Result.txt).

There may be other minor problems involved that we have not yet looked at -

Thank You -

#15 smartjock99

smartjock99
  • Topic Starter

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:10:27 PM

Posted 29 November 2012 - 02:26 AM

The external link you posted sent me here once I clicked on it: http://shop.nuance.co.uk/store/nuanceeu/en_GB/pd/productID.250370300/pgm.52895700/Currency.GBP?utm_source=affiliate&utm_medium=banner&utm_campaign=standard&resid=ULcNhAoHAtQAAAd8cmMAAAAG&rests=1354173830186

I'll now run the minitoolbox.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users