Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

"Not Responding" Computer


  • Please log in to reply
70 replies to this topic

#16 vtl3689

vtl3689
  • Topic Starter

  • Members
  • 181 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:24 PM

Posted 08 December 2014 - 12:29 AM

# AdwCleaner v4.104 - Report created 07/12/2014 at 21:19:54
# Updated 05/12/2014 by Xplode
# Database : 2014-12-07.1 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : r2e - LOPEZ
# Running from : C:\Users\r2e\Downloads\adwcleaner_4.104.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Public\Documents\iWin
Folder Deleted : C:\Users\r2e\AppData\Roaming\Search Protection
Folder Deleted : C:\Users\r2e\Documents\Information
File Deleted : C:\END

***** [ Scheduled Tasks ] *****

Task Deleted : RunAsStdUser Task

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Search Protection]
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2C37915F-20A4-4A86-887D-7AD42B4BF4FA}
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Unitech LLC
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKCU\Software\AppDataLow\Software\Search Protection
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\PIP
Key Deleted : HKLM\SOFTWARE\Unitech LLC
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Search Protection

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17420

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v33.1 (x86 en-US)

[i851sjj1.default\prefs.js] - Line Deleted : user_pref("startpage.ntsearch_url", "hxxps://search.yahoo.com/search?fr=spigot-nt-ff&ei=utf-8&ilc=12&type=514467&p={searchTerms}");

-\\ Google Chrome v39.0.2171.71

[C:\Users\r2e\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
[C:\Users\r2e\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\r2e\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

*************************

AdwCleaner[R0].txt - [982 octets] - [07/09/2013 22:26:29]
AdwCleaner[R1].txt - [1897 octets] - [28/10/2013 19:38:13]
AdwCleaner[R2].txt - [2636 octets] - [07/12/2014 21:14:57]
AdwCleaner[S0].txt - [1044 octets] - [07/09/2013 22:29:11]
AdwCleaner[S1].txt - [1912 octets] - [28/10/2013 19:42:04]
AdwCleaner[S2].txt - [2552 octets] - [07/12/2014 21:19:54]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [2612 octets] ##########



BC AdBot (Login to Remove)

 


#17 vtl3689

vtl3689
  • Topic Starter

  • Members
  • 181 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:24 PM

Posted 08 December 2014 - 12:40 AM

Here is the Junkware program

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.0 (11.29.2014:1)
OS: Windows 7 Home Premium x86
Ran by r2e on Sun 12/07/2014 at 21:35:52.34
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\r2e\AppData\Roaming\mywordtool"



~~~ FireFox

Emptied folder: C:\Users\r2e\AppData\Roaming\mozilla\firefox\profiles\i851sjj1.default\minidumps [90 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sun 12/07/2014 at 21:38:17.66
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



#18 vtl3689

vtl3689
  • Topic Starter

  • Members
  • 181 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:24 PM

Posted 08 December 2014 - 01:01 AM

Java was reinstalled doing what you had me do.  I did not update to version 71 tho.  Thank you for all of your help.  Adobe flash/shockwave is still crashing and "not responding" is still happening.



#19 Guest_LighthouseParty_*

Guest_LighthouseParty_*

  • Guests
  • OFFLINE
  •  

Posted 08 December 2014 - 01:44 AM

Hello there,

 

I would prefer if you didn't re-install Java for the time being.
 
:step1: Download MiniToolBox

  • Click here to download MiniToolBox to your desktop.
  • Double click MiniToolBox.
  • Select the following and then press go.
  • Post the log in your next reply.

List last 10 Event Viewer Errors

:step2: Download and run TFC (Temporary File Cleaner)

  • Click here to download TFC to your desktop.
  • Double click it (Win 7 and Vista users, right-click and select run as admin)]
  • Click start and wait for it to finish.

:step3: Download and run rKill

  • Click here to download rKill to your desktop.
  • Double click it (Win 7 and Vista users, right-click and select run as admin)
  • The tool will run and then a log file should open.
  • Please post the contents of it in your next reply.

:step4: Download and run Malwarebytes Anti-Rootkit

  • Click here to download Malwarebytes Anti-Rootkit to your desktop.
  • Double click it and click ok (Make sure to extract it to your desktop)
  • When it opens, click next and then update.
  • After it's updated, click next and then scan.
  • If malware is detected, select clean, then restart your computer.
  • Open 'MBAR' on your desktop and paste the contens in your reply of the following logs:
  • mbar-log-xx.xx.xx.txt and system-log.txt.

Edited by LighthouseParty, 08 December 2014 - 01:45 AM.


#20 vtl3689

vtl3689
  • Topic Starter

  • Members
  • 181 posts
  • OFFLINE
  •  
  • Gender:Female

Posted 08 December 2014 - 07:03 AM

I did not intentionally reinstall Java.  It was part of the JavaRE you had me run.  I will do it again and make sure it does not reinstall.  Then run the programs above and post results.  Thanks.



#21 vtl3689

vtl3689
  • Topic Starter

  • Members
  • 181 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:24 PM

Posted 08 December 2014 - 09:26 PM

Here is the AdwCleaner after I removed Java.  Will run Junk Removal next.

 

 

# AdwCleaner v4.105 - Report created 08/12/2014 at 17:57:46
# Updated 08/12/2014 by Xplode
# Database : 2014-12-08.2 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : r2e - LOPEZ
# Running from : C:\Users\r2e\Downloads\adwcleaner_4.105.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17420


-\\ Mozilla Firefox v33.1 (x86 en-US)


-\\ Google Chrome v39.0.2171.71


*************************

AdwCleaner[R0].txt - [982 octets] - [07/09/2013 22:26:29]
AdwCleaner[R1].txt - [1897 octets] - [28/10/2013 19:38:13]
AdwCleaner[R2].txt - [2636 octets] - [07/12/2014 21:14:57]
AdwCleaner[R3].txt - [1148 octets] - [08/12/2014 17:55:17]
AdwCleaner[S0].txt - [1044 octets] - [07/09/2013 22:29:11]
AdwCleaner[S1].txt - [1912 octets] - [28/10/2013 19:42:04]
AdwCleaner[S2].txt - [2692 octets] - [07/12/2014 21:19:54]
AdwCleaner[S3].txt - [1070 octets] - [08/12/2014 17:57:46]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [1130 octets] ##########



#22 vtl3689

vtl3689
  • Topic Starter

  • Members
  • 181 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:24 PM

Posted 08 December 2014 - 09:39 PM

Here is the junkware removal  info. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.0 (11.29.2014:1)
OS: Windows 7 Home Premium x86
Ran by r2e on Mon 12/08/2014 at 18:35:06.79
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Mon 12/08/2014 at 18:37:13.57
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

i will do the next steps now



#23 vtl3689

vtl3689
  • Topic Starter

  • Members
  • 181 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:24 PM

Posted 08 December 2014 - 09:43 PM

MiniToolBox you requested.  Next is TFC

 

MiniToolBox by Farbar  Version: 30-11-2014
Ran by r2e (administrator) on 08-12-2014 at 18:42:00
Running from "C:\Users\r2e\Downloads"
Microsoft Windows 7 Home Premium  Service Pack 1 (X86)
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

**** End of log ****



#24 vtl3689

vtl3689
  • Topic Starter

  • Members
  • 181 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:24 PM

Posted 08 December 2014 - 10:05 PM

Rkill results:   Next Malwarebytes

 

Rkill 2.6.8 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2014 BleepingComputer.com
More Information about Rkill can be found at this link:
 http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 12/08/2014 07:01:26 PM in x86 mode.
Windows Version: Windows 7 Home Premium Service Pack 1

Checking for Windows services to stop:

 * No malware services found to stop.

Checking for processes to terminate:

 * C:\Users\r2e\Downloads\TFC.exe (PID: 6916) [UP-HEUR]

1 proccess terminated!

Checking Registry for malware related settings:

 * No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

 * No issues found.

Checking Windows Service Integrity:

 * No issues found.

Searching for Missing Digital Signatures:

 * No issues found.

Checking HOSTS File:

 * No issues found.

Program finished at: 12/08/2014 07:03:10 PM
Execution time: 0 hours(s), 1 minute(s), and 44 seconds(s)



#25 vtl3689

vtl3689
  • Topic Starter

  • Members
  • 181 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:24 PM

Posted 08 December 2014 - 10:34 PM

Mbar-log-2014-12-08:

 

ÿþM#a#l#w#a#r#e#b#y#t#e#s# #A#n#t#i#-#R#o#o#t#k#i#t# #B#E#T#A# #1#.#0#8#.#2#.#1#0#0#1#

 

system-log :

ÿþ-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#i#v#e#r#s#\#N#E#T#I#O#.#S#Y#S#.#S#Y#S#
t#e#m#R#o#o#t#\#S#y#s#t#e#m#3#2#\#d#r#i#v#e#r#s#\#D#x#a#p#i#.#s#y#s#y#s#t#e#m#3#2#\#D#R#I#V#E#R#S#\#N#i#s#D#r#v#W#F#P#.#s#y#s#n#e#l#B#a#s#e#.#d#l#l#
 #=# #1#0#2#4#,# #M#F#T#I#n#d#e#x#S#i#z#e# #=# #4#0#9#6# #b#y#t#e#s#,# #M#F#T#I#n#d#e#x#S#i#z#e# #=# #4#0#9#6# #b#y#t#e#s#o#n# #3# #t#y#p#e# #i#s# #E#m#p#t#y# #(#0#x#0#)#

Hope this helps



#26 Guest_LighthouseParty_*

Guest_LighthouseParty_*

  • Guests
  • OFFLINE
  •  

Posted 09 December 2014 - 01:44 AM

Hello there,

 

The scans didn't run properly. Please run them again and make sure you save them to your DESKTOP and then follow my instructions.

 

Please download CCleaner from here. Once installed, open it and head over to the tools tab and select start-up. In the bottom right hand corner, select save to text file and select a name for it. Open the saved document and post the contents of it into your next reply.



#27 vtl3689

vtl3689
  • Topic Starter

  • Members
  • 181 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:24 PM

Posted 10 December 2014 - 12:37 AM

Here is MiniToolBox:

MiniToolBox by Farbar  Version: 30-11-2014
Ran by r2e (administrator) on 09-12-2014 at 21:35:27
Running from "C:\Users\r2e\Downloads"
Microsoft Windows 7 Home Premium  Service Pack 1 (X86)
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (12/09/2014 09:03:10 PM) (Source: Application Error) (User: )
Description: Faulting application name: SCService.exe, version: 3.10.0.1, time stamp: 0x53fc0a5d
Faulting module name: SCService.exe, version: 3.10.0.1, time stamp: 0x53fc0a5d
Exception code: 0xc0000005
Fault offset: 0x0005b5c9
Faulting process id: 0xb0c
Faulting application start time: 0xSCService.exe0
Faulting application path: SCService.exe1
Faulting module path: SCService.exe2
Report Id: SCService.exe3

Error: (12/09/2014 05:15:01 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 13338

Error: (12/09/2014 05:15:01 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 13338

Error: (12/09/2014 05:15:01 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/09/2014 05:15:00 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 12340

Error: (12/09/2014 05:15:00 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 12340

Error: (12/09/2014 05:15:00 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/09/2014 05:14:59 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 11341

Error: (12/09/2014 05:14:59 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 11341

Error: (12/09/2014 05:14:59 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (12/09/2014 09:03:22 PM) (Source: Service Control Manager) (User: )
Description: The SavvyConnect Desktop Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (12/09/2014 09:02:59 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (12/09/2014 09:02:59 PM) (Source: Service Control Manager) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service.

Error: (12/08/2014 06:56:11 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}


Microsoft Office Sessions:
=========================
Error: (12/09/2014 09:03:10 PM) (Source: Application Error)(User: )
Description: SCService.exe3.10.0.153fc0a5dSCService.exe3.10.0.153fc0a5dc00000050005b5c9b0c01d01353e25c23afC:\Program Files\Luth Research\SavvyConnectFramework\bin\scservice\SCService.exeC:\Program Files\Luth Research\SavvyConnectFramework\bin\scservice\SCService.exed56aff70-8029-11e4-bcf0-001ec9594710

Error: (12/09/2014 05:15:01 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 13338

Error: (12/09/2014 05:15:01 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 13338

Error: (12/09/2014 05:15:01 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/09/2014 05:15:00 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 12340

Error: (12/09/2014 05:15:00 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 12340

Error: (12/09/2014 05:15:00 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/09/2014 05:14:59 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 11341

Error: (12/09/2014 05:14:59 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 11341

Error: (12/09/2014 05:14:59 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second


**** End of log ****

 

TFC Next



#28 vtl3689

vtl3689
  • Topic Starter

  • Members
  • 181 posts
  • OFFLINE
  •  
  • Gender:Female

Posted 10 December 2014 - 12:53 AM

Ran TFC

 

Here is Rkill

 

ÿþR#k#i#l#l# #2#.#6#.#8# #b#y# #L#a#w#r#e#n#c#e# #A#b#r#a#m#s# #(#G#r#i#n#l#e#r#)#

 

I have run this 3 times with same result.  Not sure what I am doing wrong.  Will wait to hear from you.



#29 vtl3689

vtl3689
  • Topic Starter

  • Members
  • 181 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:24 PM

Posted 10 December 2014 - 01:40 AM

Tried again on Rkill.  Here it is:

 

Rkill 2.6.8 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2014 BleepingComputer.com
More Information about Rkill can be found at this link:
 http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 12/09/2014 10:36:08 PM in x86 mode.
Windows Version: Windows 7 Home Premium Service Pack 1

Checking for Windows services to stop:

 * No malware services found to stop.

Checking for processes to terminate:

 * No malware processes found to kill.

Checking Registry for malware related settings:

 * No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

 * No issues found.

Checking Windows Service Integrity:

 * No issues found.

Searching for Missing Digital Signatures:

 * No issues found.

Checking HOSTS File:

 * No issues found.

Program finished at: 12/09/2014 10:37:02 PM
Execution time: 0 hours(s), 0 minute(s), and 53 seconds(s)



#30 Guest_LighthouseParty_*

Guest_LighthouseParty_*

  • Guests
  • OFFLINE
  •  

Posted 10 December 2014 - 01:53 AM

Are you still experiencing the freezing issues?






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users