Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected? Firefox running slow. plugin container hogging resources


  • Please log in to reply
34 replies to this topic

#1 Hal06

Hal06

  • Members
  • 879 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New York, New York, USA
  • Local time:07:51 AM

Posted 07 November 2016 - 06:34 AM

Hello. My Firefox is running slow. Plugin container seems to be hogging resources. Is plugin container malware?

 

Thanks.



BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 69,114 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:51 AM

Posted 07 November 2016 - 11:54 AM

Hello Hal

Not a malware but may contain some in the Plug ins..
What is plugin-container

So lets clean that first and see.
Disable one by one to see which is the culprit or disable all and see if that helped.

How to disable plugins
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 Hal06

Hal06
  • Topic Starter

  • Members
  • 879 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New York, New York, USA
  • Local time:07:51 AM

Posted 07 November 2016 - 12:16 PM

Thanks. I'll deal with this when I get home tonight.



#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 69,114 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:51 AM

Posted 07 November 2016 - 12:48 PM

No problem, will look back
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 Hal06

Hal06
  • Topic Starter

  • Members
  • 879 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New York, New York, USA
  • Local time:07:51 AM

Posted 09 November 2016 - 06:48 AM

Adobe Acrobat says that it needs updating but when I try to update it nothing works. Should I delete and reinstall?



#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 69,114 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:51 AM

Posted 09 November 2016 - 11:08 AM

Delete (reboot)and reinstall Reader
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 Hal06

Hal06
  • Topic Starter

  • Members
  • 879 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New York, New York, USA
  • Local time:07:51 AM

Posted 12 November 2016 - 03:48 PM

How do I delete Acrobat? I see no delete button in the plugins manager.



#8 buddy215

buddy215

  • BC Advisor
  • 11,789 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:06:51 AM

Posted 12 November 2016 - 05:53 PM

Disable Acrobat for now...if it isn't presently disabled. You may not even need it as Firefox has its own PDF reader.

 

What other plugins are listed? Are there any you don't recognize?

 

What boopme is suggesting is you Disable one plugin at a time or Disable all of them, reboot Firefox and add one plugin back at a time to find which one is causing the problem.

 

Do this, too:

 

  • Please download Security Check by glax24 and save the file to the Desktop
  • Run the tool by accepting all the Security prompts
  • when complete the tool will produce a log file C:\SecurityCheck\SecurityCheck.txt and also copy the contents to the Clipboard
  • Simply Paste the log to your reply

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss

A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”


#9 Hal06

Hal06
  • Topic Starter

  • Members
  • 879 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New York, New York, USA
  • Local time:07:51 AM

Posted 13 November 2016 - 03:32 PM

Security Check Log

 

SecurityCheck by glax24 & Severnyj v.1.4.0.46 [22.09.16]
WebSite: www.safezone.cc
DateLog: 13.11.2016 15:30:14
Path starting: C:\Users\Harold\AppData\Local\Temp\SecurityCheck\SecurityCheck.exe
Log directory: C:\SecurityCheck\
IsAdmin: True
User: Harold
VersionXML: 3.51is-12.11.2016
___________________________________________________________________________

Windows 7(6.1.7601) Service Pack 1 (x64) HomePremium Lang: English(0409)
Installation date OS: 25.07.2016 16:35:33
LicenseStatus: Windows® 7, HomePremium edition The machine is permanently activated.
Boot Mode: Normal
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
SystemDrive: C: FS: [NTFS] Capacity: [698.4 Gb] Used: [376 Gb] Free: [322.4 Gb]
------------------------------- [ Windows ] -------------------------------
Internet Explorer 11.0.9600.18524 [+]
User Account Control enabled
Automatically download and schedule installation
Date install updates: 2016-11-09 08:06:48
Windows Update (wuauserv) - The service is running
Security Center (wscsvc) - The service is running
Remote Registry (RemoteRegistry) - The service has stopped
SSDP Discovery (SSDPSRV) - The service is running
Remote Desktop Services (TermService) - The service has stopped
Windows Remote Management (WS-Management) (WinRM) - The service has stopped
------------------------------ [ MS Office ] ------------------------------
Microsoft Office 2007 v.12.0.4518.1014
--------------------------- [ FirewallWindows ] ---------------------------
Windows Firewall (MpsSvc) - The service is running
--------------------------- [ AntiSpyware_WMI ] ---------------------------
Windows Defender (enabled and up to date)
-------------------------- [ SecurityUtilities ] --------------------------
Malwarebytes Anti-Malware version 2.2.1.1043 v.2.2.1.1043
--------------------------- [ AppleProduction ] ---------------------------
Bonjour v.3.1.0.1
iTunes v.12.4.3.1 Warning! Download Update
^Please use Apple Software Update tool.^
Bonjour Service (Bonjour Service) - The service is running
--------------------------- [ AdobeProduction ] ---------------------------
Adobe Flash Player 23 ActiveX v.23.0.0.207
Adobe Flash Player 23 NPAPI v.23.0.0.207
Adobe Reader X (10.1.16) v.10.1.16 Warning! This software is no longer supported. Please uninstall it and use Adobe Reader XI or Adobe Acrobat Reader DC.
Adobe Acrobat Reader DC v.15.020.20039 Warning! Download Update
^Please run Acrobat Reader DC and go Help - Check for updates...^
------------------------------- [ Browser ] -------------------------------
Google Chrome v.54.0.2840.87 Warning! Download Update
Mozilla Firefox 49.0.2 (x86 en-US) v.49.0.2
--------------------------- [ RunningProcess ] ----------------------------
C:\Program Files (x86)\Mozilla Firefox\firefox.exe v.49.0.2.6136
------------------ [ AntivirusFirewallProcessServices ] -------------------
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe v.2.3.173.0
MBAMScheduler (MBAMScheduler) - The service is running
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe v.3.1.7.0
MBAMService (MBAMService) - The service is running
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe v.3.2.21.0
Windows Defender (WinDefend) - The service is running
----------------------------- [ End of Log ] ------------------------------
 

I switched all plugins to never activate and rebooted Firefox. Plugin container is still running although it's not using as much resources



#10 buddy215

buddy215

  • BC Advisor
  • 11,789 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:06:51 AM

Posted 13 November 2016 - 05:17 PM

Uninstall Adobe Reader X and Adobe Acrobat Reader DC v.15.020.20039

 

Have you attempted to activate one plugin at a time to find which one is causing the problem? If not, do that after doing the uninstalls above.

 

Would be a good idea to clean and scan for adware, too.

 

I see you have MBAM....please check and use the settings as described below and run a scan using it. Post its scan log if it finds anything.

 

Use CCleaner to remove Temporary files, program caches, cookies, logs, etc. Use the Default settings. No need to use the

Registry Cleaning Tool...risky. Pay close attention while installing and UNcheck offers of toolbars....especially Google.

After install, open CCleaner and run by clicking on the Run Cleaner button in the bottom right corner.

CCleaner - PC Optimization and Cleaning - Free Download

 

  • Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.
  • Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.
  • Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.
  • If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).
  • When MBAM is finished scanning it will display a screen that displays any malware that it has detected.
  • Click the Remove Selected button.
  • MBAM will now delete all of the files and registry keys and add them to the programs quarantine. When removing the files, MBAM may require a reboot in order to remove some of them. If it displays a message stating that it needs to reboot, please allow it to do so.
  • While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.
  • The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Logs.

Download AdwCleaner by Xplode onto your desktop.

  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Scan button.
  • When the scan has finished click on Clean button.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.
  • download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss

A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”


#11 Hal06

Hal06
  • Topic Starter

  • Members
  • 879 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New York, New York, USA
  • Local time:07:51 AM

Posted 13 November 2016 - 07:14 PM

I can't uninstall either program.

 

I get the message error writing to config.msi\1256c03.rbf

 

I get a similar message when trying to update iTunes

 

What am I doing wrong?



#12 buddy215

buddy215

  • BC Advisor
  • 11,789 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:06:51 AM

Posted 13 November 2016 - 07:47 PM

Boot into Safe Mode and try uninstalling those programs.

 

ITunes....did you use the Apple Software Update tool.....Download Update

 

If you are still unable to uninstall and update....then please proceed to run the scans.


“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss

A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”


#13 Hal06

Hal06
  • Topic Starter

  • Members
  • 879 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New York, New York, USA
  • Local time:07:51 AM

Posted 14 November 2016 - 07:50 AM

Thanks. 

 

Off to work but will do this when home.



#14 Hal06

Hal06
  • Topic Starter

  • Members
  • 879 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New York, New York, USA
  • Local time:07:51 AM

Posted 14 November 2016 - 08:07 PM

When I started in Safe Mode and tried to remove the programs. It could not be done. The message said the installer was not installed correctly.



#15 Hal06

Hal06
  • Topic Starter

  • Members
  • 879 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New York, New York, USA
  • Local time:07:51 AM

Posted 19 November 2016 - 12:28 PM

So how do I remove acrobat if uninstall leads to a ms config error and safe uninstall says the installer isn't installed? Is there a program I can download to uninstall acrobat? Is there a program that will fix the ms config errors?

 

Thanks.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users