'puter totally screwed up this week

The last few days my PC has been totally acting weird. Verrrry slow and frequently unresponsive, to the point of being unusable. This happened quite suddenly with no event that I can identify as a cause.

 

I have updated and run Norton 360 scans, Spybot S&D and Trojan Hunter. While Trojan Hunter was running I got a notice that Norton had quarantined Heur.AdvML.B (x3) and SONAR.AM.C!g8. Then Trojan Hunter seems to have quit.

 

I am assuming these are actually safe since I thought Trojan Hunter was a safe program but I am not experienced enough to do anything about this. 

 

Any help and advice would be greatly appreciated.

 

Thanks,

Dawn

If you call Norton they should help...I'm not a tech person

 

My Norton has "Norton Power Eraser" and it's helped me in the past.

DSE....welcome to BC...

 

Uninstall Trojan Hunter...be sure it is completely shut down before uninstalling. Use Download Revo Uninstaller Freeware to uninstall it.

 

Use the programs below to clean, remove adware and remove malware.

 

Use CCleaner to remove Temporary files, program caches, cookies, logs, etc. Use the Default settings. No need to use the

Registry Cleaning Tool...risky. Pay close attention while installing and UNcheck offers of toolbars....especially Google.

After install, open CCleaner and run by clicking on the Run Cleaner button in the bottom right corner.

CCleaner - PC Optimization and Cleaning - Free Download

 

Download Malwarebytes' Anti-Malware from Here

Double-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).

• Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.
• Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.
• Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.
• Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.
• If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).
• When MBAM is finished scanning it will display a screen that displays any malware that it has detected.
• Click the Remove Selected button.
• MBAM will now delete all of the files and registry keys and add them to the programs quarantine. When removing the files, MBAM may require a reboot in order to remove some of them. If it displays a message stating that it needs to reboot, please allow it to do so.
• While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.
• The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Logs.

POST THE LOG FOR  REVIEW.

 

Download AdwCleaner by Xplode onto your desktop.

• Close all open programs and internet browsers.
• Double click on adwcleaner.exe to run the tool.
• Click on Scan button.
• When the scan has finished click on Clean button.
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the contents of that logfile with your next reply.
• You can find the logfile at C:\AdwCleaner[S1].txt as well.

• download Junkware Removal Tool to your desktop.
• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message

Thanks for the quick response. I am working through your instructions...

 

I have a few questions (in red)...

 

---------------------------------------

 

Uninstall Trojan Hunter...be sure it is completely shut down before uninstalling. Use Download Revo Uninstaller Freeware to uninstall it.

--------------------------------------------------

 

Done, Is Trojan Hunter not a safe program? Should I not reinstall it after my machine is working again? I know it didn't cause the problem because it wasn't installed when the problem started.

 

----------------------------------------------------

Download Malwarebytes' Anti-Malware from Here

 

POST THE LOG FOR  REVIEW.

 

Malwarebytes

www.malwarebytes.com

 

-Log Details-

Scan Date: 12/22/16

Scan Time: 8:03 AM

Logfile: 

Administrator: Yes

 

-Software Information-

Version: 3.0.5.1299

Components Version: 1.0.43

Update Package Version: 1.0.827

License: Trial

 

-System Information-

OS: Windows 10

CPU: x64

File System: NTFS

User: DawnDesktop-HP\Dawn Desktop

 

-Scan Summary-

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 461909

Time Elapsed: 16 min, 13 sec

 

-Scan Options-

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Disabled

Heuristics: Enabled

PUP: Enabled

PUM: Enabled

 

-Scan Details-

Process: 0

(No malicious items detected)

 

Module: 0

(No malicious items detected)

 

Registry Key: 4

PUP.Optional.ProductSetup, HKU\S-1-5-21-631818756-1652327538-4216934692-1001\SOFTWARE\PRODUCTSETUP, Quarantined, [16920], [242047],1.0.827

PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2FA28606-DE77-4029-AF96-B231E3B8F827}, Quarantined, [646], [341070],1.0.827

PUP.Optional.ASK, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2fa28606-de77-4029-af96-b231e3b8f827}, Quarantined, [646], [341070],1.0.827

PUP.Optional.SuperOptimizer, HKU\S-1-5-21-631818756-1652327538-4216934692-1001\SOFTWARE\SUPER OPTIMIZER, Quarantined, [8513], [243670],1.0.827

 

Registry Value: 4

PUP.Optional.ProductSetup, HKU\S-1-5-21-631818756-1652327538-4216934692-1001\SOFTWARE\PRODUCTSETUP|TB, Quarantined, [16920], [242047],1.0.827

PUP.Optional.ASK, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2fa28606-de77-4029-af96-b231e3b8f827}|URL, Quarantined, [646], [341070],1.0.827

PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2fa28606-de77-4029-af96-b231e3b8f827}|URL, Quarantined, [646], [341070],1.0.827

PUP.Optional.SuperOptimizer, HKU\S-1-5-21-631818756-1652327538-4216934692-1001\SOFTWARE\SUPER OPTIMIZER|SETUPNAME, Quarantined, [8513], [243670],1.0.827

 

Data Stream: 0

(No malicious items detected)

 

Folder: 3

PUP.Optional.SuperOptimizer, C:\PROGRAMDATA\{562B928F-675C-745F-562B-B928F6754A3D}, Quarantined, [8513], [243661],1.0.827

PUP.Optional.DigitalMore, C:\Users\Dawn Desktop\AppData\Local\Google\Chrome\User Data\Default\Extensions\hahbikeckdeepggppdhakhkmljaikiao\1.0.5583.28167_0, Quarantined, [8741], [301840],1.0.827

PUP.Optional.DigitalMore, C:\USERS\DAWN DESKTOP\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\HAHBIKECKDEEPGGPPDHAKHKMLJAIKIAO, Quarantined, [8741], [301840],1.0.827

 

File: 10

Heuristics.Shuriken, C:\PROGRAMDATA\TEMP\MOZY-MANUALUPDATE-A0DBB37715A0A253723301CAF444A4D1.EXE, Quarantined, [2108], [167],1.0.827

PUP.Optional.SuperOptimizer, C:\PROGRAMDATA\{562B928F-675C-745F-562B-B928F6754A3D}\HQGHUMEAYLNLF.DAT, Quarantined, [8513], [243661],1.0.827

PUP.Optional.SuperOptimizer, C:\ProgramData\{562b928f-675c-745f-562b-b928f6754a3d}\2accdab1fe196d41, Quarantined, [8513], [243661],1.0.827

PUP.Optional.SuperOptimizer, C:\ProgramData\{562b928f-675c-745f-562b-b928f6754a3d}\2accdab1fe196d41.lock, Quarantined, [8513], [243661],1.0.827

PUP.Optional.SuperOptimizer, C:\ProgramData\{562b928f-675c-745f-562b-b928f6754a3d}\e7317ce4d9cd8a95, Quarantined, [8513], [243661],1.0.827

PUP.Optional.Plumbytes, C:\USERS\DAWN DESKTOP\DOWNLOADS\ANTIMALWARESETUP.EXE, Quarantined, [10518], [123575],1.0.827

PUP.Optional.DigitalMore, C:\USERS\DAWN DESKTOP\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\HAHBIKECKDEEPGGPPDHAKHKMLJAIKIAO\1.0.5583.28167_0\MANIFEST.JSON, Quarantined, [8741], [301840],1.0.827

PUP.Optional.DigitalMore, C:\Users\Dawn Desktop\AppData\Local\Google\Chrome\User Data\Default\Extensions\hahbikeckdeepggppdhakhkmljaikiao\1.0.5583.28167_0\background.js, Quarantined, [8741], [301840],1.0.827

PUP.Optional.DigitalMore, C:\Users\Dawn Desktop\AppData\Local\Google\Chrome\User Data\Default\Extensions\hahbikeckdeepggppdhakhkmljaikiao\1.0.5583.28167_0\content.js, Quarantined, [8741], [301840],1.0.827

PUP.Optional.DigitalMore, C:\Users\Dawn Desktop\AppData\Local\Google\Chrome\User Data\Default\Extensions\hahbikeckdeepggppdhakhkmljaikiao\1.0.5583.28167_0\icon.png, Quarantined, [8741], [301840],1.0.827

 

Physical Sector: 0

(No malicious items detected)

 

 

(end)

 

That's as far as I have got...Thanks

 # AdwCleaner v6.041 - Logfile created 22/12/2016 at 08:56:15

Done, Is Trojan Hunter not a safe program? Should I not reinstall it after my machine is working again? I know it didn't cause the problem because it wasn't installed when the problem started.

 

It is not a program anyone familiar with security programs here would ever recommend. It was tested informally a few months ago. You can view

that if you want to at TrojanHunter | MalwareTips.com. Another attempt to test was made a year or so ago and the tester could not get the program to update....gave up.

The Junkware Removal Tool doesn't seem to be doing anything. I am not getting a log.

How much time have you given it to complete the scan? Did you exit your antivirus program? Do you have Spybot S&D installed?

Is it on your destop and are you running it as administrator?

Edited by buddy215, 22 December 2016 - 09:53 AM.

It was spybot...

 

Just when I thought the system was running a little smoother I have a warning pop up urging me to call Microsoft and a 1800 number...

Edited by DSE, 22 December 2016 - 01:24 PM.

That is a criminal trying to scam you. Often all you have to do get rid of that ad is to dump the browsers cache files. You

can just run a scan using CCleaner, too. Whatever you do....DON'T call that number.

 

Do you have an ad blocker installed? Some of those scam ads are actually being hosted by legit ad servers that have been tricked into

running those ads. An ad blocker will block those.

I have Spyboy S&D, and Norton 360...now the ones you suggested. What do you suggest?

 

No worries, I would NEVER call the number...

You should uninstall Spybot. It has long since lost the favor of security pros.

 

Eset can take more than an hour to run. So, plan accordingly.