Painfully Slow Computer

stuartk

aliEnRIK wrote: »

1 gig of RAM will give a HUGH increase in speed. You definitely need more RAM regardless of any other problems

As you have VUNDO trojan ~
Please run COMBOFIX

Shut down your anti virus
Follow the simple instructions it gives
Post the COMPLETE log it creates here (Split into sections if need be)

If it comes up with a RENAMING error then RIGHT click the exe file and RENAME and call it QWERTY (Making the complete file name 'QWERTY.exe') Or SAVE as 'QWERTY' on download

Hi There

I'd be very careful advising a user to run CF

MBAM should remove the Trojan Vundo, if not there are dedicated tools to remove it which are easier for a user to use than CF.

I'd wait and see the new MBAM log

Regards

aliEnRIK

TICK these in hijack and click to FIX them ~
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -schedule
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - .sibelius.com/download/software/win/ActiveXPlugin.cab

aliEnRIK

stuartk wrote: »

Hi There

I'd be very careful advising a user to run CF

MBAM should remove the Trojan Vundo, if not there are dedicated tools to remove it which are easier for a user to use than CF.

I'd wait and see the new MBAM log

Regards

I know what im doing thanks

Donnie

stuartk wrote: »

Hi There

OK I would also question this entry:

C:\Program Files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe

See here: http://www.systemlookup.com/search.php?type=filename&client=malwaresearch-ff&search=IObit%20SmartDefrag.exe

Regards

It's not malware as such, they are just 'borrowing' the intellectual property of others. Isn't that for what China is famous?

stuartk

Why?

O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)

http://www.systemlookup.com/search.php?type=clsid&client=malwaresearch-ff&search=5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB

O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -schedule

http://www.systemlookup.com/search.php?type=filename&client=malwaresearch-ff&search=ISUSPM.exe

O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - .sibelius.com/download/software/win/ActiveXPlugin.cab

http://www.systemlookup.com/search.php?type=clsid&client=malwaresearch-ff&search=A8F2B9BD-A6A0-486A-9744-18920D898429

They ALL look legit to me

Regards

stuartk

aliEnRIK wrote: »

I know what im doing thanks

Yes so do I

Regards

aliEnRIK

stuart ~ im not dealing with you. If you want to counter everything I say then go ahead. But I really cant be bothered explaining why I suggest what I do to you
(Ps ~ what the hell does that site prove?)

aliEnRIK

stuartk wrote: »

Yes so do I

Regards

Cool

You wont mind going through this combofix log for me then ~

http://forums.moneysavingexpert.com/showthread.html?p=28180477#post28180477

stuartk

M8 that site is the reference point for every professional malware removal forum. It is used to determine legit entries from bad ones.

If you havent heard of it then I suggest you do some research

Regards

stuartk

aliEnRIK wrote: »

Cool

You wont mind going through this combofix log for me then ~

http://forums.moneysavingexpert.com/showthread.html?p=28180477#post28180477

Yes no problem

Or what about an OTL / AVZ log if you want to get technical

Regards