Slowness, unable to uninstall certain software, etc.

Good evening everyone :)

I'm here to finally find a solution to my problem: my PC has been extremely slow for over two months (I bought it in January 2013..).

I have a certain program Yontoo that I can't remove (despite following tutorials), my PC tells me that there are two antivirus programs on my PC (even though I only activated Avast), my battery has died (well, for that I guess I'll have to buy a new one..), and everything is really slow (even YouTube videos are buffering), and no games work (not even Sims 2000!)

In short, my PC is lagging like crazy! and it's really frustrating :( Especially since I have 4GB of RAM..

Sorry for the lack of accents but I'm on a QWERTY keyboard. Thank you in advance for your solutions!

12 answers

  1. Have you started by doing some cleaning?
    Three quarters of the time, as it stands, computers are overrun with various things that come from our internet browsing.

    I can't guarantee that it will work, but if you haven't done it already, start with:

    - A scan with your antivirus, as thorough as possible; ideally, use the scans conducted at startup. If you don't know which antivirus to use, I recommend Avast for free.

    - Then you can run CCleaner (also free); it will clear your cache, for example. Make sure to check as many useful options as possible in the settings so that it is as effective as possible. By the way, if you have another antivirus on your computer, CCleaner might be able to uninstall it, and I emphasize might; there’s a tab for that. That said, it's easy to install an antivirus, but removing it is another story; it may think it’s being "attacked" and consequently defend itself. The versions of Norton that are on some PCs are particularly annoying.

    - Next, what saved my brother's computer regarding slowness is the anti-malware, like Malwarebytes; you can get it for free, it's effective, and if you've never used it, you will be surprised at what it can do.

    - You can also, even if the results won't be dramatic, initiate a defragmentation of your drives. It will essentially consolidate scattered data on your disk, and it will be a tiny bit more responsive.

    So, these are things to do when a PC is slow. If you're more experienced and don't have too many things installed on your PC, you could also consider a system restore; that would reset your computer to its starting state (when you bought it), but that’s a last resort.

    Hoping this will be enough,

    Have a good evening.
    0
    1. Thank you for your responses :)

      So here it is, thanks to lilidurhone, I was able to remove Yontoo.. :)

      Jujurock, I do regular cleanups and scans whenever I can. The problem, I think, is that I can't uninstall Ad-adware.. :/

      Here are the programs running in the background that I think are slowing down my PC:

      - Ad-adware
      - GFI software anti-malware
      - unsecapp
      - PnkBstrA
      - IAStorIcon
      - All the Chrome tabs
      - other files

      The two that I really want to uninstall are ad-adware and GFI software, but they are not found by Revo uninstaller :/
      0
      1. Hello,

        Here it is (I think I managed to remove the adware last night..)

        ~ ZHPDiag report v2014.6.25.98 - Nicolas Coolman (06/25/2014)
        ~ Launched by Jacek (07/06/2014 11:09:56)
        ~ Website Address https://nicolascoolman.eu
        ~ Translated by Nicolas Coolman
        ~ Version status: New version available
        ~ Whitelist: Activated by the program
        ~ Privilege Elevation: OK
        ~ User Account Control (UAC): Deactivated by program

        ---\\ Internet Browsers
        MSIE: Internet Explorer v11.0.9600.17126
        GCIE: Google Chrome v35.0.1916.153 (Default)

        ---\\ Information about Windows products
        ~ Language: French
        Windows 8.1, 64-bit (Build 9600)
        Windows Server License Manager Script: OK
        ~ Windows(R) Operating System, OEM_DM channel
        Software Protection Service: OK
        Windows Automatic Updates: OK
        Windows Activation Technologies: OK

        ---\\ System protection software
        avast! Free Antivirus v9.0.2018
        Malwarebytes Anti-Malware version 2.0.2.1012
        Windows Defender W8 (Deactivated)

        ---\\ System optimization software
        CCleaner v4.00

        ---\\ PeerToPeer sharing software

        ---\\ Software surveillance
        Adobe Flash Player 13 Plugin
        Adobe Reader XI
        Java 7 Update 55

        ---\\ System information
        ~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
        ~ Operating System: 64 Bits
        Boot mode: Normal (Normal boot)
        Total RAM: 3983 MB (63% free)
        System Restore: Enabled
        System drive C: has 326 GB (48%) free of 673 GB

        ---\\ System connection mode
        ~ Computer Name: JACEK-BASTIN
        ~ User Name: Jacek
        ~ All User Names: Jacek, Guest, Administrator,
        ~ Unselected Option: None
        Logged in as Administrator

        ---\\ Environment variables
        ~ System Unit: C:\
        ~ %AppZHP%: C:\Users\Jacek\AppData\Roaming\ZHP\
        ~ %AppData%: C:\Users\Jacek\AppData\Roaming\
        ~ %Desktop%: C:\Users\Jacek\Desktop\
        ~ %Favorites%: C:\Users\Jacek\Favorites\
        ~ %LocalAppData%: C:\Users\Jacek\AppData\Local\
        ~ %StartMenu%: C:\Users\Jacek\AppData\Roaming\Microsoft\Windows\Start Menu\
        ~ %Windir%: C:\Windows\
        ~ %System%: C:\Windows\System32\

        ---\\ Disk drive enumeration
        C: Hard drive, Flash drive, Thumb drive (Free 326 Go of 673 Go)
        D: CD-ROM drive (Not Inserted)
        E: CD-ROM drive (Not Inserted)
        F: CD-ROM drive (Not Inserted)

        ---\\ Windows Security Center status
        [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
        ~ Security Center: 49 Legitimate Filtered in 00mn 00s

        ---\\ Specific search for generic files
        [MD5.81394C91B7B5A7C799E249AE82491F13] - (.Microsoft Corporation - Windows Explorer.) (.04/03/2014 - 13:25:49.) -- C:\Windows\Explorer.exe [2373784]
        [MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - Windows Start-Up Application.) (.22/08/2013 - 10:58:29.) -- C:\Windows\System32\Wininit.exe [144384]
        [MD5.40BFD9D6EC8E174145F012246CA73CCD] - (.Microsoft Corporation - Internet Extensions for Win32.) (.30/05/2014 - 08:56:56.) -- C:\Windows\System32\wininet.dll [2266112]
        [MD5.306EB21E5B480AE9065EA55AC8C35936] - (.Microsoft Corporation - Windows Logon Application.) (.22/02/2014 - 10:45:48.) -- C:\Windows\System32\Winlogon.exe [562176]
        [MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Software Licensing Library.) (.21/12/2013 - 09:54:07.) -- C:\Windows\System32\sppcomapi.dll [447488]
        [MD5.7C7BE474915166B61B84C025F1F10157] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.03/04/2014 - 03:23:11.) -- C:\Windows\system32\Drivers\AFD.sys [563200]
        [MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22/08/2013 - 13:43:41.) -- C:\Windows\system32\Drivers\atapi.sys [26464]
        [MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) (.22/08/2013 - 12:40:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [88576]
        [MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.22/08/2013 - 09:46:35.) -- C:\Windows\system32\Drivers\Cdrom.sys [164352]
        [MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.06/03/2014 - 10:22:50.) -- C:\Windows\system32\Drivers\DfsC.sys [134144]
        [MD5.498288DD5CA42C2D36D125893E968C53] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.18/03/2014 - 09:19:14.) -- C:\Windows\system32\Drivers\HDAudBus.sys [77312]
        [MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - i8042 Port Driver.) (.22/08/2013 - 12:39:15.) -- C:\Windows\system32\Drivers\i8042prt.sys [107520]
        [MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) (.27/11/2013 - 13:02:29.) -- C:\Windows\system32\Drivers\IpNat.sys [142848]
        [MD5.0696F66E4D423793951A60562F794D14] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.03/04/2014 - 03:23:05.) -- C:\Windows\system32\Drivers\MRxSmb.sys [402432]
        [MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) (.22/08/2013 - 12:37:02.) -- C:\Windows\system32\Drivers\netBT.sys [282624]
        [MD5.1C80517BE6836A812F6A9B99B8321351] - (.Microsoft Corporation - NT File System Driver.) (.20/03/2014 - 04:41:24.) -- C:\Windows\system32\Drivers\ntfs.sys [2013016]
        [MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Parallel Port Driver.) (.22/08/2013 - 12:40:02.) -- C:\Windows\system32\Drivers\Parport.sys [94208]
        [MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.22/08/2013 - 12:35:51.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [120832]
        [MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.30/09/2013 - 04:51:06.) -- C:\Windows\system32\Drivers\rdpdr.sys [195584]
        [MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) (.22/08/2013 - 14:25:35.) -- C:\Windows\system32\Drivers\tdx.sys [107520]
        [MD5.4BB9BC49DEE1A319EC58274A7BBED663] - (.Microsoft Corporation - Volume Shadow Copy Driver.) (.06/03/2014 - 13:42:44.) -- C:\Windows\system32\Drivers\volsnap.sys [310616]
        ~ Generic Processes: Scanned in 00mn 00s

        ---\\ Status of hidden files (Hidden/Total)
        ~ My Pictures: 2/2574
        ~ My Musics: 1/2555
        ~ My Videos: 2/708
        ~ My Favorites: 1/3
        ~ My Documents: 2/572
        ~ My Desktop: 32/5399
        ~ Start Menu: 1/34
        ~ Hidden Files: Scanned in 00mn 09s

        ---\\ Running processes
        [MD5.FDB491D7E5F9DAD4B05AA4ED01602CC1] - (.Samsung Electronics CO., LTD. - Settings.) -- C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2623096] [PID.3808]
        [MD5.2218928CF528D7BC295B1B4C69E9846C] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [3890208] [PID.4856]
        [MD5.4738DC864215B00B886E27A8D18CC326] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592] [PID.4540]
        [MD5.A5FCD42334CCC682DA1882A54338686C] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488] [PID.1956]
        [MD5.1F62DCBF33A67CAA5E68ADECBB25C3C7] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8071680] [PID.5628]
        ~ Processes Running: Scanned in 00mn 02s

        ---\\ Google Chrome, Startup, Search, Extensions (G0,G1,G2)
        C:\Users\Jacek\AppData\Local\Google\Chrome\User Data\Default\Preferences
        G1 - GCS: Preference [User Data\Default] https://www.google.com/?gws_rd=ssl
        G2 - GCE: Preference [User Data\Default] [bepbmhgboaologfdajaanbcjmnhjmhfn] Google Voice Search Hotword (Beta) v.0.1.1.5019, (Disabled)
        G2 - GCE: Preference [User Data\Default] [dnhpdliibojhegemfjheidglijccjfmc] hotword helper v.0.0.1.0 (Enabled)
        G2 - GCE: Preference [User Data\Default] [icdipabjmbhpdkjaihfjoikhjjeneebd] Kindle Cloud Reader v.1.7.0.1 (Enabled)
        G2 - GCE: Preference [User Data\Default] [jijbhneeenepenoolcdalnekggeialeo] Tomatoes v.0.6.65 (Enabled)
        G2 - GCE: Preference [User Data\Default] [kpckgflgdapkpabemgkielbefdildaio] Magic Player v.1.1.34 (Disabled)
        G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Enabled)
        G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Enabled)
        G2 - GCE: Preference [User Data\Default] [pafkbggdmjlpgkdkcbjmhmfcdpncadgh] Google Now v.1.2.0.1 (Enabled)

        ---\\ List of Google Chrome extension folders
        ~ Google Lines Browser: 26 Legitimate Filtered in 00mn 13s

        ---\\ Internet Explorer, Proxy Management (R5)
        R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
        R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
        R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
        R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
        R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
        R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
        ~ Proxy management: Scanned in 00mn 00s

        ---\\ Analysis of lines F0, F1, F2, F3 - IniFiles, Autoloading programs
        F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
        F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
        F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
        ~ Keys: Scanned in 00mn 00s

        ---\\ Hosts file redirection (O1)
        ~ The hosts file is clean.
        ~ Hosts File: Scanned in 00mn 00s
        ~ Number of lines: 23

        ---\\ Other user links (O4)
        O4 - GS\QuickLaunch [Jacek]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Jacek\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
        O4 - GS\Desktop [Jacek]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Jacek\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
        ~ Global Startup: 2 Legitimate Filtered in 00mn 03s

        ---\\ Applications launched at system startup (O4)
        O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated
        O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
        O4 - HKLM\..\Run: [IAStorIcon] . (.Intel Corporation - Delayed launcher.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
        O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
        O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
        O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
        O4 - HKLM\..\Run: [SBRegRebootCleaner] C:\Program Files (x86)\Ad-Aware Antivirus\SBRC.exe (.not file.)
        O4 - HKCU\..\Run: [PC Remote Server] . (.PC Remote - PC Remote Server.) -- C:\Program Files (x86)\PC Remote\PC Remote\PCRemote.exe
        O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Google Installer.) -- C:\Users\Jacek\AppData\Local\Google\Update\GoogleUpdate.exe
        O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Jacek\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
        O4 - HKLM\..\Wow6432Node\Run: [Intel AppUp(SM) center] . (.Intel Corporation - Intel Services Manager.) -- C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
        O4 - HKLM\..\Wow6432Node\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
        O4 - HKLM\..\Wow6432Node\Run: [AdobeCS5.5ServiceManager] . (.Adobe Systems Incorporated - Adobe CS5.5 Service Manager.) -- C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe
        O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
        O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
        O4 - HKLM\..\policies\Explorer\Run: [BtvStack] . (.Qualcomm®Atheros® - Extension Core.) -- C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
        O4 - HKUS\S-1-5-21-320547457-2041515029-3647522490-1001\..\Run: [PC Remote Server] . (.PC Remote - PC Remote Server.) -- C:\Program Files (x86)\PC Remote\PC Remote\PCRemote.exe
        O4 - HKUS\S-1-5-21-320547457-2041515029-3647522490-1001\..\Run: [Google Update] . (.Google Inc. - Google Installer.) -- C:\Users\Jacek\AppData\Local\Google\Update\GoogleUpdate.exe
        O4 - HKUS\S-1-5-21-320547457-2041515029-3647522490-1001\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Jacek\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
        ~ Application: Scanned in 00mn 00s

        ---\\ Buttons located on the main toolbar of Internet Explorer (O9)
        O9 - Extra button: Send to OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll =>.Microsoft Corporation
        O9 - Extra button: Lync Click to Call [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -- C:\Program Files\Microsoft Office\Office15\lync.exe (.not file.)
        O9 - Extra button: OneNote Linked Notes [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote PowerPoint Add-in.) -- C:\Program Files (x86)\Microsoft Office\Office15\ONBTTN~1.dll =>.Microsoft Corporation
        O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 [64Bits] - {A95fe080-8f5d-11d2-a20b-00aa003c157a} . (.Evernote Corp., 305 Walnut Street, Redwood - Evernote Clipper for Microsoft Internet Explorer.) -- C:\Program Files (x86)\Evernote\Evernote\EvernoteIEx64.dll
        ~ IE Extra Buttons: Scanned in 00mn 00s

        ---\\ Site in the trusted zone of Internet Explorer (O15)
        O15 - Trusted Zone: [HKCU\...\Domains] http.ma-config.com
        O15 - Trusted Zone: [HKCU\...\Domains] http.touslesdrivers.com
        ~ IE Trusted Zone: Scanned in 00mn 02s

        ---\\ Domain/DNS Addresses Modification (O17)
        O17 - HKLM\System\CCS\Services\Tcpip\..\{01C5B8FC-52D5-4DE5-ABBA-12EB3D6366F8}: DhcpNameServer = 62.179.1.63 62.179.1.62
        O17 - HKLM\System\CS1\Services\Tcpip\..\{01C5B8FC-52D5-4DE5-ABBA-12EB3D6366F8}: DhcpNameServer = 62.179.1.63 62.179.1.62
        O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.63 62.179.1.62
        ~ Domain: Scanned in 00mn 00s

        ---\\ Additional protocol (O18)
        O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
        0
        1. Security Contributor
          Can you host the report on cjoint?

          --
          If there is a problem, there is always a solution
          ~~~~~~ Cs ~~~~~~ Absent from July 15 to 27
          0
          1. Security Contributor
            We continue after lunch

            --
            If there is a problem, there is always a solution
            ~~~~~~ Cs ~~~~~~ Absent from July 15 to 27
            0
            1. Good evening,

              does the report show anything? :)
              0
              1. Security Contributor
                Just a file to delete

                --
                If there is a problem, there is always a solution
                ~~~~~~ Cs ~~~~~~ Absent from July 15 to 27
                0
                1. Security Contributor
                  Programdata/Installmate

                  --
                  If there is a problem, there is always a solution
                  ~~~~~~ Cs ~~~~~~ Absent from July 15 to 27
                  0
                  1. Hi

                    if I may say so

                    there are also traces of Ad-Aware poorly uninstalled which may explain his message saying it is still installed

                    O4 - HKLM\..\Run: [SBRegRebootCleaner] C:\Program Files (x86)\Ad-Aware Antivirus\SBRC.exe (.not file.)
                    [MD5.00000000000000000000000000000000] [APT] [Ad-Aware Antivirus Scheduled Scan] (...) -- C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareLauncher.exe (.not file.)

                    and according to Google this would be more than questionable

                    [HKLM\Software\Wow6432Node\MSPG32]
                    0
                  2. Security Contributor
                    Exact Jimmy :)
                    0