My computer is slow.

mister1616 Posted messages 312 Status Member -  
fabul Posted messages 42069 Registration date   Status Moderator Last intervention   -
Hello,

for some time now there has been a slowness either when opening my email box or a web page

Thank you for your help

Configuration: Windows 7 / Chrome 47.0.2526.111

23 answers

  • 1
  • 2
fabul Posted messages 42069 Registration date   Status Moderator Last intervention   6 053
 
Hi,

You can perform a scan and cleanup with AdwCleaner

You can perform a scan and cleanup with ZHPCleaner

To investigate further,

Install RegRun Reanimator (Download Mirror 1 or 2)

Click on "Fix Problems".

Click on "Scan Windows Startup...".

Check the box "Use Deep Level Scanning Once (For Advanced Users)".

Click on "Make Scan Now".

After the scan, click on "Fix Problems".

If there are more than fifteen detections, Prohibited/Suspicious/Warnings, let me know, and we will proceed differently.

Be careful, it often detects false positives (legitimate files).

You can search the internet for the name of an item by right-clicking in the middle of the window and choosing "Copy To Clipboard"

If you need help, see below*

Make sure to only delete malware or unnecessary items with the "Get It Out" button, otherwise, you could damage your system,

Use the arrow key for the others or click on "False Positive" if it’s an item you recognize.

Click on "Reboot Computer" at the end to perform the deletion and confirm to restart.

Check if you see anything bad or unnecessary especially in the "Logon", "Scheduled Tasks" and "Services" tabs of Autoruns

In some cases of browser infections, you need to reset the browsers:
http://christians-steffen.fr/telecharger/telecharger-resetbrowser/

If you need help regarding the detections from RegRun Reanimator,

Right-click in the middle of the window and choose "Save To File" to copy the results into a text file.

You can name it 1 (just that), the .txt will be generated automatically.

Click on the arrow to move to the next item, do the same for the first and name it 2, and so on with the others.

At the end, click on "Exit".

Post the results contained in the text files in your next message.

Then you can let me know if your issue is resolved or not.
0
mister1616 Posted messages 312 Status Member 7
 
Hello and thank you for your help

# AdwCleaner v5.031 - Report created on 01/26/2016 at 17:00:39
# Updated on 01/25/2016 by Xplode
# Database: 2016-01-25.3 [Server]
# Operating System: Windows 7 Home Premium Service Pack 1 (x86)
# Username: Mister Glair - MISTERGLAIR-PC
# Executed from: C:\Users\Mister Glair\Downloads\adwcleaner_5.031.exe
# Option: Scan
# Support: https://toolslib.net/forum
          • [ Services ] *****
          • [ Folders ] *****


Folder Found: C:\_acestream_cache_
Folder Found: C:\Program Files\myfree codec
Folder Found: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Folder Found: C:\Users\Mister Glair\AppData\Roaming\.acestream
Folder Found: C:\Users\Mister Glair\AppData\Roaming\acestream
          • [ Files ] *****
          • [ DLL ] *****
          • [ Shortcuts ] *****
          • [ Scheduled Tasks ] *****
          • [ Registry ] *****


Key Found: HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Key Found: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Key Found: HKU\S-1-5-21-2633561822-3098213100-1261624712-1001\Software\Myfree Codec
Key Found: HKCU\Software\Classes\acestream

C:\AdwCleaner[R1].txt - [2885 bytes] - [10/08/2013 08:07:53]
C:\AdwCleaner[S1].txt - [2849 bytes] - [10/08/2013 08:09:23]

########## EOF - C:\AdwCleaner\AdwCleaner[S5].txt - [1435 bytes] ##########

~ ZHPCleaner v2016.1.25.15 by Nicolas Coolman (2016/01/25)
~ Run by Mister Glair (Administrator) (01/26/2016 18:04:32)
~ Site: https://nicolascoolman.eu
~ Facebook: https://www.facebook.com/nicolascoolman1
~ State version: Version OK
~ Type: Clean
~ Report: C:\Users\Mister Glair\Desktop\ZHPCleaner.txt
~ Quarantine: C:\Users\Mister Glair\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC: Activate
~ Boot Mode: Normal (Normal boot)
Windows 7 Home Premium, 32-bit Service Pack 1 (Build 7601)

---\\ Service. (0)
~ No malicious or superfluous items found.

---\\ Internet Browser. (0)
~ No malicious or superfluous items found.

---\\ Host file. (1)
~ The host file is legitimate. (21)

---\\ Scheduled Task. (0)
~ No malicious or superfluous items found.

---\\ Explorer ( Folders, Files ). (499)
MOVED folder: C:\Windows\Installer\MSI10AE.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI10D1.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI110F.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1163.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1220.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1227.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI12C7.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI12E7.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1378.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI13F8.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1437.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI153.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI16A.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI16E7.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1729.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1812.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1951.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1989.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI19E2.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1AFB.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1BFB.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1C88.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1D1F.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1DE1.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1E3D.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1E4E.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1E68.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI1FF4.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI20EF.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI222C.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI2330.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI23D8.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI24E9.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI2579.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI2655.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI279D.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI27D8.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI283C.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI285.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI2869.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI2937.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI2957.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI29E1.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI2A2E.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI2B06.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI2C0B.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI2C04.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI2D43.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI2DF0.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI2ECF.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI2ED3.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI2F9F.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI2FD8.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI300C.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI304A.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3072.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI313A.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3235.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3259.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI327E.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3286.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI33ED.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3468.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI348B.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI34B6.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3567.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI357.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI35F.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI360C.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI366C.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3694.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI36A.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI374B.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI37CF.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3842.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3862.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI38AD.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI391B.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI399.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3A05.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3A80.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3AF1.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3B04.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3B4B.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3BB5.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3C38.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3D11.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3F68.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3F78.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3FAE.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3FC1.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI3FF5.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4058.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4075.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4149.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI416D.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4212.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4227.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI445B.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI448A.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI44B7.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI45E8.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4641.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI465C.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4705.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI47BE.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI47E8.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI481B.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI485F.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI48C5.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI49B3.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI49DC.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4A0B.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4B28.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4BC1.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4C1C.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4C6A.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4C6E.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4D5B.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4D63.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4D95.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4E34.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4EE7.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4F3D.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4F8A.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI4FDD.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI50B1.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI50F3.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5174.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI51D9.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5253.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5267.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5370.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5419.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI544A.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI545.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5491.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI54CD.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI559F.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI55A5.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI55B.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI55F3.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5667.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI568F.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI56B2.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI578C.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI578F.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5802.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI583F.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI58DC.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5940.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5941.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI59C5.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5A67.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5A60.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5A86.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5A93.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5AB6.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5B71.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5B8C.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5BF2.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5C3A.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5C3F.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5CB3.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5CC6.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5D45.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5D5D.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5D6C.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5D7B.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5DA8.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5DB5.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5DD5.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5E89.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5EBD.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5EF6.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5EF8.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5EFB.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5F8D.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI5FBA.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI600C.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI60CC.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6142.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI61B1.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI61E7.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI629C.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6308.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6355.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI645B.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI64EB.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI65D1.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6614.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI662E.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI669.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI66DB.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI66F1.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI672F.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6779.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6797.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI67A3.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI67B7.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI680E.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6819.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI68B.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6915.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI695D.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6A0A.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6A7B.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6AC1.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6B68.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6BE3.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6C4C.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6C7A.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6E6.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI6EE7.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI7123.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI71A.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI71D6.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI71FB.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI732F.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI7392.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI7481.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI74C4.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI750.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI7575.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI769F.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI76C9.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI76D9.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI77F2.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI79E1.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI7A98.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI7B24.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI7B2D.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI7BC5.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI7BF5.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI7C29.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI7D09.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI7D29.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI7F4C.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI7F5B.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI7FB6.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI7FDA.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI802D.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8089.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI80B6.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8151.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8269.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI82A5.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI82C9.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI82EB.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI83C8.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI83CB.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8425.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI850F.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8577.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8597.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI85A3.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8660.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI86C6.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI86FF.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI874E.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI875E.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI87EF.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8804.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI882A.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI888.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI88D6.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8A0F.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8A37.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8A49.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8A99.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8AA4.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8AB5.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8B.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8C9A.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8DCC.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8DD6.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8DF0.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8E05.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8F68.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8F7.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI8FEA.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI9038.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI9078.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI90CA.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI9277.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI92D6.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI9327.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI9346.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI939.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI93FE.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI9432.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI94A9.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI94CE.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI94F1.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI9736.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI98DA.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI9914.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI9954.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI9AAF.tmp- =>Empty
MOVED folder: C:\Windows\Installer\MSI9AC4.tmp- =>Empty
MOVED folder:
0
fabul Posted messages 42069 Registration date   Status Moderator Last intervention   6 053
 
If you have suspicious detections with Reanimator, do as I said below.
0
mister1616 Posted messages 312 Status Member 7
 
There were 6 if I remember correctly, but I don't quite understand the tutorial.
0
fabul Posted messages 42069 Registration date   Status Moderator Last intervention   6 053
 
Had?

If you deleted something you shouldn't have, press Windows+R, and type: RSTRUI

Restore to the date of the RegRun analysis.

If you only deleted the bad ones, that's OK,

If you didn't delete anything, you can give me the list contained in the text files you create by "Save to file" by default in "Documents"


Otherwise, to proceed, check with Autoruns as I said, what's possibly excessive during a session, keep the list minimal, uncheck what's good and unnecessary, delete what's bad or obsolete.
0
fabul Posted messages 42069 Registration date   Status Moderator Last intervention   6 053
 
When you see an item, you have the choice, by clicking on Copy to clipboard to copy the result to the clipboard, or Save to file, to copy the result to a text file.

You do this for each detected item so that I can see what there is and tell you if it is safe to delete.

Navigate with the arrow from the first to the last. (do not choose an action in the meantime)
0
mister1616 Posted messages 312 Status Member 7
 
re
I restored and had to open IE because I couldn't open Google Chrome anymore.
However, I'm having a bit of trouble following your tutorial when you talk about an item, sorry but I'm a novice at this.

Do I need to redo RegRun Reanimator??
0
fabul Posted messages 42069 Registration date   Status Moderator Last intervention   6 053
 
The 6 items need to be detected again,

Can you copy the results for me?
0
mister1616 Posted messages 312 Status Member 7
 
I just posted and I can't see my response anymore.
0
fabul Posted messages 42069 Registration date   Status Moderator Last intervention   6 053
 
I don't see it either. It might be a bug or the bot blocking something; you can send it to me in a private message.
0
mister1616 Posted messages 312 Status Member 7 > fabul Posted messages 42069 Registration date   Status Moderator Last intervention  
 
Done
0
fabul Posted messages 42069 Registration date   Status Moderator Last intervention   6 053
 
According to what I've seen, your PC doesn't seem infected at first glance.

After a quick check with Autoruns, to disable unnecessary things, especially in the "Logon" and "Scheduled Tasks" tabs.

Do some cleaning:

ATF-Cleaner files

Files, Registry CCleaner Portable < - Disable its monitoring.

Registry Wise Registry Cleaner < - Check if it has added any scheduled task with Autoruns and disable it.

Defragment:

Files Auslogics Disk Defrag Portable

Registry Auslogics Registry Defrag

If you still have browser issues, or any others, if you want me to investigate further with ZHPDiag,

Download ZHPDiag https://nicolascoolman.eu

Install it.

Click on "Scan"

Wait during the analysis.

It creates a log on the desktop.

Post it on Cjoint and give us the Cjoint link.
0
mister1616 Posted messages 312 Status Member 7
 
ZHPDiag finished and it's not creating a log on the desktop

I hosted the image because it doesn't work via this forum

http://tinypic.com/images/goodbye.jpg
0
fabul Posted messages 42069 Registration date   Status Moderator Last intervention   6 053
 
Click on Report,

Once the report is open, go to File -> Save As -> Desktop.
0
mister1616 Posted messages 312 Status Member 7 > fabul Posted messages 42069 Registration date   Status Moderator Last intervention  
 
I had already tried, but when I click on report, nothing happens.
0
fabul Posted messages 42069 Registration date   Status Moderator Last intervention   6 053
 
It's not normal, there might be a software conflict, disable your antivirus and relaunch the program as an administrator if UAC is enabled.
0
mister1616 Posted messages 312 Status Member 7
 
Now it's working, miracle :D

https://www.cjoint.com/c/FABmuWIpyuy
0
fabul Posted messages 42069 Registration date   Status Moderator Last intervention   6 053
 
Not much, no surprise.

You can uninstall Spybot, it's unnecessary

Install ZHPFix

Import the following script and click on GO

Script ZHPFix
O87 - FAEL: "{0D971C18-BFF1-49DA-895B-E4D0FF5E14DD}" [In-None-P6-TRUE] .(...) -- C:\Program Files\GoforFiles\goforfilesdl.exe (.not file.) =>PUP.Optional.YourFileDownloader
O87 - FAEL: "{42B553E6-A6E9-410B-8408-E533E93640FA}" [In-None-P17-TRUE] .(...) -- C:\Program Files\GoforFiles\goforfilesdl.exe (.not file.) =>PUP.Optional.YourFileDownloader
O87 - FAEL: "{B7412CEE-BE5E-4497-B3E3-10B5FFBA6406}" [In-None-P6-TRUE] .(...) -- C:\Program Files\GoforFiles\GoforFiles.exe (.not file.) =>PUP.Optional.YourFileDownloader
O87 - FAEL: "{D2FC2CC4-7839-4E97-A6B3-C6CD1FCDC654}" [In-None-P17-TRUE] .(...) -- C:\Program Files\GoforFiles\GoforFiles.exe (.not file.) =>PUP.Optional.YourFileDownloader
EmptyPrefetch
EmptyCLSID
EmptyFlash
EmptyTemp


You can then remove these tools with DelFix

You can keep RegRun Reanimator, it can be useful for finding and eliminating malware, click on "False positive" for the safe items when there are any, it won't detect them anymore.

If you uninstall RegRun Reanimator, just before, you can click on "Uninstall Partizan" (in the program).

And you can click on this .reg file that resets the Bootexecute key to default if it's not:

https://www.cjoint.com/c/DIwp0hjRA6Y

You can click on the .reg file even if you keep RegRun Reanimator.
0
mister1616 Posted messages 312 Status Member 7
 
Thank you for your help.
0
fabul Posted messages 42069 Registration date   Status Moderator Last intervention   6 053
 
Look with Autoruns, it seems you have scheduled tasks pointing to Chrome files that do not exist.

In "Scheduled tasks", these lines should normally be yellow, delete them.

PS: You should not delete everything that is yellow in Autoruns.

Then you can keep RegRun Reanimator, it can be useful for finding and eliminating malware, click on "False positive" for the healthy items when there are any, it will no longer detect them.

If you uninstall RegRun Reanimator, just before, you can click on "Uninstall Partizan" (in the program).

And you can click on this .reg file that restores the Bootexecute key to default if it is not:

https://www.cjoint.com/c/DIwp0hjRA6Y

You can click on the .reg file even if you keep RegRun Reanimator.
0
mister1616 Posted messages 312 Status Member 7
 
In Scheduled tasks, I have one line in pink and one in yellow.
0
fabul Posted messages 42069 Registration date   Status Moderator Last intervention   6 053
 
Rose means that the file is not digitally signed.

If it's a trusted source file, it's fine.

But uncheck things like Adobe, Piriform, most unnecessary ones, etc...
0
mister1616 Posted messages 312 Status Member 7
 
Done.
0
fabul Posted messages 42069 Registration date   Status Moderator Last intervention   6 053
 
Did you skip any steps somewhere, defragmented and all?

The PC should be working better now?

Resolved?
0
mister1616 Posted messages 312 Status Member 7
 
Just defragmented, I didn't do it because I downloaded the software but I didn't continue because I didn't know what to do and then I forgot to mention it.
0
fabul Posted messages 42069 Registration date   Status Moderator Last intervention   6 053
 
Analyze and perform a defragmentation with optimization of drive C: using Auslogics Disk Defrag

Then defrag the registry with Registry Defrag, a restart is required for the registry.
0
mister1616 Posted messages 312 Status Member 7
 
Hello,
apparently everything is done.
0
fabul Posted messages 42069 Registration date   Status Moderator Last intervention   6 053
 
And? Has the PC improved in speed?

Is it resolved?
0
mister1616 Posted messages 312 Status Member 7
 
He has a slight improvement in speed.
0
mister1616 Posted messages 312 Status Member 7
 
Hello,

today slow again like before
0
fabul Posted messages 42069 Registration date   Status Moderator Last intervention   6 053
 
What programs do you have checked under "Logon" and "Scheduled tasks" in Autoruns?

Check what is running with Process Explorer

Then you can run a CHKDSK /F and an SFC /SCANNOW with CMD.
0
  • 1
  • 2