somnat Posted June 8, 2015 ID:967888 Share Posted June 8, 2015 Over the last week or so I have noticed a general slow down of my computer when both starting and opening programmes. More recently my Trend Micro Maximum keeps finding virus / malware and supposedly removes them after a restart. Malwarebytes has found and removed some also. A rescan with Malwarebytes shows no threats. CPU usage now, even at idle with nothing running, is above 55% I have selected "do not show hidden folders" in Folder options, however, on start up the "desktop ini" icon is present. ??????????? Any ideas from the attached logs Many thanks FRST.txtAddition.txt Link to post Share on other sites More sharing options...
somnat Posted June 8, 2015 Author ID:967898 Share Posted June 8, 2015 Forgot this in the above post ..... This is the threat that Trend seems to find - requests a restart - and then finds again. Threat: TROJ_COINMINE.SBF Source: Threat Affected Files: C:\Windows\Temp\svchost.exe Response: Detected Detected By: Real Time Scan This one always seems to accompany the above. Threat: TROJ_GEN.R08NC0RE615 Source: Malware Affected Files: C:\Windows\TEMP\lsass.exe Response: Removed Detected By: Real Time Scan Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted June 9, 2015 Root Admin ID:968099 Share Posted June 9, 2015 205.199.44.156 registeridm.com205.199.44.16 registeridm.com127.0.0.1 www.internetdownloadmanager.com127.0.0.1 tone.com127.0.0.1 www.tonec.com127.0.0.1 registeridm.com127.0.0.1 www.registeridm.com127.0.0.1 secure.registeridm.com127.0.0.1 internetdownloadmanager.com127.0.0.1 www.internetdownloadmanager.com127.0.0.1 secure.internetdownloadmanager.com127.0.0.1 mirror.internetdownloadmanager.com127.0.0.1 mirror2.internetdownloadmanager.com127.0.0.1 mirror3.internetdownloadmanager.com127.0.0.1 www.nero.com127.0.0.1 www.nero.com/rus/index.html127.0.0.1 www.nero.com/rus/support.html127.0.0.1 www.nero.com/rus/support-customer-service-product-registration.html127.0.0.1 www.nero.com/rus/store-upgrade-center.html127.0.0.1 www.nero.com/rus/store-volume-licensing.html127.0.0.1 www.nero.com/eng/support.html?NeroSID=392cba06859c3dcd87b47525e97a3b80127.0.0.1 www.nero.com/eng/store-upgrade-center.html?NeroSID=392cba06859c3dcd87b47525e97a3b80127.0.0.1 www.nero.com/eng/support-customer-service-product-registration.html?NeroSID=392cba06859c3dcd87b47525e97a3b80127.0.0.1 www.nero.com/eng/index.html127.0.0.1 www.nero.com/enu/support-nero8.html127.0.0.1 my.nero.com127.0.0.1 secure.nero.com/us/secure.asp127.0.0.1 activation@nero.com127.0.0.1 registernero.com Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted June 9, 2015 Root Admin ID:968100 Share Posted June 9, 2015 This topic will now be closed due to evidence of cracked or pirated software on this system.Piracy Policy Link to post Share on other sites More sharing options...
Recommended Posts