Jump to content

Need Help With Virus That Slows Down Computer Significantly

PrestonVo

By PrestonVo
in Resolved Malware Removal Logs

 Share

Recommended Posts

PrestonVo

PrestonVo

Posted
Posted

I'm not completely sure if it's' a virus, but this has never happened until now. After about using my computer for about 20 - 40 minutes, the performance of my computer becomes extremely slow, and frames freeze for minutes. When this happens, the performance never goes back to normal -- I'm forced to shut down my computer by using the power button. I'm sure that this is a virus, because my computer is a very good one, and I don't leave it on over night or anything of the sort.

Please help me, this is getting extremely frustrating to deal with, especially when I'm playing a public match on video games and I have to shut down my computer and waste 5 - 7 minutes rebooting and opening up the game again.

Link to post
Share on other sites
TwinHeadedEagle

TwinHeadedEagle

Posted
Posted

Hello and :welcome:

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button. button.

    x5o4gh.png

  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.

  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Link to post
Share on other sites
TwinHeadedEagle

TwinHeadedEagle

Posted
Posted

Check Disk

  • Press the WindowsKey.png on your keyboard. Type cmd and right click >> Run as Administrator.
  • Copy/Enter the command below and press Enter: 
  • chkdsk C: /r
  • You should get a message to schedule Check Disk at next system restart. Please type Y and press Enter.
  • All you should do now is to restart your PC and let the Check Disk process finish uninterrupted.


Check Disk report:

  • Press the WindowsKey.png + R on your keyboard at the same time. Type eventvwr and click OK.
  • In the left panel, expand Windows Logs and then click on Application.
  • Now, on the right side, click on Filter Current Log.
  • Under Event Sources, check only Wininit and click OK.
  • Now you'll be presented with one or multiple Wininit logs.
  • Click on an entry corresponding to the date and time of the disk check.
  • On the top main menu, click Action > Copy > Copy Details as Text.
  • Paste the contents into your next reply.

 

 

2eyjdoj.pngSystem File Checker

  • Press the WindowsKey.png on your keyboard. Type cmd and right click >> Run as Administrator.
  • Copy/Enter the command below and press Enter: 
  • sfc /scannow
  • Windows will begin with system scan.
  • When done, please reboot your system.


System File Checker report:

  • Press WindowsKey.png + R on your keyboard at the same time. Type cmd and click OK.
  • Copy/Enter the command below and press Enter: 
  • findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt"
  • Attach sfcdetails.txt from your Desktop in your next reply.

Link to post
Share on other sites
PrestonVo

PrestonVo

Posted
  • Author
Posted

I have run the disk check and the system file checker. I have also run Microsoft Security Essentials and it tracked 4 Trojan viruses.

As I said, I'm unable to run the Event Log service due to the error I mentioned earlier, so I'm not able to run the Event Viewer.

Also, my access to the CBS.log is denied.

However, after doing all of this, the problem has not been happening anymore. I believe it has been fixed, but I will wait 24 hours to be completely sure. Thank you for your assistance!

Link to post
Share on other sites
PrestonVo

PrestonVo

Posted
  • Author
Posted

I finally got the event viewer working, so here are the details (I have also attached the CBS.log file):

Log Name:      Application
Source:        Microsoft-Windows-Wininit
Date:          12/6/2016 7:01:40 PM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      MV-HP
Description:


Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.

A disk check has been scheduled.
Windows will now check the disk.                         

CHKDSK is verifying files (stage 1 of 5)...
  1198592 file records processed.                                        
File verification completed.
  4136 large file records processed.                                  
  0 bad file records processed.                                    
  2 EA records processed.                                          
  82 reparse records processed.                                      
CHKDSK is verifying indexes (stage 2 of 5)...
  1543128 index entries processed.                                        
Index verification completed.
  0 unindexed files scanned.                                        
  0 unindexed files recovered.                                      
CHKDSK is verifying security descriptors (stage 3 of 5)...
  1198592 file SDs/SIDs processed.                                        
Security descriptor verification completed.
  172269 data files processed.                                          
CHKDSK is verifying Usn Journal...
  34296608 USN bytes processed.                                            
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
  1198576 files processed.                                                
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
  157947456 free clusters processed.                                        
Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.

 961774591 KB total disk space.
 328145912 KB in 993399 files.
    507320 KB in 172270 indexes.
         0 KB in bad sectors.
   1331531 KB in use by the system.
     65536 KB occupied by the log file.
 631789828 KB available on disk.

      4096 bytes in each allocation unit.
 240443647 total allocation units on disk.
 157947457 allocation units available on disk.

Internal Info:
00 4a 12 00 6e c9 11 00 5c 8b 1f 00 00 00 00 00  .J..n...\.......
17 1e 00 00 52 00 00 00 00 00 00 00 00 00 00 00  ....R...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Windows has finished checking your disk.
Please wait while your computer restarts.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
    <EventID Qualifiers="16384">1001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2016-12-07T03:01:40.000000000Z" />
    <EventRecordID>102270</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>MV-HP</Computer>
    <Security />
  </System>
  <EventData>
    <Data>

Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.

A disk check has been scheduled.
Windows will now check the disk.                         

CHKDSK is verifying files (stage 1 of 5)...
  1198592 file records processed.                                        
File verification completed.
  4136 large file records processed.                                  
  0 bad file records processed.                                    
  2 EA records processed.                                          
  82 reparse records processed.                                      
CHKDSK is verifying indexes (stage 2 of 5)...
  1543128 index entries processed.                                        
Index verification completed.
  0 unindexed files scanned.                                        
  0 unindexed files recovered.                                      
CHKDSK is verifying security descriptors (stage 3 of 5)...
  1198592 file SDs/SIDs processed.                                        
Security descriptor verification completed.
  172269 data files processed.                                          
CHKDSK is verifying Usn Journal...
  34296608 USN bytes processed.                                            
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
  1198576 files processed.                                                
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
  157947456 free clusters processed.                                        
Free space verification is complete.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.

 961774591 KB total disk space.
 328145912 KB in 993399 files.
    507320 KB in 172270 indexes.
         0 KB in bad sectors.
   1331531 KB in use by the system.
     65536 KB occupied by the log file.
 631789828 KB available on disk.

      4096 bytes in each allocation unit.
 240443647 total allocation units on disk.
 157947457 allocation units available on disk.

Internal Info:
00 4a 12 00 6e c9 11 00 5c 8b 1f 00 00 00 00 00  .J..n...\.......
17 1e 00 00 52 00 00 00 00 00 00 00 00 00 00 00  ....R...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

Windows has finished checking your disk.
Please wait while your computer restarts.
</Data>
  </EventData>
</Event>

CBS.log

Link to post
Share on other sites
TwinHeadedEagle

TwinHeadedEagle

Posted
Posted

FRST.gif Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition.txt option is checked. option is checked.

    2873ryc.png

  • Press Scan button and wait.

  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.


Please attach report into your next reply.

Link to post
Share on other sites
TwinHeadedEagle

TwinHeadedEagle

Posted
Posted

Let's make some maintenance:

 

FRST.gif Fix with Farbar Recovery Scan Tool

icon_exclaim.gif This fix was created for this user for use on that particular machine. icon_exclaim.gif


icon_exclaim.gif Running it on another one may cause damage and render the system unstable. icon_exclaim.gif

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

fixlist.txt

Link to post
Share on other sites
  • 2 weeks later...
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.