Marcus154 Posted May 29, 2023 ID:1569619 Share Posted May 29, 2023 My laptop was infected with STOP DJVU malware back in 2021 and I followed all the steps in howtogeek website for malware removal and it was working fine ever since though I lost data due to encryption by malware. A while later One of my friends used KMSpico to activate windows on my laptop. Ever since then, my system became slow and the boot up time has also increased (takes about 30 - 45 seconds to startup). This is slow considering my laptop has NVMe Intel SSD and I have already disabled fast startup. I have uninstalled KMSpico a little while later using IObit uninstaller. The main issue I have is that whenever I make a simple google search, the web pages take a while (around 5 to 10 seconds) to load and display the results. This is prevalent in chrome, although I did observe the delay in other browsers such as firefox and microsoft edge though not as much. Another thing is that command history is not saving in Run program (which can be started by pressing Win + R buttons.) It does save the history but it's only limited to a single session of windows. When I restart the system, all the history is deleted and I get a clean box for me to manually type in the commands with no suggestions. I am guessing some application has changed the registry key responsible for saving run command history. Link to post Share on other sites More sharing options...
1PW Posted May 29, 2023 ID:1569641 Share Posted May 29, 2023 Hello @Marcus154 and : While you are waiting for the next qualified/approved malware removal expert helper to weigh in on your topic, and even though you may have run the following Malwarebytes utility, or its subsets, please carefully follow these instructions: Download the Malwarebytes Support Tool. In your Downloads folder, open the mb-support-x.x.x.xxx.exe file. In the User Account Control (UAC) pop-up window, click Yes to continue the installation. Run the MBST Support Tool. In the left navigation pane of the Malwarebytes Support Tool, click Advanced. In the Advanced Options, click only Gather Logs. A status diagram displays the tool is Getting logs from your computer. A zip file named mbst-grab-results.zip will be saved to the Public desktop, please attach that file in your next reply to this topic. Please do NOT copy and paste. For the short time between when you post the diagnostic logs, and when your helper weighs in, please take no further self-directed remedial actions that will invalidate the diagnostic logs you will have posted. Thank you. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 30, 2023 Root Admin ID:1569812 Share Posted May 30, 2023 Hello @Marcus154 Please post the requested log and we'll be happy to assist Thank you Link to post Share on other sites More sharing options...
Marcus154 Posted May 31, 2023 Author ID:1569993 Share Posted May 31, 2023 Hi @AdvancedSetup, Thank you for replying. Please find the attached zip file that was requested. mbst-grab-results.zip Link to post Share on other sites More sharing options...
Root Admin Solution AdvancedSetup Posted May 31, 2023 Root Admin Solution ID:1570046 Share Posted May 31, 2023 Please uninstall Bonjour Then run the following fix @Marcus154 NOTE: Please read all of the information below before running this fix. NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone. Once the fix has been completed, please attach the file FIXLOG.TXT to your next reply Farbar program: FRSTEnglish.exe Save the attached file: FIXLIST.TXT to this folder C:\Users\Dinesh\Downloads\ NOTE. It's important that both files, FRSTEnglish.exe, and fixlist.txt are in the same location or the fix will not work. Please make sure you disable any real-time antivirus or security software before running this script. Once completed, make sure you re-enable it. Run the Farbar program with Admin rights and press the Fix button just once and wait. The fix may possibly take up to 60 minutes to complete If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart. The tool will make a log named Fixlog.txt in the same folder you ran the Farbar program from. Please attach that log on your next reply. NOTE: This fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files. It will also run a disk check on the restart to ensure disk integrity. NOTE: As part of this fix all temporary files will be removed. If you have any open web pages that have not been bookmarked please make sure you bookmark them now as all open applications may be automatically closed. Also, make sure you know the passwords for all websites as cookies will also be removed in most, but not all cases. NOTE: As part of this fix, it will also reset the network to default settings including the firewall. If you have custom firewall rules you need to save please export or save them first before running this fix. The following directories are emptied: Windows Temp Users Temp folders Edge, IE, FF, Chrome, and Opera caches, HTML5 storages, Cookies and History Recently opened files cache Discord cache Java cache Steam HTML cache Explorer thumbnail and icon cache BITS transfer queue (qmgr*.dat files) Recycle Bin Important: items are permanently deleted. They are not moved to quarantine. If you have any questions or concerns please ask before running this fix. The system will be rebooted after the fix has run. fixlist.txt Thanks 1 Link to post Share on other sites More sharing options...
Marcus154 Posted June 1, 2023 Author ID:1570169 Share Posted June 1, 2023 Hi @AdvancedSetup, I've run the fix accordingly and here's the FIXLOG.TXT. I've looked at the log and I see there are messages like "Failed" and "Access is denied". Should I be concerned ? Thank you. Fixlog.txt Link to post Share on other sites More sharing options...
Marcus154 Posted June 1, 2023 Author ID:1570250 Share Posted June 1, 2023 Thanks for the fix. Chrome is definitely loading pages faster now. Although, Run program history is still not being saved and I've confirmed it after restarting the system couple of times. Another thing is I'm unable to type into the windows search bar on the bottom left side. After some digging around, I've found that running ctfmon.exe solved the problem. But it seems that I have to manually run it every time I start my laptop. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted June 1, 2023 Root Admin ID:1570282 Share Posted June 1, 2023 You can add C:\Windows\System32\ctfmon.exe to run on startup if wanted. It was removed during the clean up. Please open a command prompt. Then copy and paste the following text into the window and press the Enter key. It should add ctfmon to run every time you log in. reg add "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "ctfmon" /t REG_SZ /d "C:\Windows\System32\ctfmon.exe" Then, please run the following @Marcus154 SecurityCheck by glax24 I would like you to run a tool named SecurityCheck to inquire about the current security update status of some applications. Download SecurityCheck by glax24: https://tools.safezone.cc/glax24/SecurityCheck/SecurityCheck.exe If Microsoft SmartScreen blocks the download, click through to save the file This tool is safe. Smartscreen is overly sensitive. If SmartScreen blocks the file from running click on More info and Run anyway Right-click with your mouse on the Securitycheck.exe and select "Run as administrator" and reply YES to allow to run & go forward Wait for the scan to finish. It will open a text file named SecurityCheck.txt Close the file. Attach it with your next reply. You can find this file in a folder called SecurityCheck, C:\SecurityCheck\SecurityCheck.txt Thank you Link to post Share on other sites More sharing options...
Marcus154 Posted June 3, 2023 Author ID:1570557 Share Posted June 3, 2023 I've run SecurityCheck.exe and I'm attaching the log file. Please note that I have manually disabled the Windows Defender's Real-Time Protection before running this tool. SecurityCheck.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted June 3, 2023 Root Admin ID:1570591 Share Posted June 3, 2023 Please uninstall, update, or otherwise address the following as appropriate for your system. 7-Zip 21.00 alpha (x64) v.21.00 alpha Warning! Download Update | Uninstall old version and install new one. Adobe Acrobat DC v.21.005.20060 Warning! Download Update | ^Please run Acrobat DC and go Help - Check for updates...^ Git v.2.37.3 Warning! Download Update GitHub Desktop v.3.0.8 Warning! Download Update Microsoft SQL Server 2008 Setup Support Files Warning! This software is no longer supported. Microsoft SQL Server 2012 Native Client Warning! This software is no longer supported. Microsoft Teams v.1.6.00.1381 Warning! Download Update Microsoft Visual Studio Code (User) v.1.76.1 Warning! Download Update Mozilla Firefox (x64 en-US) v.110.0 Warning! Download Update NVIDIA GeForce Experience 3.26.0.160 v.3.26.0.160 Warning! Download Update Opera Stable 94.0.4606.76 v.94.0.4606.76 Warning! Download Update Python 3.9.4 (64-bit) v.3.9.4150.0 Warning! Download Update Spotify v.1.1.90.855.ga73cc2ce Warning! Download Update Telegram Desktop v.3.5.1 Warning! Download Update WinRAR 6.01 (64-bit) v.6.01.0 Warning! Download Update µTorrent v.3.5.5.45988 Warning! Ad-supported P2P-client. Please consider uninstalling the following ---------------------------- [ UnwantedApps ] ----------------------------- IObit Uninstaller 11 v.11.5.0.3 Warning! Application is distributed through the partnership programs and bundle assemblies. Uninstallation recommended. Possible you became a victim of fraud or social engineering. JDownloader 2 v.2.0 Warning! Suspected Adware! If this program is not familiar to you it is recommended to uninstall it IObit Uninstaller Service (IObitUnSvr) - The service has stopped ----------------------------- [ End of Log ] ------------------------------ When done, restart the computer and check for Windows Updates and install any found. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted June 22, 2023 Root Admin ID:1573797 Share Posted June 22, 2023 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Tips to help protect from infection Thanks Link to post Share on other sites More sharing options...
Recommended Posts