Again infected and cannot get my computer to run properly again

Viruses and worms
1

I’ve done everything I know to do. I speculate that my browser was at one time highjacked and since I’ve been infected. I’ve run Avast, Adwcleaner, cryptoprevent, and MBAM Premium. I don’t want to go any further without some guidance, so if anyone could glance at these logs and let me know if they can help, I’d greatly appreciate it.

My laptop’s symtoms include Chrome running hot, I’ve since uninstalled chrome, when using chrome it was adding the ?trackid to all my searches. CPU is still running high and the physical memory its using is high as well. I can slow everything down, but as soon as I go to use any program it freezes again.

Attached are FRST and Addition Scans.

2

OK first I will remove the remnants that I can see and then take the machines temperature

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <======= ATTENTION (Policy Restriction on ProxySettings) ProxyServer: [HKLM] => http=127.0.0.1:8800;https=127.0.0.1:8800 ProxyServer: [HKLM-x32] => http=127.0.0.1:8800;https=127.0.0.1:8800 AutoConfigURL: [S-1-5-21-4193847945-727969652-2092403397-1000] => http://localhost:9100/proxy.pac Toolbar: HKU\S-1-5-21-4193847945-727969652-2092403397-1000 -> No Name - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File Toolbar: HKU\S-1-5-21-4193847945-727969652-2092403397-1000 -> No Name - {DB87BFA2-A2E3-451E-8E5A-C89982D87CBF} - No File CHR HKLM-x32\...\Chrome\Extension: [dflinnddekagfkncpgojoppgnppfkbkj] - No Path Or update_url value 2015-03-05 15:21 - 2011-05-10 22:18 - 00000000 ____D () C:\Users\owner\AppData\Local\Google 2015-03-05 15:21 - 2011-05-10 22:18 - 00000000 ____D () C:\Program Files (x86)\Google 2015-02-05 10:05 - 2011-05-10 22:18 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-02-05 10:05 - 2011-05-10 22:18 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore Task: {7A26F9D0-6733-45A5-82CB-AB1D8AC32D3C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.) Task: {A4FB419B-0767-441C-8E97-0BE7A2137822} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.) Task: {CFBF92D2-4E87-43D9-BD8E-E041C7A140E7} - System32\Tasks\{87029842-1A87-434A-B86E-716CEB3B2D29} => pcalua.exe -a "C:\Program Files (x86)\IObit\Advanced SystemCare 5\SecurityHole_Backup\KB2467173.exe" -d "C:\Program Files (x86)\IObit\Advanced SystemCare 5" -c /quiet /norestart Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Download Speedfan and install it. Once it’s installed, run the program and post here the information it shows. The information I want you to post is the stuff that is circled in the example picture I have attached.
If you are running on a vista machine, please go to where you installed the program and run the program as administrator.

http://artellos.geekstogo.com/speedfan.png

(this is a screenshot from a vista machine)

3

Will do!! THANKS!!

4

Here is the fixlog.

5

This is a real time scanner, is it not…?

It is only displaying temperature in the right upper pane.

6

You do have a cpu temperature problem. Are all the vents clear of dust on the system

7

yes, but I can blow them out again…

8

Also check that the fan is not clogged. Otherwise you may need to replace the thermal paste on the cpu

9

Okay, will do right now.

10

still seems to be running hot. Should I disassemble this laptop?

11

If you know how to change the thermal paste then do that, otherwise it will need to go to a shop

12

okay…let you know how it goes…

13

Okay, I did some cleaning, it improved the fan speed and it doesn’t show to be overheating, however, I’ll be taking it in as well.

In the meantime, is there anything else that I need to clean off of here to help it keep running good?

I just want to make sure we got all the malware and adware etc.

Thanks so much for your help!!

14

No it seems quite clean, apart from the temperature are you experiencing any other problems