Full Scan Stuck 0% [10 hours], Infected File, Virus - Advice Appreciated 

system · 2015-07-21T11:38:54.000Z

Hi there,

I hope I’ve posted to the right place
I really hope someone can help me out- I’ve got a couple of issues, which may or may not be interlinked.

Some Details:
-AvastFree [No others installed]
-Windows 7 Sp1 64bit
-8GB Ram
-i7-3770 CPU
-AMD Radeon 7870
-Diskdrive: 1x http://www.amazon.co.uk/Seagate-ST31000524AS-Drive-Serial-ATA-7200RPM/dp/B004IZN3YI [Using 870GB/931GB]

Issues:

Avast
Doing full system scan, left on overnight now at 10 hours, still shows 0%
-Processed file does change, currently at a rate of about a file every 2 seconds (though obviously varies file to file)
-Reports 1 infected file.

Everything Else
Series of issues over last few days:
-elevated report numbers, since 16 July 2015: [ http://i.imgur.com/Dl6WFaa.png ] [ http://i.imgur.com/1difRwa.png ]
> Example Trojan Alert from a few minutes ago: [ http://i.imgur.com/yJefaLg.png ]
-display driver failures [Once every couple of hours, always recovers]
-doubling of start up time
-Very sluggish performance, ie Loading into MOBA map takes 7-11 minutes compared to previous 1 minute.
-wired network, seems unable to upload every 30-45 seconds for about 1-2 seconds [heavy traffic?]
-Performance monitor reports near 100%Highest Activity Time [ http://i.imgur.com/zKllaT8.png ]
> I have run a ChkDsk and used SeaTools (seagate disk checker) services in the past 3 days- all reported a healthy disk drive

Questions:

Really any advice would be appreciated, is the scan actually running? Is it just misreporting progress? Should I leave the scan running? Interrupt and then Restart/repair install avast?
Are there other tools I can/should use right away?
What is the likely culprit?
Do you agree with the assessment that the current performance bottleneck appears to be the diskdrive?
Do you agree that the issues appear to be linked to a virus?

Basically: “What do?”

Any and all help greatly appreciated!

TwinHeadedEagle · 2015-07-21T12:07:07.000Z

Hello,

Let’s see what is going on:

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Scan with Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

system · 2015-07-21T15:47:08.000Z

Hi there, took a bit to run, I’ve attached both files here!

Thanks for taking a look.

system · 2015-07-22T12:19:11.000Z

I’ve abandoned the scan after being stuck at 0% for over 24 hours.

Cleared the one infected file, but I’m pretty confident it didnt fix the issue and that there is more.

TwinHeadedEagle · 2015-07-22T19:42:38.000Z

Full scan is pointless, so please do not perform it. We will use specialized tools to clean your PC from infection.

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/warning.gif
Multiple Resident Protection warning!

Always have one (and no more than one!) AntiVirus program! In this case having more of them will not provide you with better protection - instead they may cause slowness, lock-ups and even mark another ones as harmful, leading to leave your system unstable and even damaged. Please choose only one from the listed below to stay with and uninstall the others:

[]Microsoft Security Essentials
[]avast! Antivirus

Uninstallation procedure:

[*]Press the
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/WindowsKey.png

R on your keyboard at the same time. Type appwiz.cpl and click OK.
[*]Search for each uninstalled entry, right-click it and select Uninstall.

This should be done until any other steps will be taken.

https://sites.google.com/site/cannedfixes/malwarebytes-anti-malware/51a46ae42d560-malwarebytes_anti_malware.png
Scan with Malwarebytes’ Anti-Malware

Please download Malwarebytes Anti-Malware and save it to your desktop.

[*]Install the progam and select update.
[*]Once updated, click the Settings tab, in the left panel choose Detection & Protection and tick Scan for rootkits.
[*]In the same tab, under PUP and PUM detections make sure it is set to Treat detections as malware.
[*]Click the Scan tab, choose Threat Scan is checked and click Scan Now.
[*]If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
[*]Upon completion of the scan (or after the reboot), click the History tab.
[*]Click Application Logs and double-click the Scan Log.
[*]At the bottom click Export and choose Text file.

Save the file to your desktop and include its content in your next reply.

system · 2015-07-23T09:07:19.000Z

Ive uninstalled MSE and got MbAM running.

It’s logs are attached.

It certainly got some stuff,

Thanks again.

TwinHeadedEagle · 2015-07-23T19:41:54.000Z

Very good. Let’s use FRST again for final check:

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
[*]Make sure that Addition option is checked.
[*]Press Scan button and wait.
[*]The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.

system · 2015-07-25T22:54:41.000Z

Hi again, I couldn’t get to my pc for a couple of days. I’ve attached the logs for the new scan, everything seems to be running smoothly- but please let me know if you see anything of concern!

Thanks for all your help, I’ve sent a little your way- I’m only a student so its modest, but I really appreciate your guidance

TwinHeadedEagle · 2015-07-26T06:34:42.000Z

Yes, logs doesn’t show signs of infection now.

Is there anything else I can help with?

Btw, thank you for your donation, it is much appreciated.

system · 2015-07-26T11:23:32.000Z

Great

I think everything seems back in working order, but thanks for the offer.

One day I maybe back, but I hope not!

Announcements