pc running slow

Viruses and worms
1

Hello , i was searching for some viruses on my computer since it went from normal to extremly slow anyway i found out some viruses with a normal Full Scan that it took about 13 hours for 2.6TB of Scan files after the full scan Avast suggested me to proceed with a boot time scan . Boot scan has been finished but my computer still opens realy slow , for example also i am opening km player to play something with 720P quality and the video with the sound are in different times . I have Also scan my computer with BitDiffender then i removed it , i have made a full scan with malwarebytes also and i have deleted anything it founded then i have put Avast that i made the full scan and the boot scan . now my computer plays ok the 720P quality movie . So i am not sure if my infection have been cleared or not , should i do something else ?
My Computer Spec :
Windows xp 64bit
8gb ram
Intel Core 2 quad 2.4ghz Q6600

Best regards

2

Please attach your logs. (AdwCleaner, MBAM, OTL and aswMBR…!!)
Instructions: http://forum.avast.com/index.php?topic=53253.0

3

avast found btw some virus on the boot scan some of them are just keygen but there are 3 of them that i dont recognise there names and i cannot found out something about them on google

name : A0125695.exe
name :A0125696.exe
name : A0 125697.exe

those 3 are on E:system volume information\restore(somenumber)

should i delete those 3?

4

Rogue Killer

RogueKiller V8.6.1 [Jun 29 2013] by Tigzy
mail : tigzyRKgmailcom
Feedback : hxxp://www.adlice.com/forum/
Website : hxxp://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows XP 64 / Windows Home Server / Windows Server 2003 (5.2.3790 Service Pack 2) 32 bits version
Started in : Normal mode
User : Administrator [Admin rights]
Mode : Scan – Date : 07/01/2013 15:15:53
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 1 ¤¤¤
[HJ DESK] HKLM[…]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) → FOUND

¤¤¤ Scheduled tasks : 1 ¤¤¤
[V1][SUSP PATH] EPUpdater.job : C:\DOCUME~1\ADMINI~1\APPLIC~1\BABSOL~1\Shared\BabMaint.exe [-] → FOUND

¤¤¤ Startup Entries : 1 ¤¤¤
[George][SUSP PATH] Styler.lnk : C:\Documents and Settings\George\Start Menu\Programs\Startup\Styler.lnk @C:\Documents and Settings\George\Application Data\Microsoft\Installer{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}_585b207a.exe [-][-] → FOUND

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED 0xc0000034] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
→ %SystemRoot%\System32\drivers\etc\hosts

127.0.0.1 localhost

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: Hitachi HDP725025GLA380 +++++
— User —
[MBR] 65763ef781abed3dba8bae89559dd936
[BSP] d993ad968ff2ce7f3e32eb392898a511 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 238464 Mo
User = LL1 … OK!
User = LL2 … OK!

+++++ PhysicalDrive1: Hitachi HDP725025GLA380 +++++
— User —
[MBR] dab9cee02bcc306916387c3e12142cdd
[BSP] bd820a43316cd689d7654c3de1916acc : Legit.C MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1907728 Mo
User = LL1 … OK!
User = LL2 … OK!

Finished : << RKreport[0]_S_07012013_151553.txt >>

5

here is the otl extras

6

and the OTL result

7

i am downloading the adware but when i click to install nothing is coming up :S I have made a fast scan on Malwarebytes anti malware before i make this topic and it didnt found out anything if you want me to make a new 1 tell me

8

Hi a lot of your services have been deleted … Did you do that ?

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:Commands
[CREATERESTOREPOINT]

:OTL
IE - HKU\S-1-5-21-1538441723-2280679573-474935634-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_ss_din2g&mntrId=F8A0002522F7716F&affID=123511&tt=250613_gr3&tsp=4927
IE - HKU\S-1-5-21-1538441723-2280679573-474935634-500\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=F8A0002522F7716F&affID=44444&tsp=4927
[2013/06/28 00:52:20 | 000,392,806 | ---- | M] () (No name found) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\kjy7kdtt.default-1364233317187\extensions\jid1-F9UJ2thwoAm5gQ@jetpack.xpi
[2013/06/28 23:50:05 | 000,006,545 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\kjy7kdtt.default-1364233317187\searchplugins\babylon.xml
[2013/06/28 23:50:31 | 000,001,294 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\kjy7kdtt.default-1364233317187\searchplugins\delta.xml
O3 - HKLM\..\Toolbar: (no name) - {381FFDE8-2394-4F90-B10D-FC6124A40F8C} - No CLSID value found.
O3:64bit: - HKU\S-1-5-21-1538441723-2280679573-474935634-500\..\Toolbar\ShellBrowser: (&Address) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - %SystemRoot%\system32\browseui.dll File not found
O3:64bit: - HKU\S-1-5-21-1538441723-2280679573-474935634-500\..\Toolbar\WebBrowser: (&Address) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - %SystemRoot%\system32\browseui.dll File not found
O3:64bit: - HKU\S-1-5-21-1538441723-2280679573-474935634-500\..\Toolbar\WebBrowser: (&Links) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - %SystemRoot%\system32\SHELL32.dll File not found
[2013/06/28 23:48:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\BabSolution
[2013/06/28 23:48:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Babylon
[2012/09/15 20:05:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Cool YouTube to MP3 Converter
[2013/06/29 15:36:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\687d0000-a703-4fd7-fd85-ab8b0c084e98
[2013/06/28 23:48:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Babylon
[2013/06/29 14:48:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\e6450000-6ad8-4d1c-70a2-1921a9c3d3bc

:Commands
[resethosts]
[emptytemp]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Please download Junkware Removal Tool to your desktop.

[]Right-mouse click JRT.exe and select “Run as Administrator” the tool will open and start scanning your system
[]please be patient as this can take a while to complete depending on your system’s specifications
[]On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
[]post the contents of JRT.txt into your next message.

9

yeap i delted them or proly some of the m got deleted from Avast boot scan

10

here is the result

11

Without those services the system behaviour could be unpredictable, Avast will not delete system services

I can restore them for you if you wish

12

sure

btw my computer is playing correct now the 720P movies and its not lagging so much . The only issue that there is yet its the slow start . Its taking quite long for the Black Screen after the Screen that saying widnwoss xp are loading and then the blue screen that its saying loading . Could this be cause of that ?

13

Very probably … As this is a 64 bit xp I will need to search out the relevant tools for this one. Do you have the windows CD that we could use for a file validation check

14

i have the windows xp 64bit installation disk only . not the repair 1 but i can download it i think

15

Nope the installation disc is good

Download Windows Repair (all in one) from this site

Install the programme then run

https://dl.dropbox.com/u/73555776/waio%20start.JPG

Go to step 3 and allow it to run SFC. You will need the windows disc for this part

https://dl.dropbox.com/u/73555776/waio%20step3.JPG

On the start repairs tab click start

https://dl.dropboxusercontent.com/u/73555776/waio%20startrep.JPG

Select the following items and tick restart system when finished

https://dl.dropbox.com/u/73555776/waio%20rep%20list.JPG

16

im putting the win xp 64bit sp2 disc that i used for the installation of my OS and its saying that its the wrong disc hmm

17

i have donwload 2 windows xp 64bit but i cannot write them on a disc cause they are zip file :S I unzip and i clicked the setup then should i go to Perform additional tasks and then Transfer files and settings ?

18

They need to be ISO file to be written to disc… All windows repair will do is run an SFC scan which will use the windows disc to verify the validity of system files

19

i cannot found out any torrent file that is having hte windows as ISO all of them when the download is complete there are rar file :S

20

i have written the ddisc but its still cannot found the disc :S