Chrome V. Slow - constantly working

tl
New Helpee

Posts: 2

Chrome V. Slow - constantly working Jul 29, 2017 2:41:02 GMT -8

Quote

Post by tl on Jul 29, 2017 2:41:02 GMT -8

Laptop always seems to be working hard --> High CPU/Memory usage even when idle (6 months old, relatively empty storage wise). Chrome sometimes takes 10 minutes to open. Regular messages in bottom left corner of webpages detailing adverts although not many appear.

wikisend.com/download/355260/Addition.txt

wikisend.com/download/604988/FRST.txt

Any help/advice would be appreciated.

dbrisen Malware Removalists Posts: 3,688	Chrome V. Slow - constantly working Jul 29, 2017 8:48:45 GMT -8 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by dbrisen on Jul 29, 2017 8:48:45 GMT -8 I am not sure what happened but the FRST.txt file is not available on wikisend.com (says the file is no longer there). Can you try and post it again?
	I will not provide malware removal by PM; please post in your thread on the Malware Removal board. My help is always free but if you would like to help encourage me or show your thanks -----> *DONATE*

tl New Helpee Posts: 2	Chrome V. Slow - constantly working Jul 29, 2017 15:21:50 GMT -8 Quote Select Post Deselect Post Link to Post Member Give Gift Back to Top Post by tl on Jul 29, 2017 15:21:50 GMT -8 Thanks - hope this might work wikisend.com/download/524598/FRST.txt

dbrisen
Malware Removalists

Posts: 3,688

Chrome V. Slow - constantly working Jul 29, 2017 20:56:25 GMT -8

Quote

Post by dbrisen on Jul 29, 2017 20:56:25 GMT -8

FIRST >>>>

1- Please double-click on FRST/FRST64
2- Press Ctrl+y (Ctrl and y keys at the same time)
3- A fixlist.txt file opens up in notepad.exe. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy. Paste this into the open notepad.

Start::
CreateRestorePoint:
CloseProcesses:
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> {1A012F37-3B95-4D0F-BF43-6515ED90B8F8} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {1A012F37-3B95-4D0F-BF43-6515ED90B8F8} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-98883132-1613749901-3791945488-1001 -> {1A012F37-3B95-4D0F-BF43-6515ED90B8F8} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
CHR Extension: (Chrome Web Store Payments) - C:\Users\lawso\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Chrome Media Router) - C:\Users\lawso\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-19]
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {002AB37F-BAF2-4F36-A93B-BCB25F3D9BBA} - \HPEA3JOBS -> No File <==== ATTENTION
Task: {03458B3F-E71F-453C-8D7C-9222887FF5FB} - \Microsoft\Windows\ErrorDetails\ErrorDetailsUpdate -> No File <==== ATTENTION
Task: {1087B12A-4BB4-4B94-83BF-5A7C4EAA91A7} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {137A0F19-3E20-468B-B7A4-F071AA8DE98E} - \DropboxUpdateTaskMachineCore -> No File <==== ATTENTION
Task: {17128304-F510-4062-A803-FC2FD25A18E4} - \GoogleUpdateTaskMachineCore -> No File <==== ATTENTION
Task: {1F0BAF49-5BBB-405B-A50E-9AA66B7351E2} - \GoogleUpdateTaskMachineUA -> No File <==== ATTENTION
Task: {2EC11ED7-6CC6-4ED3-B49C-2F97386BA9AC} - \Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start -> No File <==== ATTENTION
Task: {4520E8A9-AF06-4122-859B-E4B655B29B36} - \Microsoft\Windows\AppID\SmartScreenSpecific -> No File <==== ATTENTION
Task: {75E8755A-4827-4C8C-B530-EE42C2252D62} - \McAfee\McAfee Idle Detection Task -> No File <==== ATTENTION
Task: {7A5123AA-4598-41BE-8C66-39A1D05F7B98} - \Intel PTT EK Recertification -> No File <==== ATTENTION
Task: {7C655CC6-19CB-4430-BBD8-D29999902511} - \Microsoft\Windows\UpdateOrchestrator\Policy Install -> No File <==== ATTENTION
Task: {967B8C70-4603-4525-94AE-7CB263093932} - \Microsoft\XblGameSave\XblGameSaveTaskLogon -> No File <==== ATTENTION
Task: {967CAA16-6069-4738-9DB7-7EB5AF7B1110} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot -> No File <==== ATTENTION
Task: {A0352518-D527-464A-AB8B-160E931AFCC8} - \Microsoft\Windows\UpdateOrchestrator\Maintenance Install -> No File <==== ATTENTION
Task: {A249A275-413F-460D-8BFA-64BCF42AFA42} - \DropboxUpdateTaskMachineUA -> No File <==== ATTENTION
Task: {A741BC1C-B4B6-436D-AC57-3F90C345BD80} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display -> No File <==== ATTENTION
Task: {A9E56243-61D6-469E-A8E6-13B7CBA58651} - \Microsoft\Windows\ErrorDetails\EnableErrorDetailsUpdate -> No File <==== ATTENTION
Task: {BDA7C9FE-1D93-4926-B5E8-9800FEEBC810} - \Hewlett-Packard\HP Support Assistant\WarrantyChecker -> No File <==== ATTENTION
Task: {C6B2579B-4962-4D12-883D-BBD420573A6C} - \Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePeriodic1 -> No File <==== ATTENTION
Task: {C9ACBFD2-20AA-4A3F-BE1A-A3D5279BB1BB} - \Microsoft\Windows\Plug and Play\Plug and Play Cleanup -> No File <==== ATTENTION
Task: {CC44AEE3-2BE4-4797-8D92-2AB6E92FA231} - \HPJumpStartProvider -> No File <==== ATTENTION
Task: {D85ADA4C-0B7C-40B1-9D2B-6AD534C89035} - \Hewlett-Packard\HP Support Assistant\Product Configurator -> No File <==== ATTENTION
Task: {E1D67609-F541-444E-B29F-6760936CD3F0} - \McAfeeLogon -> No File <==== ATTENTION
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
CMD: bitsadmin /reset /allusers
RemoveProxy:
EmptyTemp:
Reboot:
End::

4- Press Ctrl+s to save. Close the fixlist.txt file.
5- Press Fix button. Notice that this script will close all processes so make sure you have saved your work before running this fix.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

SECOND >>>>

You have two full Antivirus software installed. Please choose one and uninstall the other. Either McAfee or Norton.

How is your system running now?

I will not provide malware removal by PM; please post in your thread on the Malware Removal board.
My help is always free but if you would like to help encourage me or show your thanks -----> DONATE

Chrome V. Slow - constantly working

Post by tl on Jul 29, 2017 2:41:02 GMT -8

Post by dbrisen on Jul 29, 2017 8:48:45 GMT -8

Post by tl on Jul 29, 2017 15:21:50 GMT -8

Post by dbrisen on Jul 29, 2017 20:56:25 GMT -8