Malware/Spyware destroyed my computer

Zagis · 03 Jul 2013

About 2 weeks ago my computer randomly started running extremely slow and failing to open programs. I downloaded MSE and scanned it to get rid of the virus. MSE found things and I promptly removed them but nothing changed. I decided to try advanced systemcare and later on, google bullguard, but neither fixed the problem.

I then gave in and did a system restore to the factory settings. This worked for about an 1-2 hours but then went right back to the slow running/failure at opening programs state that it was in when everything began.

So now I am stuck not knowing what to do. Any suggestions are gladly welcomed. Thanks.

ThrashZone · 03 Jul 2013

Safe mode and other advanced methods,
http://windows.microsoft.com/en-US/windows7/Advanced-startup-options-including-safe-mode
Shut down your machine, Unplug-Hold the power button down for 30/45 seconds (Power Drain)
Power up and Tap the F8 key continuously until you see a black page with white text,
Use the down arrow key to toggle to safe mode with networking/ hit the enter key.
Login as usual
You can use these free tools to see if they find anything,
Manually Update them before running full scans,
Try not to use your computer while the scans are running, (one at a time of course).
http://www.malwarebytes.org/products/malwarebytes_free
http://www.superantispyware.com/?tag=SUPERANTISPYWARE
This one is the longest up to 4 hours, the others are only about 45 minutes,
http://www.microsoft.com/security/scanner/en-us/default.aspx
Repeat the scans starting normally.

Zagis · 03 Jul 2013

But shouldn't malware/spyware not be the problem if the problem persisted after the factory system restore?
Also what does the safe mode with networking thing do?

ThrashZone · 04 Jul 2013

System restore most of the time is like appling a band-aid on a issue/ sometimes it works but most the time it's a temporary fix, (needs to be changed).
Safe mode with networking there are far better and already available resource to describe,
What is safe mode?
Add loading network drivers and you have safe mode with networking.

cottonball · 04 Jul 2013

Zagis,

Please do the following to see if we can diagnose the root of the problem. A RootKit may be involved.

First, please download the Farbar Recovery Scan Tool
Select the 64-bit version.

Save it to the Desktop.

Double-click the downloaded file to run it.
When the tool opens click Yes to disclaimer.
Press the Scan button.
FRST64 makes a log (FRST.txt) in the same directory from which the tool is run (Desktop).

Please provide the FRST.txt in your reply. <<---

The first time the tool is run, it also makes another log: Addition.txt
Also post the Addition.txt in your reply. <<---

Also, download Farbar Service Scanner

Save to the Desktop

Make sure the following options are checked:
- Internet Services
- Windows Firewall
- System Restore
- Security Center
- Windows Update
- Windows Defender
Press: Scan
FSS creates a log, FSS.txt, on the Desktop.

Please provide the FSS.txt in your reply. <<---