Yahoo Messaging and Slowdowns


Hello,

For a few weeks now, my computer has been rowing systematically when I open my yahoo mailbox.

The data transfer message from s.yimg.com is visible for about 1 minute and prevents any possible action on the internet.

Is there an infection somewhere? I’m using firefox.

Thank you in advance.


Sta-n 19:43 14/06/2015

Hi,

my name is Stan and we’ll take care of together of your computer.

When you take over, I’ll ask you:

  • To follow specific procedures.

    Not to ask for help on another forum, in order not to disrupt the disinfection.

    NOT TO DO ANYTHING ON YOUR OWN

So we can get started.

Can you do this to diagnose your computer:

  • Disable your antivirus software for the duration of downloading and using.
  • Download ZHPDiag (by Nicolas Coolman) on your desktop.
  • Install the software.
  • Lance ZHPDiag,
  • /Under Vista, Windows 7 and 8, the file must be launched by right-click -> Run as administrator
  • Click on Complete

    Note: Do not close the program even if it is indicated that it is no longer responding.

  • Once the scan is finished go to the desktop, the file ZHPDiag.txt has been created.
  • Host the report ZHPDiag.txt on SosUpload, then copy/paste the link provided in your next answer on the forum.
  • Help : ZHPDiag Tutorial

Hi,

[Keep up the good work to you both!

@+


Sta-n 19:49 14/06/2015

Thank you
Asiatique


Sta-n 20h57 14/06/2015

Hi,

so you can uninstall Spybot – Search & Destroy / Spybot – Search & Destroy 2 it’s useless.

Next:

PHASE 1:

  • Disable your antivirus software for the duration of downloading and using.
  • Download ZHPCleaner by Nicolas Coolman to your desktop.
  • Close your browser
  • Make a double click on the icon to launch

    Note: Right click on the icon then Run as administrator on Windows Vista Seven and Windows 8

  • Accepts Terms of Use
  • Click on Scanner

    and afterwards

  • Click on Clean


Note

During the cleaning, if the tool asks you Did you install this proxy? and you don’t have any installed, click No

  • Host the report ZHPCleaner.txt present on your desktop on SosUpload then copy/paste the link provided in your next answer.


PHASE 2:

  • Disable your antivirus software for the duration of downloading and using.
    • Download Adwcleaner (from Xplode) on your Desktop !
  • /Under Vista, Windows 7 and 8, the file must be launched by right-click -> Run as administrator

    1. Select the option Scanner

      and after :

    2. Choose option Clean
  • Accept the warning by clicking OK
  • Accepts warnings/information by clicking OK
  • The program will reboot your PC,
  • Host the report C:\AdwCleaner\AdwCleaner[S0].txt on SosUpload, then copy/paste the link provided in your next answer.
  • Help : ADWCleaner Tutorial
  • How to host a file on SosUpload?

PHASE 3:

and do a zhpdiag again.

So I’m waiting for four reports.

Reading you…

I should mention that I had forgotten to disable Avira when I wanted to use Zhpdiag and therefore could not open it:

access to the Zhpdiag file containing TR/Rogue 821406 was blocked, which indicated Avira to me.


Sta-n 10h08 16/06/2015

Hi,

that’s why it is well marked to disable the antivirus before downloading and using the programs
Yeux Roulants

Here for the continuation :

  • Disable your antivirus software for the duration of downloading and using.
  • Copy the lines below :
  • Code:
  • Script ZHPFix

    ProxyFix

    C:\Users\Yann\AppData\Roaming\Mozilla\Firefox\Profiles\9ptlxm4t.default\prefs.js(.not file.)

    O3 – Toolbar: (no name) – [HKLM]{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02E} Orphan Key

    [HKCU\Software\Safer Networking Limited]
    [HKLM\Software\Wow6432Node\Safer Networking Limited]
    O43 – CFD: 01/01/2014 – 12:25:20 – [] —-D C:\Program Files (x86)\Spybot – Search & Destroy

    O43 – CFD: 17/02/2014 – 20:56:56 – [] —-D C:\program files (x86)\Spybot – Search & Destroy 2

    O43 – CFD: 01/02/2014 – 20:03:24 – [] —-D C:\ProgramData\Spybot – Search & Destroy

    EmptyPrefetch

    EmptyFlash

    FirewallRAZ

    EmptyTemp

  • Lances ZHPFix , run as administrator on Windows : 7/8 and Vista
  1. Click on Import
  2. Pastes the helper lines given
  3. Then Click on GO
  4. Confirm data cleansing by clicking Yes
  5. Once the scan is finished go to the desktop, the file ZHPFixReport has been created.
  6. Host the report ZHPFixReport on SosUpload, then copy/paste the link provided in your next answer.

Help :

  • ZHPFix Tutorial

And tell me if it’s okay… we’re doing the final cleanup…

A+


Sta-n 21:04 16/06/2015

Hi,

yes for the 7 o’clock…there are some big directories in Windows.

So tell me again if it’s okay… we’re going through the final cleanup.

Hey, guys,

I waited a little before answering but unfortunately the problem is still there, not systematic, but even today my navigator froze twice for 1 minute before setting off again.
Triste


Sta-n 00h13 19/06/2015

Hey,

, let’s see if there’s anything else.

Please do this:

  • Disable your antivirus software for the duration of downloading and using.
  • Download Farbar Recovery Scan Tool -> FRST64
  • Note: For Windows Vista, Seven, Windows 8 & 8.1 users right click on the icon and Run as administrator
  • For Windows 8 & 8.1 users, the SmartScreen will prevent you from running it, Click on More Information, then Click Run Still.
  • Verifies that Addition.txt is checked,
  • Click on Scan
  • Once the scan was completed on the desktop, two reports FRST.txt and Addition.txt were created.
  • Host the reports FRST.txt and Addition.txt on SosUpload, then copy/paste the link provided in your next answer


Help

:

  • Tutorial – Farbar FRST Analysis Option


Sta-n 22:29 19/06/2015

Hi,

to me he’s clean…

you can still try to reset your browsers with this tool:

Download Reset Browser on your desktop and not elsewhere[*]/!\ Under Vista, Windows 7 and 8, you have to launch the file by right-click -> Run as administrator

Then you have 3 buttons…for Chrome, Firefox and Internet Explorer Reset your FF and IE.

Then you’ll have to check in the Windows 7 forum…

A+

Hey, guys,

It’s done. There are 2 sessions on this pc (2 users). Is it necessary to do this on every session?

Otherwise, it might be blocking less often and the internet is a bit faster but I’ll deal with it…Maybe the problem comes from somewhere else!

Thanks anyway.


Sta-n 20h17 23/06/2015

Hey,

, we’re gonna do a deeper scan:

  • Follow the instructions exactly.
  • Caution: This tool should only be used with the approval of a Safety Helper. If you use this tool alone, use at your own risk.
  • Disable your antivirus software for the duration of downloading and using.
  • Make a backup of your data (personal documents, music, photos, pictures etc…) on an external support (usb key, external hard drive) it is the usual procedure when using this tool.

Scan Combofix

  • Download Combofix (from sUBs)
  • Save this file on the desktop (required)
  • Right click on combofix.exe selected Run as administrator to start the scan
  • During the scan of Combofix do not touch the keyboard or the mouse.
  • When the scan is complete, a report will appear. Post this report as a link in your next reply.
  • NOTE : The report can also be found here : C:\n-Combofix.txt


Sta-n 16h58 30/06/2015

Hi, here’s the rest…

  • /!\n- Careful: This procedure is only valid for this user /!\
  • Disable your antivirus software for the duration of downloading and using.
  • Download CFScript.txt and save it on your desktop !
  • Quit your browser and all running applications.
  • Drag the CFScript.txt file to Combofix.exe

  • Combofix is about to launch. Wait during the scan and then post the contents of the report that will open in your next answer.
  • Note: The file is saved as C:\Combofix.txt

Tell me again how your computer’s doing after that…

Hey, guys,

Here’s the report:

http://upload.sosvirus.net/download/…g9aedn70f5fmae

Alas, the problem is still there…Maybe it’s not an infection and there’s something else?

I find that blocking often occurs when I watch a streaming video.

But my Flash Player is up to date so I don’t know…

I’ll see ya.


Sta-n 11:06 06/07/2015

Hey,

, he’s actually clean.

We’ll be able to finalize the cleanup.

But before you do, I advise you to try to disable all non-vital programs at startup, to see if it’s software running in the background that’s a bit annoying.

Look here: http://www.commentcamarche.net/faq/6…s-au-demarrage

And disables all software at startup, except antivirus.

Test your stream and tell me again.

A+


Sta-n 23:15 06/07/2015

Hi,

you can deactivate:

CCLeaner Monitoring

Sidebar

BackupManagerTray (If you don’t use Bell’s automatic backup)

BCSSync

LManager

both PowerDVD8

SunJava

and test after…

Hey, guys,

No change, I deactivated the mentioned software, proceeded to a reboot and I had again this morning a freeze during which I can do nothing …
Triste


Sta-n 22:23 07/07/2015

Hey,

, we could still check your hard drive

Do this:

start/programs/accessories then right click execute as administrator on command prompt , then paste this in the black window :

CHKDSK /F /R %Homedrive

then valid , agrees to do it on restart as requested and restarts, then let it work.

Then, get the report according to the tuto here: https://forums.cnetfrance.fr/topic/12…de-disque-dur/

and post it here.

A+

You May Also Like