New build, had virus, slow since.

ote1 · 22 Mar 2015 at 10:48

Hello,

I built a computer for my parents for Christmas and last month my father tried to install a chess programme on it. Lo and behold he clicked on any old link on Google and went ahead and installed Vosteran amongst other malware-type stuff. Following this the computer ground to a halt and then on restarting would go to a black screen with some kind of pop up. I couldn't get onto anything.

IIRC I restarted and did a roll back to before the virus. I then located the virus files (in downloads I think) and deleted them. Following that I installed Avast to do some scans and it came up clear. However, it's been slow ever since. When I first built it it would load Chrome in an instant without the mouse doing the loading logo. Now when you open chrome there is a 1-2 sec pause with the loading cursor and then when it opens the tabs take 1-2 sec more to appear. It's okay but frustrating and I've finally found the time to try and sort out the problem. The family are away for the week so it gives me plenty of time to hopefully work it out.

Could you please advise me on diagnostics or action I can take. The specs are as follows:

Asus Z97i-plus
Intel G2538
Avexir 8GB DDR3
Windows 8.1
60GB Kingston SSD - OS drive
1TB Seagate 7200rpm

Temps seem great, low 30s if that. It's just an office PC.

Replies greatly appreciated.

sweols · 22 Mar 2015 at 11:15

I wouldn't trust avast.

Kaspersky IS & Malwarebytes

ote1 · 22 Mar 2015 at 11:23

sweols said:
I wouldn't trust avast.

Kaspersky IS & Malwarebytes

Funnily enough I just gave the boot to Avast and installed Malwarebytes. It didn't pick up a thing.

Edit: It just found 1,444 threats (PUPs including Vosteran) and has quarantined them all. What does that mean exactly? Can they be permanently removed?
Edit 2: Just removed them all. Restarted and it's still slower than it was. I'm going to run the scan again now to be sure.

mickyflinn · 22 Mar 2015 at 11:23

Download a program called process explorer, it may give u an insight if something is hogging resources. Its basically a more in depth version of task manager.

You the can kill the process and see if your computer returns to normal.

http://download.cnet.com/Process-Explorer/3000-2094_4-10223605.html

Puppetmaster · 22 Mar 2015 at 11:38

Download and run both of these

Junkware Removal Tool http://www.bleepingcomputer.com/download/junkware-removal-tool/dl/131/

AdwCleaner http://www.bleepingcomputer.com/download/adwcleaner/dl/125/

lude1962 · 22 Mar 2015 at 11:41

easier to do a clean windows reinstall..

ExRayTed · 22 Mar 2015 at 11:44

lude1962 said:
easier to do a clean windows reinstall..

Second this - wipe and reinstall

JoeBoi · 22 Mar 2015 at 11:44

lude1962 said:
easier to do a clean windows reinstall..

This.

Josh · 22 Mar 2015 at 11:46

Wipe and install also, the virus file could be hiding in many different folders etc

Only way to be sure is to do it all again and educate your dad on downloads etc

ote1 · 22 Mar 2015 at 11:51

JOSH86 said:
Wipe and install also, the virus file could be hiding in many different folders etc

Only way to be sure is to do it all again and educate your dad on downloads etc

I'll give the clean install a try. Nothing much to lose to be honest. It's not got a whole lot on it. Will it be safe to transfer important docs onto a HDD I have? If I only select specific files to move do I still risk moving the virus over? I'm really not clued up on this kinda stuff.

As for my father I'll just have to keep trying to educate. He recently powered off my mother's Surface during an update because it was taking too long when it clearly said 'do not power off'. Rolling back saved me there. That's about all I can do on computers I swear.

Edit: Thanks for the replies all. Could someone point me in the direction of how to do a sweep of the computer (format?) and reinstall windows cleanly.

ExRayTed · 22 Mar 2015 at 11:55

Boot from the Windows disc, select 'advanced' then wipe the drive

Josh · 22 Mar 2015 at 11:56

Virus scan each file/folder before you move them, but there is a chance it may still be corrupt. I personally wouldn't and take the hit of the docs lost.

Put the windows CD in the PC, power off and restart, should auto boot to the CD drive and you can do a format in the OS install part where you create the partions for the drive.

ote1 · 22 Mar 2015 at 11:57

ExRayTed said:
Boot from the Windows disc, select 'advanced' then wipe the drive

Thanks.

sweols · 22 Mar 2015 at 12:04

word and pdf documents can contain malware/viruses.

If your dad does banking through barclays, he'll get Kaspersky Internet Security for free, for up to 3 computers.

A few other useful tools are
Malwarebytes
Firefox with extension- NoScript
CCleaner

Semple · 22 Mar 2015 at 12:13

As above, only way to be 100% sure is for a clean reinstall.

If your dad's a bit of a nightmare for installing stuff, you could put him on a limited account so he doesn't have access to just install whatever he wants.

FloppyPoppy · 22 Mar 2015 at 12:15

Fresh windows 100%

Borealis · 22 Mar 2015 at 14:02

A fresh install and drive wipe is the only way to guarantee you're virus free.

Personally, I wouldn't transfer any of the docs. Although they're probably clean, they could be infected and then you'd be back to square one again. It's safer just to wipe everything and start again.

AtaRo · 23 Mar 2015 at 00:46

+ 1 for fresh install, and if you need a free chess program for your father try Stockfish an open source chess engine + Arena gui for the Stockfish engine.