Firefox and pc acting strange, long load times and loading wheel spinning

[Opus-greybeard]

Tried the usual re install and clearing cookies, history cache and so on
But I have growing suspicion that my pc might be compromised
not sure ofc hence the much needed guidance
I hope I have followed the instructions correctly
Check_Browsers_LNK.log
HiJackThis.log
info.txt
log.txt
virusinfo_syscheck.zip

[dragokas]

Hi,
Next time please upload files in a single archive (CollectionLog.zip)

We'll return to you as soon as possible.

---

Please, note that only members of VIRUSNET-Association are allowed to respond to PC cure topics.
Ignore any recommendations given by other users, including PM !!!

Assistance is provided free of charge in our free time. If you found our help useful, you can thank us with any amount using this form or you can leave feedback in Guestbook.

[Sandor-Helper]

Hi,
Logs show that system have a huge amount of process called AppleMobileDeviceProcess.exe running simultaneously.
Lets try to do this:
Uninstall two applications - Apple Software Update and Bonjour

Restart PC and tell us is there some changes in system behavior.

[Opus-greybeard]

Hi dragokas I uninstalled, apple software update, Bonjour, Icloud for PC, Apple Music Player and the new Apple devices app for syncing phones No more apple on the Pc There is a significant improvement in lag, stutter and loading times Is there a way to check that the huge amount of processes from apple have stopped running ? A new autologger file ? rgds Med vennlig hilsen Thomas Hiorth Kolstad

…

________________________________ From: Sandor-Helper ***@***.***> Sent: Friday, April 12, 2024 12:33 To: dragokas/hijackthis ***@***.***> Cc: Opus-greybeard ***@***.***>; Author ***@***.***> Subject: Re: [dragokas/hijackthis] Firefox and pc acting strange, long load times and loading wheel spinning (Issue #249) Hi, Logs show that system have a huge amount of process called AppleMobileDeviceProcess.exe running simultaneously. Lets try to do this: Uninstall two applications - Apple Software Update and Bonjour Restart PC and tell us is there some changes in system behavior. — Reply to this email directly, view it on GitHub<#249 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/BBPYNDQZ4W4C33IXSQ4NALTY462AXAVCNFSM6AAAAABGC5YWX6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDANJRGUYDCNRUGU>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[Sandor-Helper]

I'm Sandor :)

Yes, get new set of logs as CollectionLog.zip please.

[Opus-greybeard]

here you go !
thank you in advance Sandor :)
CollectionLog-2024.04.12-15.27.zip

[Sandor-Helper]

Thank you.

• Did you set up DNS by yourself?
• Did you install this software by yourself: https://gamban.com/es/blog/what-is-gamban ?

Please get more logs.
Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Please rename file FRST64.exe -> FRSTEnglish.exe

• Right click to run as administrator. When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will produce logs called FRST.txt and Addition.txt in the same directory the tool is run from.
• Please attach the logs back here.

[Opus-greybeard]

I did not setup DNS, dont know how 🙂 is that a bad or good thing ? im getting the logs Med vennlig hilsen Thomas Hiorth Kolstad

…

________________________________ From: Sandor-Helper ***@***.***> Sent: Friday, April 12, 2024 18:40 To: dragokas/hijackthis ***@***.***> Cc: Opus-greybeard ***@***.***>; Author ***@***.***> Subject: Re: [dragokas/hijackthis] Firefox and pc acting strange, long load times and loading wheel spinning (Issue #249) Thank you. Did you set up DNS by yourself? Please get more logs. Please download Farbar Recovery Scan Tool<https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/> and save it to your Desktop. Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. Please rename file FRST64.exe -> FRSTEnglish.exe * Right click to run as administrator. When the tool opens click Yes to disclaimer. * Press Scan button. * It will produce logs called FRST.txt and Addition.txt in the same directory the tool is run from. * Please attach the logs back here. — Reply to this email directly, view it on GitHub<#249 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/BBPYNDX25YYFCLFTY5YDT7TY5AE7RAVCNFSM6AAAAABGC5YWX6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDANJSGEYDCOJQGE>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[Opus-greybeard]

FRST.txt
Addition.txt

[Opus-greybeard]

has my DNS been hijacked, hacked ?

[dragokas]

1. Run HiJackThis:

• press menu Tools - Uninstall manager - Save list, upload here the uninstall_list.txt file.

2. Please answer about:

• Did you install this software by yourself: https://gamban.com/es/blog/what-is-gamban ? The description saying - it is intended to block gambling sites, it is also responsible for altering DNS for the same purposes.

[Opus-greybeard]

uninstall_list.txt

2.Yes, or I didnt, but my brother when he was staying here, GAMBAN says its not possible to delete so have to keep it for a full year then it will unlock, but if you know how I can get it off my PC I would be happy, I cant even play the regular lottery because its banned and if thats the cause of all this mess I need it gone.
thx
thomas

[dragokas]

Sorry, the topic has stagnated. If you still need a help, please, let us know.