missing files and corrupt files drivers causing windows to slow

[Murf]

Without going through your thread in the Malware removal forum, do you know if you were infected and what they found?

Browser which one?
And what version is it? Menu under Help will tell you.
IE
Firefox
Chrome

[liza]

It was a lot of Window errors. She never said i had anything. All the malware, trojan programs i ran showed nothing.

I'm running FF 38.0.1

[Murf]

So the only problem your having now is it will not create a restore point?

Lets see how much space is allocated for a restore point:

Start > In Search type Command Prompt and then in the list of results right click Command Prompt and run as administrator

Now type the following at the blinking cursor:

Vssadmin list shadowstorage

Post the result

[liza]

Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Windows\system32>Vssadmin list shadowstorage
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2005 Microsoft Corp.

Shadow Copy Storage association
For volume: (\\?\Volume{c075358f-6ba9-11dc-864e-806e6f6e6963}\)\\?\Volume{c07
5358f-6ba9-11dc-864e-806e6f6e6963}\
Shadow Copy Storage volume: (\\?\Volume{c075358f-6ba9-11dc-864e-806e6f6e6963}
\)\\?\Volume{c075358f-6ba9-11dc-864e-806e6f6e6963}\
Used Shadow Copy Storage space: 174.828 MB
Allocated Shadow Copy Storage space: 254.188 MB
Maximum Shadow Copy Storage space: 943.894 MB

Shadow Copy Storage association
For volume: (C\\?\Volume{c0753590-6ba9-11dc-864e-806e6f6e6963}\
Shadow Copy Storage volume: (C\\?\Volume{c0753590-6ba9-11dc-864e-806e6f6e69
63}\
Used Shadow Copy Storage space: 0 B
Allocated Shadow Copy Storage space: 0 B
Maximum Shadow Copy Storage space: 3 GB

Shadow Copy Storage association
For volume: (D\\?\Volume{c0753591-6ba9-11dc-864e-806e6f6e6963}\
Shadow Copy Storage volume: (D\\?\Volume{c0753591-6ba9-11dc-864e-806e6f6e69
63}\
Used Shadow Copy Storage space: 2.779 GB
Allocated Shadow Copy Storage space: 2.996 GB
Maximum Shadow Copy Storage space: 4.838 GB


C:\Windows\system32>

[Murf]

Shadow Copy Storage association
For volume: C :\\?\Volume{c0753590-6ba9-11dc-864e-806e6f6e6963}\
Shadow Copy Storage volume: (C :\\?\Volume{c0753590-6ba9-11dc-864e-806e6f6e69
63}\
Used Shadow Copy Storage space: 0 B
Allocated Shadow Copy Storage space: 0 B
Maximum Shadow Copy Storage space: 3 GB

This maybe the problem for Drive C: there is "0" allocated.

In Control Panel open System then click System Protection in the menu on the left.

Check the "C" drive the more you check the more drive space it will use.

If there is no space allocated try setting it to 3GB

[liza]

Under System Protection the C drive is already checked.

I do not see an option under System Protection to change space allocation.

Am i changing Disk Quotas settings by right clicking on C drive?

[Murf]

NO: do this

1. Start > In Search type Command Prompt and then in the list of results right click Command Prompt and run as administrator

Now type the following at the blinking cursor:

vssadmin resize shadowstorage /For=C: /On=C: /MaxSize=6GB

Now lets go back and see if it changed typing;

Vssadmin list shadowstorage

Now the result should show:

Shadow Copy Storage association
For volume: (C :\\?\Volume{c0753590-6ba9-11dc-864e-806e6f6e6963}\
Shadow Copy Storage volume: (C :\\?\Volume{c0753590-6ba9-11dc-864e-806e6f6e69
63}\
Used Shadow Copy Storage space: 0 B
Allocated Shadow Copy Storage space: 6 GB
Maximum Shadow Copy Storage space: 6 GB

[liza]

Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Windows\system32>
C:\Windows\system32>vssadmin resize shadowstorage /For=C: /On=C: /MaxSize=6GB
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2005 Microsoft Corp.

Successfully resized the shadow copy storage association

C:\Windows\system32>Vssadmin list shadowstorage
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2005 Microsoft Corp.

Shadow Copy Storage association
For volume: (\\?\Volume{c075358f-6ba9-11dc-864e-806e6f6e6963}\)\\?\Volume{c07
5358f-6ba9-11dc-864e-806e6f6e6963}\
Shadow Copy Storage volume: (\\?\Volume{c075358f-6ba9-11dc-864e-806e6f6e6963}
\)\\?\Volume{c075358f-6ba9-11dc-864e-806e6f6e6963}\
Used Shadow Copy Storage space: 174.875 MB
Allocated Shadow Copy Storage space: 254.188 MB
Maximum Shadow Copy Storage space: 943.894 MB

Shadow Copy Storage association
For volume: (C\\?\Volume{c0753590-6ba9-11dc-864e-806e6f6e6963}\
Shadow Copy Storage volume: (C\\?\Volume{c0753590-6ba9-11dc-864e-806e6f6e69
63}\
Used Shadow Copy Storage space: 0 B
Allocated Shadow Copy Storage space: 0 B
Maximum Shadow Copy Storage space: 6 GB

Shadow Copy Storage association
For volume: (D\\?\Volume{c0753591-6ba9-11dc-864e-806e6f6e6963}\
Shadow Copy Storage volume: (D\\?\Volume{c0753591-6ba9-11dc-864e-806e6f6e69
63}\
Used Shadow Copy Storage space: 2.779 GB
Allocated Shadow Copy Storage space: 2.996 GB
Maximum Shadow Copy Storage space: 4.838 GB


C:\Windows\system32>

[Murf]

1. Open Disk Cleanup by clicking the Start button, clicking All Programs, clicking Accessories, clicking System Tools, and then clicking Disk Cleanup.
2. In the Disk Cleanup Options dialog box, click Files from all users on this computer. If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
3. If prompted, select the drive that you want to clean up, and then click OK.
4. Click the More Options tab.
5. Under System Restore and Shadow Copies, click Clean up, and then, in the confirmation dialog box, click Delete.

This should delete all restore point except the latest.

Now see if you can create one.

[liza]

Did as you instructed. I had to delete the system restore and shadow copy in Windows safe mode. Then create in normal mode. It was the only way the computer would let me. I got it created.

But when i click on system restore program the pop up says "no restore point has been created on system disk".

When i look under System Properties it has the restore points that i was able to create.

PQSERVICE 5/29/2015 1:48PM

ACER(C) NONE

DATA (D) 5/29/2015 1:48PM

[Murf]

OK at least now you have a good restore point, but can't access it.

Lets make sure they are there:

Start> Search

Type in
rstrui

Click next

Do you now see the restore points?

BTW: Vista is the only operating system on the computer right?

[liza]

I do not see the restore points. I see the System Restore program telling me there is no restore points.

Yes, i only have Vista.

[Murf]

I'm running out of idea's I am going to PM another member to have a look at what we done, maybe some fresh Idea's will help. In the meantime will do some more research.

In the meantime lets try this again:

Ensure that Microsoft Software Shadow Copy Provider Service (SWPRV) and the Volume Shadow Copy (VSS) services are running.

To do so, click Start menu, then type services.msc in the Star Search box (in non Windows Vista OS, click on Run command box), and hit Enter.

In the Services control panel, locate Microsoft Software Shadow Copy Provider and Volume Shadow Copy.

Double click on both services, and set the “Startup type” to Automatic.

By default, the Startup type is manual, and Windows will automatically start them when needed. Set to automatic startup will ensure that the services are always loaded when Windows boots up. If the services are currently disabled, click on Start Service button to start the services immediately.

[Digerati]

Hi liza! Murf asked if I had any more ideas to suggest, but as is typically the case with Windows, I would have run out long before he did.

After six months i got my laptop back from my cousin. After i got it back i started it. I got a black screen

Well, we obviously see why he gave it back to you!

In looking through this thread and your malware removal thread, I don't see where running chkdsk /f ever came up with no errors. In fact, it seems it found errors that were not fixed. Is that still the case? If not sure, I recommend running it again (following the prompts to let it run at next boot) only this time, use chkdsk /r. It does the same as /f, but with a little more thorough checking. You can also enter chkdsk /? to list and see what each of the options do.

I worry about all the system tweaking/optimizing tools found on your system, including IOBIT, Ashampoo Winoptimizer, Slim Cleaner, Wise Care 365. I personally don't recommend any of them as they have a history of being too aggressive, sometimes corrupting or deleting important system files.

From an elevated command prompt (run as administrator) you can check and hopefully repair and corrupt system files by running sfc /scannow. Note the space before the slash.

I see also that Symantec, Rising AV, and Kingsoft AV are, or have been installed, as well as MBAM. If multiple security and optimizing tools are running, that can sure bog down your system. I recommend uninstalling all but MBAM and using it with Microsoft Security Essentials.

Did you install Sandboxie? Do you need it?

You seem to have about 13Gb of free disk space on your boot drive which should be plenty to allow System Restore to create several restore points. But I wonder if disk fragmentation is an issue. You might defrag the disk. This is best done in Safe Mode for the most effective defrag.

My fear is if chkdsk cannot fix problems found and if sfc cannot find or fix problems it finds, that your OS is toast and you will need to reinstall Windows and that would be a problem without the disks.

[liza]

Thank you both for your honesty. I truly appreciate it.

I figured my jerk of a cousin deleted some major programs. He won't admit to it. Guess he will be buying me a new laptop soon.

Those programs IOBIT, Ashampoo Winoptimizer, Slim Cleaner, Wise Care 365, Symantec, Rising AV, and Kingsoft AV I have removed them using Revo. When i scan with Malwarebytes i still see some left over files of them. Winoptimizer, i can not get rid of. It is not listed in the program add/remove section not is it listed in Revo.

Sandboxie, sigh. I was told it would help prevent hijacking, rootkits, etc. I don't know if it is true or not. So if you think i don't need it then i will remove it.

I will go try defrag now.