This thread's last reply is from November 21, 2010, 6:55 PM UTC. Software, malware, and removal-tool
advice below may be out of date — treat specific steps and download links with caution.
At the top of our home page you should see User Control Panel and a 1 message, or it may pop up a new smaller window to your Private Message page here.
I'm thinking, besides possible software or graphic card problem, the slowness may be the age of the laptop. As that is not our specialty, I'll send you to one of our sites that does that work. You also did have a bad file in system restore.
The antivir file is very big, 22MB. Looks like it listed every file in the system. Do you want this or can we scan and have it not create such a large file. I don't mind waiting on another scan to finish.
The report button wouldn't open the file "because it was in use by another application". I had to go get it manually. Also transfering just this 22mb file the progress bar says it will take 15 min to transfer across the network and it looks like it may take that long. I'm doing that so I can open it on this machine and not have to wait five minutes for wordpad to do search and replaces or to search for and remove what I can't share in the log here in open forum.
I'll try hard wiring to the internet instead of wireless and see what happens. Maybe the wireless card could be messing everything up. At this point I'm willing to entertain any possibility.
The scan log should open in Notepad. I looked under reports in mine, and then clicked on that last SCAN file I did. Checking the file size, it shouldn't be even a megabyte. Mine showed 20+/- KB in size.
If opening in notepad.exe:
Look for the lines that list the file path and named Virus/Trojan etc. and post those lines here. If notepad file is in KBs'; then post whole log.
You will be able to edit out your name if shown. Otherwise do the following.
Example of the lines to post are as follows:
C:\My Documents\YourName\filename with [DETECTION] The name given the bad file here - may be 2 lines
Could be others in Program Files or Temporary Files or Windows File Folders etc.
I mention that the notepad file is in KBs', as I have 2 drives with 5 100 gig partitions and 3rd with 160 gig of space. I haven't had a 22 MB text file report.
The file is definately 27,327 KB in size. It shows all kinds of stuff including all files on the system and files in .ZIP files and .CAB files. It is really just to much to search through. Seems like the word "with" is in there tens of thousands of times as part of file names.
I must have selected some option to make it do that ? I'll start up the pc and see what I can figure out while I wait for you. Told you I get the wierdest problems.
I am sure we removed the program vuze but here is just some of what it found. There is a lot more about vuze in there than just this section I'm posting. Looks like a place to reclaim space from a hidden directory and other places ??
Thanks for the information. Yes, we need clear those file. Also ANY others you downloaded or have installed/are running that came from those sites/downloads.
This will free up space, and remove the bad downloads. If any were installed programs they as well as the above may be causing problems. You may wish to scan again, once you empty the recycle bin and temp folders.
Please go Here: Check in other Users if there is more than one user account.
C:\Documents and Settings\My User Name\Application Data\Azureus and Delete that folder in RED.
If they won't go, I'll use another method.
To double check on programs, please run the following:
Download CKScanner by askey127 from HERE
Important - Save it to your desktop.
Double-click CKScanner.exe and click Search For Files.
After a very short time, when the cursor hourglass disappears, click Save List To File.
A message box will verify the file saved.
Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.
[colorPost[/color]
CKFiles.txt
Any problems getting rid of those files?
Application Data is a hidden directory not seen by windows explorer. Even the dos attrib command wouldn't make it visiable. I was able to delete most files and directories with dos but there is a subdirectory under vuze that must have a special or hidden camera because I can't get into it to delete the files and DOS no longer has deltree command. Do you know of a tool to do this ?
Video is also doing strange things. I wanted to change screen resolution to be able to see the DOS directory name better. After lowering the resolution the screen took up less space on my monitor. In other words the resolution was changed but there was unused space on my display. Also I had less options of what I wanted the screen resolution to be. It didn't go as high as it used to.
Here is the log.
Thanks, tj ...
CKScanner - Additional Security Risks - These are not necessarily bad
c:\other pc backups\laptop\c on laptop\documents and settings\administrator\desktop\whitecap\extras\more whitecap configs\firecracker
scanner sequence 3.CH.11
----- EOF -----
Thank you. Lets do the following, we'll check the video issue later as I said with a Technical Support Site. I prefer to see a clean machine before doing that.
You may want to copy or print the following for easy reference.
Please try the following:
Delete Files - Folders
We need to perform some manual clean up.
Right click on the Start...button.
Select Explore...from the menu.
Navigate to and find the following files and/or folders: if found, delete them.
Azureus and Vuze
Any other torrent site downloaded files
If you have any problem deleting the file, right click the file and choose Properties to see if it's read-only. Uncheck the read-only box, click Apply and OK. Then retry Delete.
If a message pops up saying "File in use", or something like that, hit Ctrl-Alt-Delete and look under the Processes tab. If the exact filename is in there, highlight it and click End Process, then retry Delete.
Please Note the name and location of any item you cannot delete or find.
Rescan with AntiVir
Please run AntiVir again, allow the scanner to quarantine the items it finds and list the items as found like I mentioned previously:
Example of the lines to post are as follows:
C:\My Documents\YourName\filename with [DETECTION] The name given the bad file here - may be 2 lines
Could be others in Program Files or Temporary Files or Windows File Folders etc.
Rerun RSIT
Ensure rsit.exe is on your desktop
IF NOT: Please download Random's System Information Tool by random/random from here and save it to your desktop.
Look for C:\RSIT Folder and delete, empty recycle bin.
Double click on RSIT.exe to run it.
Please read the disclaimer... click on Continue.
Once it has finished, two logs will open, log.txt <<will be maximized and info.txt <<will be minimized
Copy & paste the contents of both logs in your next reply
Post
Any problems
What files/locations/infection detected by AntiVir you had quarantined: if log is small enough then post that please
Both NEW RSIT log and info .txt files
How old are the backups you have of the laptop on Drive C? These may be best deleted and redone, will see after you rescan. It may be better to back up to cd-rw or dvd-rw discs to save hard drive space.
From the time of this Post: 25 hr left Reminder to post or we close the topic.
How are the above instructions going, any problems?
Let me know how things are at this point please.
thank you
turtledove
Edit:
P.S. Can you get the Service tag off the laptop? This may be of help on the non virus issue.
Been carefully going through that big log and finding stuff I am sure can / should be deleted. Before I started though I ran antivir and if I remember right everything looked good. Some stuff has come up recently. Please give me some more time.
If you like I'll give you the service tag # and all my info you need to get on the dell site in a PM.
Thanks for checking in. In Avira, under Local Protection, on the right of the window is a link to configuration. Click it.
In the new window:
Click twice Scanner; there select Use Smart Extensions.
Now click scan, it will have entries under there:
Click Archives; look for CAB (Microsoft), TNEF (Microsoft), also two Mac items as you are on a Windows machine:
and uncheck those. Click apply, OK to get back to original window. There, open Scan for Rootkits and select your drive. Then click on on Local Drives and start the scan.
Let me know if running AntiVir as above, lessens the size of log file please.
Have you been able to complete an online scan at other times, before now?
We really need a good second opinion if we can get it.
Have you been able to empty the Azeurus and Vuze folders and then delete them? If not, I have another way.
Rerun the RSIT as stated in my previous instructions Nov. 11th when AntiVir is done please.
Any problems with the above let me know.
Good day teajay,
Extra time noted.
Post if more needed or any questions getting a new RSIT log.txt and info.txt as I previously posted.
See you soon, let me know if the work needs go on past Sunday; the RSIT scan shouldn't. Let me know about the other scan discussed, as in how long it will take, then if you like, we can be sure your other computer is clear and transfer what is needed and reset this one after we see the diagnostics and I review the RSIT logs.
No ads, no affiliate links — generated on request from this thread's own
archived content, not written by forum staff. Never run a scan/removal tool
as a self-service step if the original thread describes it being done under
a helper's direct supervision, and don't include your name, email, or other
personal details in a follow-up question. See our privacy page
for details on how this works.
