slow computer: followed 'read and run me first' steps

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by neea, Sep 29, 2006.

  1. neea

    neea Private E-2

    Hello.
    I have followed the steps in 'Read and Run me First'.
    I have attached 3 logs.
    I could not get shownew.bat to work for some reason. And yes I followed the steps. It did not extract the newfiles.txt.
    My computer slow and always freezing.
    (Windows XP Home Edition 2002. Service Pack 2. Pentium 4 2.66GHz. 2.67GHz, 224 MB of RAM)
    I use a antivirus/firewall from my Internet Provider. (http://threats.telus.net/viruscenter/)


    When I try and load my security system I get a warning saying "The settings that were attempting to process are corrupted and unusable. Restoring a backup may solve the problem". When I click details I get this: '[ZKChunkReader:ZKChunkReader] [Desc: Corrupt File C: Documents & Settings/MYNAME/MYNAME/ApplicationData/TELUS/Telus Security Service/Adblocker.dat]

    I've also been getting warnings of W32/Dialer.cyw.
    When I'm surfing the net I'll get a warning like every 20 min. It tells me it cant delete until after I reboot. I click OK then it says it was deleted. Only to show up again.
    It says the infected file is c:\windows\temp\win75.tmp.exe
    I've read this is connected to Bearshare. Which I believe I've removed using Ccleaner, spybot, etc.

    Any advice would help.
    Thanx alot
    neea
     

    Attached Files:

    neea, Sep 29, 2006
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Try again! And read the directions slowly and follow them. It does not extract the newfiles.txt file. You must extract ALL files from the ZIP file yourself. And then you must run Windows Explorer (right click Start and select Explore) and locate each of the two .bat files and run them by double clicking on them. When run, they will create the two requested log file (runkeys.txt and newfiles.txt).

    Is Bearshare still installed? See Add/Remove Programs! Uninstall if installed.
     
    chaslang, Sep 30, 2006
    #2
  3. neea

    neea Private E-2

    I've tried this half a dozon times now.
    It extracts command.com, config.net, autoexec.nt and I am putting them directly on C:
    My computer has no newfiles.txt or shownew.bat.

    neea
     
    neea, Sep 30, 2006
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You only need to use that XPFix program if you are receiving the error message indicated. In additions the 3 file you mentioned (command.com, config.net, autoexec.nt ) would go into your C:\windows\System32 folder not just on your C drive anywhere you like.

    You will not have newfiles.txt and runkeys.txt until you EXTRACT all the files from the two zip files (GetRunKey.zip and ShowNew.zip) into a folder and then run the GetRunKey.bat and ShowNew.bat programs by double clicking on them from a Windows Explorer window.

    Where exactly did you extract the GetRunKey.zip and ShowNew.zip files to?
    What program are you using to extract the files from the ZIP file?
    Tell me the names of the files you see in the folder. (DO NOT TELL ME what you see in the ZIP file! Tell me what is in the folder where you extracted to!)

    Do you understand what the difference between each of the below is:
    - download the zip files
    - extract files from the zip file into a folder
    - run the .bat files from a Windows Explorer window
     
    chaslang, Oct 1, 2006
    #4

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds