please help

Discussion in 'Malware Help (A Specialist Will Reply)' started by CallOfOrion, Feb 6, 2007.

  1. CallOfOrion

    CallOfOrion Private E-2

    I have a serious problem with my computer. There is an abundance of these little .t files. These are small files that appear on my desktop, in my music downloads, in windows folders, and many other places. They are files that have no known operating program. Sometimes, they even show up in my task manager on the processes tab, along with some unknown .exe files, like aaaabw.exe. What program/virus/whatever generates .t files? what can I use to get rid of them?

    Another thing: in my WINDOWS folder on my C drive, there are several folders that have a strange heading: $NtUninstallKB$. there are many variations, for example:

    $NtUninstallKB893756_0$

    $NtServicePackUninstallNLSDownlevelMapping$

    $NtUninstallKB911567-OE6SP1-20060316.165634$

    Inside every one is a folder titled: Spunist, which is full of .t files.

    Are these supposed to be there? They have been there for awhile, but i'm pretty sure I don't remember them always being there. Also, these are all titled in blue text, whereas everything else is in black text.

    And if they are not supposed to be there, would it be okay to just delete them?

    If you know anything about any of what I'm talking about, please tell me.
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Perhaps you should have completed what you started in December in this thread:

    http://forums.majorgeeks.com/showthread.php?t=110213

    Do you plan of following up this time or are you just going to ask for help and disappear again? These problems were all part of your infection at that time.

    Normal files from installing Windows updates.

    The .t files are not normal and are part of your infection. They will work their way into ever folder that gets accessed while installing programs and by other means. They will spread rapidly if not contained and can quickly get well into the thousands which will use up loads of disk space.


    Run thisPrevx1 and allow it to fix all the problems it finds. It is often quite useful in fixing the problems you are describing with the .t files.

    This infection has many names. Here are a few:

    W32.Mixor.Q@mm
    WORM_NUWAR.AY
    W32/Dref-U
     
    Last edited: Feb 7, 2007
  3. CallOfOrion

    CallOfOrion Private E-2

    Ok, thanks very much for the help. I never followed up before, because I took the actions listed in the previously mentioned thread, and assumed I had taken care of it, because the problem seemed to disappear for awhile. However, this time, I have had enough, and will be sure to be extremely thorough, thanks for being patient. Ok, so it was a good thing that I hesitated to delete all those folders. Still, since they are only the updates, now that the updates are installed, could I delete them?
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    That thread asked for follow up logs. And the purpose of those logs is to verify that everything was fixed and nothing new showed up. Not following up on all instructions normally leads to a still infected PC which may get even worse over a period of time.


    If you don't plan on ever backing them out, yes. But you can easily do this with Ccleaner. You will just have to check the Advanced checkbox item named Hotfix Uninstallers since these are not removed by default.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds