Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Computer running very poorly! [RESOLVED]


  • This topic is locked This topic is locked

#136
racinmason001

racinmason001

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 195 posts
no it just pops up in the tray at the bottom right corner I'm going to delete the shortcut to the MS-DOS file and what about the very first file I posted it has the same properties as the shortcut I think I should delete it.
  • 0

Advertisements


#137
racinmason001

racinmason001

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 195 posts
C:\WINDOWS\system32\T has 8 properties
C:\WINDOWS\system32\taskman has 4 properties
C:\WINDOWS\system32\taskmgr has 4 properties
C:\WINDOWS\system32\TASKMGR has 8 properties
C:\WINDOWS\system32\TASKMGR the shortcut has 8 properties
I dont know if this matters but all the other viruses that I have deleted had 6-8 properties.
  • 0

#138
Michelle

Michelle

    Malware Removal Goddess

  • Retired Staff
  • 8,928 posts
Do not delete those files. Those are legitimate system files. With the exception of the shortcut, I have all of them on my computer!
  • 0

#139
racinmason001

racinmason001

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 195 posts
OK I only deleted the shortcut and I am now going to reboot to see if I can open the task manager.
  • 0

#140
Michelle

Michelle

    Malware Removal Goddess

  • Retired Staff
  • 8,928 posts
Ok! In the meantime I'm going to try to see if I can find out why your Task Manager is "hiding"!
  • 0

#141
Michelle

Michelle

    Malware Removal Goddess

  • Retired Staff
  • 8,928 posts
Hmm, have you tried double-clicking on the little green dude in your tray? It may be checked as "hide when minimized".
  • 0

#142
racinmason001

racinmason001

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 195 posts
OK I'm not sure about this file its called trivial transfer file protocol App
it was in C:\WINDOWS\system32\tftp Along with about 37 TFTP random number files that norton was deleting so I sent it to the recycling bin and will not delete until I get your advice on that.
  • 0

#143
racinmason001

racinmason001

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 195 posts
OK I also have another questionable file the location is C:\RECYCLER I have tried to delete it and it says the file is full or write protected so I left it alone tell me what you think.
  • 0

#144
racinmason001

racinmason001

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 195 posts
yes I have and nothing when I reboot the end file now window pops up and says task manager is not responding.
  • 0

#145
Michelle

Michelle

    Malware Removal Goddess

  • Retired Staff
  • 8,928 posts
On the Windows taskbar, click Start > Search.
Click All files and folders.
In the "All or part of the file name" box, type, or copy and paste, the following file name:

tftp*.*


Make sure that "Look in" is set to "Local Hard Drives" or to (C:).
Click "More advanced options".
Check "Search system folders".
Check "Search subfolders".
Click Search.

Let me know the locations of any of the tftp files.

look to see if this file is there:

C:\Windows\System32\haxdrv.sys

Edited by bananafanafo, 04 May 2005 - 12:23 AM.

  • 0

Advertisements


#146
Michelle

Michelle

    Malware Removal Goddess

  • Retired Staff
  • 8,928 posts
Look to see if any of these are there too (C:\Windows\System32)

Bling.exe
Netwmon.exe
Wuamgrd.exe

  • 0

#147
Michelle

Michelle

    Malware Removal Goddess

  • Retired Staff
  • 8,928 posts
The file in C:\Recycler is something that has been deleted and is still in the recycle bin.
  • 0

#148
racinmason001

racinmason001

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 195 posts
no none of those files were there
  • 0

#149
Michelle

Michelle

    Malware Removal Goddess

  • Retired Staff
  • 8,928 posts
no tftp anywhere?
  • 0

#150
Michelle

Michelle

    Malware Removal Goddess

  • Retired Staff
  • 8,928 posts
Please download TrojanHunter: http://www.trojanhunter.com/ (free trial version). Run it and save the results.

Ad-Aware - Download, install, and update After installing Ad-aware, you will be prompted to update the program and run a full scan. De-select all boxes so that it does not run a scan. Manually run "Ad-Aware SE Personal" and from the main screen Click on "Check for Updates Now". Do NOT run it yet. We need to set it for a full system scan. Please follow these instructions for that:

In the Ad-Aware main window, click on the gear icon at the top of the screen to open the preferences window. In the "General" window, make sure the following options are selected:
1) Automatically save log-file
2) Automatically quarantine objects prior to removal
3) Safe Mode (always request confirmation)

Click the "Scanning" button on the left-hand side and make sure the following options are selected:
1) Scan within archives
2) Scan active processes
3) Scan registry
4) Deep scan registry
4) Scan my IE Favorites for banned URLs
5) Scan my Hosts file

Please also click on "Select drives & folders to scan" and select your hard drive(s). Then click the "Advanced" button on the left-hand side and make sure all the options under "Log-file Detail Level" are selected. Next, click the "Tweak" button on the left-hand side. Click on "Scanning Engine" and make sure the following options are selected:
1) Unload recognized processes & modules during scanning
2) Obtain command line of scanned processes
3) Scan registry for all users instead of current user only

Click on "Cleaning Engine" and make sure the following options are selected:
1) Always try to unload modules before deletion
2) During removal, unload Explorer and IE if necessary
3) Let Windows remove files in use at next reboot
4) Delete quarantined objects after restoring

Finally, click on "Safety Settings" and make sure the following options are selected:
1) Automatically select problematic objects in results lists
2) Write-protect system files after repair (Hosts file, etc)

Click on "Proceed" to save the preferences. Then please click the "Start" button on the bottom left side to begin a scan. Select "Use custom scanning options" and then click "Next". Ad-Aware will then scan for malware. When it is finished, make sure any objects listed in RED are selected and click "Next" to remove the objects.

Post the log from Ad-Aware and the log from TrojanHunter.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP