Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Malwarebytes and Avast cannot find it


  • This topic is locked This topic is locked

#31
moe jr

moe jr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 210 posts
I did the fix and rebooted, here's the log. I did notice the file is still in my documents. And a general note, when I first try and open Internet Explorer it seems very slow, also when opening new windows. Once they're open it navigates between them fairly quickly. I'm wondering if it's my new, upgraded virus protection with Avast?

All processes killed
========== OTL ==========
C:\WINDOWS\SYSTEM32\uzos.bin moved successfully.
C:\WINDOWS\uzofedojyc.com moved successfully.
C:\WINDOWS\kovecyciq.com moved successfully.
C:\WINDOWS\SYSTEM32\qivyn.dat moved successfully.
C:\WINDOWS\SYSTEM32\ikyjuzeri.dat moved successfully.
C:\WINDOWS\edyzohewu.bin moved successfully.
C:\WINDOWS\imebypit.bin moved successfully.
C:\WINDOWS\wuwijenybe.dat moved successfully.
C:\WINDOWS\SYSTEM32\etun.exe moved successfully.
C:\WINDOWS\erydezul.com moved successfully.
C:\WINDOWS\osutiwum.dat moved successfully.
C:\WINDOWS\yripahuqik.com moved successfully.
C:\WINDOWS\vynozemiwo.dat moved successfully.
C:\WINDOWS\kidivi.com moved successfully.
C:\WINDOWS\SYSTEM32\qovu.dat moved successfully.
C:\WINDOWS\SYSTEM32\hivedexyco.exe moved successfully.
C:\WINDOWS\sypopakej.bin moved successfully.
C:\WINDOWS\giqinufole.dat moved successfully.
C:\WINDOWS\uledow.bin moved successfully.
C:\WINDOWS\SYSTEM32\agyhape.com moved successfully.
C:\WINDOWS\SYSTEM32\civusoqeka.dat moved successfully.
C:\WINDOWS\SYSTEM32\agikygyr.exe moved successfully.
C:\WINDOWS\tycecyzax.dat moved successfully.
C:\WINDOWS\fimaxewa.com moved successfully.
========== FILES ==========
File move failed. C:\Documents and Settings\catman3152\My Documents\Fwd_ Fw_ Fwd_ free blockbuster movies... scheduled to be moved on reboot.
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Documents and Settings\catman3152\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\catman3152\Desktop\cmd.txt deleted successfully.
========== REGISTRY ==========
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: catman3152
->Temp folder emptied: 851564 bytes
->Temporary Internet Files folder emptied: 179122321 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 3096 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->Flash cache emptied: 0 bytes

User: Owner

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 20050 bytes

Total Files Cleaned = 172.00 mb


[EMPTYFLASH]

User: Administrator
->Flash cache emptied: 0 bytes

User: All Users

User: catman3152
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService
->Flash cache emptied: 0 bytes

User: Owner

Total Flash Files Cleaned = 0.00 mb

Restore point Set: OTL Restore Point (0)

OTL by OldTimer - Version 3.2.22.3 log created on 05082011_155228

Files\Folders moved on Reboot...
File\Folder C:\Documents and Settings\catman3152\My Documents\Fwd_ Fw_ Fwd_ free blockbuster movies... not found!
File\Folder C:\Documents and Settings\catman3152\Local Settings\Temp\~DF256F.tmp not found!
File\Folder C:\Documents and Settings\catman3152\Local Settings\Temp\~DF8595.tmp not found!
File\Folder C:\Documents and Settings\catman3152\Local Settings\Temp\~DFCA35.tmp not found!
File\Folder C:\Documents and Settings\catman3152\Local Settings\Temp\~DFCB89.tmp not found!
File\Folder C:\Documents and Settings\catman3152\Local Settings\Temp\~DFCE1F.tmp not found!
File\Folder C:\Documents and Settings\catman3152\Local Settings\Temp\~DFCE89.tmp not found!
File\Folder C:\Documents and Settings\catman3152\Local Settings\Temp\~DFD119.tmp not found!
File\Folder C:\Documents and Settings\catman3152\Local Settings\Temp\~DFD175.tmp not found!
C:\Documents and Settings\catman3152\Local Settings\Temporary Internet Files\Content.IE5\SXPM08H9\page__st__15__gopid__2007854[1].txt moved successfully.
C:\Documents and Settings\catman3152\Local Settings\Temporary Internet Files\Content.IE5\RM57VSDX\like[1].htm moved successfully.
C:\Documents and Settings\catman3152\Local Settings\Temporary Internet Files\Content.IE5\RM57VSDX\xd_proxy[2].htm moved successfully.
File\Folder C:\Documents and Settings\catman3152\Local Settings\Temporary Internet Files\Content.IE5\CHMN89U3\Fwd_ Fw_ Fwd_ free blockbuster movies... not found!
File\Folder C:\Documents and Settings\catman3152\Local Settings\Temporary Internet Files\Content.IE5\54BEFJXR\FW_ Which Presidential Candidate__...... not found!
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...
  • 0

Advertisements


#32
Render

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts

I'm wondering if it's my new, upgraded virus protection with Avast?

Yes. It can be that. Try to disable Avast for a moment and see if there is difference in opening time of the IE.

Can you copy and paste a full file name of that file Fwd_ Fw_ Fwd_ free blockbuster movies... ?

Restart in Safe mode and try to delete it using Windows Explorer.

Then restart in normal mode and do this:
See you tomorrow. It's time for bed.
  • 0

#33
moe jr

moe jr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 210 posts
Well, even with an upgraded, current version of Avast I go to 'Shields' and I don't see an option for temporarily disabling the program.

As far as the 'Fwd_Fw_Fwd_free blockbuster movies...' file I right clicked it and looked under proeprties and for the type of file it shows the word 'file' I can't find any other name for it. I tried to delete it in safe mode and I get the same msg. I always got: CANNOT DELETE FILE: CANNOT READ FROM THE SOURCE FILE OR DISC


I'm going to run the disc defragmenetr and see what that does.

Thanks.
  • 0

#34
Render

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
Avast icon shoud be in a lower right corner of your screen. (in a red rectangle on a picture below)

Posted Image

If you right-click on it (not with left mouse button but right mouse button) you should see this:

Posted Image
  • 0

#35
Render

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
For that file try this:

Click on Start then select All Programs then Accessories and click on Command Prompt
In Command Prompt please type:

del "\\?\C:\Documents and Settings\catman3152\My Documents\Fwd_ Fw_ Fwd_ free blockbuster movies..."

Press Enter.
  • 0

#36
moe jr

moe jr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 210 posts
Ok, I was able to disable Avast's shields and timed the startup time for Internet Explorer and it was the same whether enabled or disables, about 20 seconds. Once open, everything seems to work fairly fast. So that's a big improvement.

I also did the command prompt to find the 'blockbuster' file and it said: Could Not Find \\?\C\:Document and Setting\catman3152\My Documents\Fwd_Fw_Fwd_free blockbuster movies
  • 0

#37
Render

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
Let's try to remove that file (start with Plan A):

Plan A

Posted Image OTL Custom Scan

  • Double click on the Posted Image icon to run it.
  • Make sure all other windows are closed and to let it run uninterrupted.
  • When the window appears, underneath Output at the top, make sure Stadard output is selected.
  • Check the boxes beside LOP Check and Purity Check.
  • Copy (select all lines inside quote box and press CTRL+C) and Paste (press CTRL+V) the following code into the Posted Image textbox.

    del "\\?\C:\Documents and Settings\catman3152\My Documents\Fwd_ Fw_ Fwd_ free blockbuster movies..." /c
    
  • Click the Posted Image button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open OTL.Txt in Notepad window.
  • Please copy (Edit->Select All, Edit->Copy) the content of this file and post it with your next reply.


Plan B

  • Open Windows Explorer and navigate to My Documents map.
  • Right click on that file and choose Open with... then choose Notepad.
  • It will give you this error This file does not exist......would you like to create a new one?
  • Click Yes and it will open a blank Notepad window. Write something and save that.
  • Now try to delete it manually.

Plan C

  • Go here and download a demo version of Delete FXP Files 2009 to your desktop.
  • You should scroll down and you will see download link for Demo installer EXE
  • Now please install that program and run it.
  • Find that file and try to delete it within that program

Please let me know the results.
  • 0

#38
moe jr

moe jr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 210 posts
Just a quick question. In the quote box you typed del and the rest is in quotes, do I include del and the quotation marks when I paste it?
  • 0

#39
Render

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
Yes. You have to include quotation marks.:)
  • 0

#40
moe jr

moe jr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 210 posts
UPDATE! I just went to My Documents and the file is gone. I don't know when it happened, but it did. That's a relief. The icons are a little smaller than they use to be, do you know how I can restore them to their old size?
  • 0

Advertisements


#41
moe jr

moe jr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 210 posts
Speaking of My Documents I have a couple of files that I can't open because I get this msg:

This Application Has Failed Because mmgit.dll was not found

I think I may have accidently deleted it a while ago. Where can I download the file again to replace it?
  • 0

#42
Render

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
Right click on an empty space on your desktop and click on Properties.
Display properties window will open.
Click on Appearance tab.
Click on Advanced button.
Under Item: drop down menu select Icon.
You can change the size of the icons under Size: option.
Click on OK when finished.

NEXT...

You have to update your Windows XP to Service Pack 3.

Do that using Windows Update or you can download Service pack 3 here and install it.
  • 0

#43
Render

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts

This Application Has Failed Because mmgit.dll was not found

Seems like a library that belongs to Musicmatch. Are those files you can't open music/sound files?
  • 0

#44
moe jr

moe jr

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 210 posts
yes, they are.
  • 0

#45
Render

Render

    Trusted Helper

  • Malware Removal
  • 4,195 posts
Musicmatch is no longer supported application. You can download and install old versions from here if you wish.

I recommend you to install and use one of these much better alternatives:
But let's concentrate on your security issues first. So please install Windows XP Service Pack 3 first.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP