M
New Helpee
Posts: 22
|
Post by M on Oct 20, 2014 7:43:57 GMT -8
Yes my system seems to not have the dllhost.exe*32 starting up anymore here is the adwcleaner results:
Attachment Deleted
|
|
M
New Helpee
Posts: 22
|
Post by M on Oct 20, 2014 7:51:10 GMT -8
Now my system is getting over run with *32 on all my programs its getting worse here is an image:
task manager.rtf
|
|
M
New Helpee
Posts: 22
|
Post by M on Oct 20, 2014 7:57:18 GMT -8
I might have to shut down my computer soon the cpu is over working due to this *32 thing. Should I run the clean before I do?
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
Post by Quads on Oct 20, 2014 12:55:55 GMT -8
Don't worry about Adwcleaner for now
We have something more important to deal with TRACUR / ZBOT or similar
Delete the addition.txt that is ony your desktop (the file FRST creates)
Then Start FRST and before starting a scan make sure the addition option is ticked / selected
Then run a new scan with FRST
Post back the 2 new FRST.txt and addition.txt logs it creates
Quads
|
|
M
New Helpee
Posts: 22
|
Post by M on Oct 20, 2014 13:26:01 GMT -8
K Here are the frst.tst and addition.txt files:
Addition.txt
FRST.txt
The additions box was checked with theses.
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
Post by Quads on Oct 20, 2014 13:43:25 GMT -8
You may want to read carefully all of this message first before starting the steps.
NOTE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Download the script attached, needs to be the same file name as well (fixlist.txt), have it on the Desktop, so that fixlist.txt is next to FRST64.exe,
DO NOT DRAG AND DROP to download the script, it won't work for FRST (Right click on the attachment link (not the normal left click) and from the menu choose Save As or Save Link as.)
The script tells FRST what to do.
Start FRST that is on the desktop When the tool opens click Yes to disclaimer. (if it still does)
Press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) please post it to your reply (attach or paste)
|
|
M
New Helpee
Posts: 22
|
Post by M on Oct 20, 2014 13:53:29 GMT -8
Ok I ran the fix. Here is the fixlog.txt
Attachment Deleted
I was looking at my task manager and all of my programs have a *32 after them. For example my Dropbox.exe looks like this Dropbox.exe*32 same goes for a lot of my .exe applications. Why is that?
Here is a shot of my print screen to show you what I mean.
Attachment Deleted
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
Post by Quads on Oct 20, 2014 13:59:46 GMT -8
They are 32 bit programs (processes) running on a 64 bit Operating System so the process gets *32 on the end
Has the system calmed down now after the Breaking of Tracur / Zbot??
Quads
|
|
M
New Helpee
Posts: 22
|
Post by M on Oct 20, 2014 14:01:39 GMT -8
Yes it has calmed down. The same thing happened the first time and it seemed fixed until it started up again. Do you think it's good now?
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
Post by Quads on Oct 20, 2014 14:08:53 GMT -8
Poweliks and Tracur or Zbot are different malware and we have had a hand full of systems where as we are dealing with Poweliks Tracur or Zbot starts itself up.
Now you can wait for your help to then carry on with Adwcleaner and whatever else he wants to do as steps.
Quads
|
|