This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

virus problem

38 min read

This thread's last reply is from October 10, 2008, 7:59 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Empty this folder:

C:\QooBox\Quarantine\

Empty Recycle Bin.

Still problems?
yes I'm still having one problem. everything was fixed but this one thing. when I use my spybot search and destroy it still says that there is a "wild tangent" for a problem and it's kind is there are 3 entries and they are PUPS. I try to fix problem and it says it couldn't remove those three, it will get rid of anything else that shows up but not those three entries. do you know how I can get rid of those?
Please post then spybot report next :)
I don't really know how to do that I looked at it in every way that I could but it doesn't show how I can do that.
This should work:

* Open SpyBot.
* Check for problems.
* When the scan completes, right click on the results list, select "Copy results to clipboard".
* Paste (Ctrl+V) those results into a new post.
ok, I think I did it right so here it is.


Hint of the Day: Click the bar at the right of this to see more information! ()


WildTangent: [SBI $3A3BDC07] Program directory (Directory, nothing done)
C:\WINDOWS\wt\

WildTangent: [SBI $76830867] Program directory (Directory, nothing done)
C:\WINDOWS\wt\wtupdates\

WildTangent: [SBI $AEA200D6] Program directory (Directory, nothing done)
C:\WINDOWS\wt\wtupdates\WireControl\


--- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) ---

2008-07-07 blindman.exe (1.0.0.8)
2008-07-07 SDFiles.exe (1.6.0.4)
2008-07-07 SDMain.exe (1.0.0.6)
2008-07-07 SDShred.exe (1.0.2.3)
2008-07-07 SDUpdate.exe (1.6.0.8)
2008-07-07 SDWinSec.exe (1.0.0.12)
2008-07-07 SpybotSD.exe (1.6.0.30)
2008-08-18 TeaTimer.exe (1.6.2.23)
2008-09-05 unins000.exe (51.49.0.0)
2008-07-07 Update.exe (1.6.0.7)
2008-07-07 advcheck.dll (1.6.1.12)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-07-07 SDHelper.dll (1.6.0.12)
2008-06-19 sqlite3.dll
2008-07-07 Tools.dll (2.1.5.7)
2008-09-02 Includes\Adware.sbi (*)
2008-09-09 Includes\AdwareC.sbi (*)
2008-06-03 Includes\Cookies.sbi (*)
2008-09-02 Includes\Dialer.sbi (*)
2008-09-09 Includes\DialerC.sbi (*)
2008-07-23 Includes\HeavyDuty.sbi (*)
2008-09-02 Includes\Hijackers.sbi (*)
2008-09-02 Includes\HijackersC.sbi (*)
2008-09-09 Includes\Keyloggers.sbi (*)
2008-09-23 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2008-09-09 Includes\Malware.sbi (*)
2008-09-23 Includes\MalwareC.sbi (*)
2008-09-02 Includes\PUPS.sbi (*)
2008-09-11 Includes\PUPSC.sbi (*)
2007-11-07 Includes\Revision.sbi (*)
2008-06-18 Includes\Security.sbi (*)
2008-09-02 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2008-09-09 Includes\Spyware.sbi (*)
2008-09-23 Includes\SpywareC.sbi (*)
2008-06-03 Includes\Tracks.uti
2008-09-16 Includes\Trojans.sbi (*)
2008-09-23 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll
Please download the OTMoveIt3 by OldTimer.
  • Save it to your desktop.
  • Please double-click OTMoveIt3.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
  • Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):


    :files
    C:\WINDOWS\wt

  • Return to OTMoveIt3, right click in the "Paste List of Files/Folders to Move" window (under the yellow bar) and choose Paste.
  • Click the red Moveit! button.
  • Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  • Close OTMoveIt3

Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.
ok here is what I got.


Error: Unable to interpret <:> in the current context!
========== FILES ==========
C:\WINDOWS\wt\wtupdates\WireControl\1.0.0.63\files\install moved successfully.
C:\WINDOWS\wt\wtupdates\WireControl\1.0.0.63\files\controlpanel moved successfully.
C:\WINDOWS\wt\wtupdates\WireControl\1.0.0.63\files moved successfully.
C:\WINDOWS\wt\wtupdates\WireControl\1.0.0.63 moved successfully.
C:\WINDOWS\wt\wtupdates\WireControl moved successfully.
C:\WINDOWS\wt\wtupdates moved successfully.
C:\WINDOWS\wt moved successfully.

OTMoveIt3 by OldTimer - Version 1.0.2.2 log created on 09272008_152806
Please re-scan with spybot and tell me if it still finds something :)
ok I did the check and deleting the 6 problems then re-checked and found nothing so I'm good thanks, but it still seems like it's running slower then it should be is there anything other then defraging and clearing some data to get it running faster?
For general slowness, see here and post back if it helped :)
I did everything on that list and when I load somethings it's still abnormally slow. I don't know but thanks for all your help you did everything I could imagine to clear up my problems. I'm sure that it's just it's been so long since I saw this thing run properly that I exxagerated how fast it really is.
How old is your windows installation?
it's a Centrino duo processor, I got 2GB of RAM, and I bought it custom made in 06. it's a Dell INSPIRON E1505 and I'm using windows XP and I am Vista capable.

I hope that's all that you were asking for and probably a little more.
OK, so that should be fine.

I can re-direct you to some windows forum for that.

Is it OK?