Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 93101 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

Help with this log, please


  • This topic is locked This topic is locked
26 replies to this topic

#16 LDTate

LDTate

    Grand Poobah

  • Root Admin
  • 57,211 posts

Posted 20 November 2005 - 03:10 PM

*fingers crossed*

I think I may have solved it already, who says a fervent prayer doesnt help anything? :D Thankyou very much for all your help, it is very much appreciated.

I pray all the time.

I think I may have solved it already

What did you do?

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 

    Advertisements

Register to Remove


#17 Jenas

Jenas

    New Member

  • Authentic Member
  • Pip
  • 13 posts

Posted 21 November 2005 - 03:26 PM

Hmm, I spoke a little too soon. I completely uninstalled the old SpyBot and then deleted any remaining files. Then I installed a completely new copy and updated it, however I am still having the same problem. It finds the problem, but then it says it cannot remove them and asks if it can run on the next restart. Even if I click yes, it runs but then has the same problem. This thing is a right pain, even if I track it down to its addy in the directory, if I try to delete it I get 'cyclic' error. Should I try the Killbox prog on this? Thanks again for any advice, Jenas

#18 LDTate

LDTate

    Grand Poobah

  • Root Admin
  • 57,211 posts

Posted 21 November 2005 - 04:25 PM

It finds the problem, but then it says it cannot remove them and asks if it can run on the next restart.

Does it list where the problem files / programs are?

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 


#19 Jenas

Jenas

    New Member

  • Authentic Member
  • Pip
  • 13 posts

Posted 26 November 2005 - 12:24 PM

Sorry for the slow rear response again.

Yes it lists the location of this tenacious little bugger as:

C:\ Documents and Settings\All Users\Documents\Hotbar

But if I try to manually delete the folders I get the 'cyclic' error thing-amy-bob.

#20 LDTate

LDTate

    Grand Poobah

  • Root Admin
  • 57,211 posts

Posted 26 November 2005 - 02:36 PM

Backup your Registry...
- Press "CTRL - ALT - DEL" keys all at the same time to start "Task Manager"
- In the Task Manager window click on "File", then from the drop-down menu select "New Task (Run...)"
- In the "Create New Task" window enter\type "regedit" (without quotes)
- Once Regedit opens click on the FILE menu and select Export
- Save the file as backup. Save the file somewhere you will remember and not delete.
IMPORTANT: make sure to set the export range to ALL



click Start>Run and type regedit tap enter key.


Regedit will open. Make sure My Computer is highlighted. At the top of the window click edit> Find> then copy and paste the following into the window.

Hotbar

Then click find now.
When you find the entry right click on it and select delete, answer ok at the prompt.
Next, press "F3" to continue searching, if another instance is found, repeat the above steps, until you see the "completed searching" message.

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 


#21 Jenas

Jenas

    New Member

  • Authentic Member
  • Pip
  • 13 posts

Posted 27 November 2005 - 02:29 PM

Ok, thanks for that idea, however I tried that as you suggested but when I ran the next SpyBot, after the search it came up again, after I clicked delete the 'Fix selected problems' it said it couldnt delete that one as it was in use 'may still be in memory'. Annoying little beggar it is.

#22 LDTate

LDTate

    Grand Poobah

  • Root Admin
  • 57,211 posts

Posted 27 November 2005 - 02:31 PM

C:\ Documents and Settings\All Users\Documents\Hotbar
Do you see this listed?

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 


#23 Jenas

Jenas

    New Member

  • Authentic Member
  • Pip
  • 13 posts

Posted 03 December 2005 - 09:47 AM

Yep, thats it, apparently its in the directory when I click on the more info button.

#24 LDTate

LDTate

    Grand Poobah

  • Root Admin
  • 57,211 posts

Posted 03 December 2005 - 10:26 AM

Lets see if we can kill it this way.

Download Pocket Killbox version 2.0.0.175
http://www.atribune....ads/KillBox.exe
If you already have Killbox first ensure it is this version !.

Start Killbox, Use standard file kill.(default settings).
Copy this whole list into the windows clipboard, all the Bolded below.

C:\ Documents and Settings\All Users\Documents\Hotbar

Back in Killbox go > file > paste from clipboard, now click the red X
that looks like a stop sign, wait until a success message appears.


When finished exit Killbox and restart your PC.

If that didn't work, list all the files in the Hotbar folder.

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 


#25 Jenas

Jenas

    New Member

  • Authentic Member
  • Pip
  • 13 posts

Posted 03 December 2005 - 05:32 PM

Thanks again for the help, however ... Aaargh!!! Killbox says it cannot delete this persistant little beggar. Inside the Hotbar folder there is a 'Dynamic' folder, inside that there is a 'TooltipXML' folder along with a '1383637.sdf' SDF file, that is 3kb in size (if that helps at all) while inside the Tooltip folder there is a file titled '17502' of 2kb in size. If I try to do anything at all to the 17502 file I cannot get a menu button up at all. I tried to vape some of the files inside the Hotbar folder with the Killbox but if I do it says they do not exist?? /pulls out hair :blink:

    Advertisements

Register to Remove


#26 LDTate

LDTate

    Grand Poobah

  • Root Admin
  • 57,211 posts

Posted 03 December 2005 - 05:35 PM

Lets see if HJT will kill them

Close all windows and browsers.
Open HijackThis

Click on Open Misc Tools
Click on Delete a File On Reboot
Click once on the file below to select it:
Go to where the files are listed and add them



Click on the Back button to exit Process Manager

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 


#27 LDTate

LDTate

    Grand Poobah

  • Root Admin
  • 57,211 posts

Posted 21 December 2005 - 09:49 PM

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoy...showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 

Related Topics



2 user(s) are reading this topic

0 members, 2 guests, 0 anonymous users