also @ TechSpot: Bill Gates is once again the richest person in the world

Task Manager Doesn't Work, Another Program Is Currently Using This File

Discussion in 'Virus and Malware Removal' started by .BillBert, Jul 29, 2008.

  1. .BillBert Newcomer, in training Posts: 52

    Hi,

    I have recently discovered this problem a few days ago.
    What ever I do, I cant get Task Manager to display.
    And whenever i try to run some of my Control Panel Tools I get this error "Another program is using this file."

    Many Thanks

    After going to

    Viruses/Spyware/Malware, preliminary removal instructions

    I was able to use my task manger, but some of my control panel tools are still in used

    here are my logs plz help

    Attached Files:

  2. .BillBert Newcomer, in training Posts: 52

    What can I remove

    And I was wondering, if i could remove some of the programs I installed that were listed on that Forum

    Thanks
  3. .BillBert Newcomer, in training Posts: 52

    Oh yea i also had a program with windows during the removal.

    It was LULnchr.exe [5924]

    And after that everything stop working, But I dont know if it still does that.

    Hopfully this info helps
  4. kimsland Ex-TechSpotter Posts: 18,353

    Download RatsCheddar
    http://rathat.geekstogo.com/Applications/RatsCheddar.zip

    It contains a program written by Rathat, and it is a Policy Controller.
    Save and extract this program to the desktop.
    Once extracted, click on the RatsCheddar.exe file.
    Enable everything, then click Exit
    Reboot your Computer.

    I have not checked logs
  5. .BillBert Newcomer, in training Posts: 52

    That didnt do anything my Some of my Applications are still in used by another program

    Thanks for the help
  6. kimsland Ex-TechSpotter Posts: 18,353

     
  7. .BillBert Newcomer, in training Posts: 52

    Thanks i dont have that problem now

    But I still need help with the applications.
  8. .BillBert Newcomer, in training Posts: 52

    Plz Help

    Im been patiently waiting for help, i dunno if you're looking over my logs r not, if you are can you please tell me, so i wouldnt be wondering about this post.
    Thank you
  9. kimsland Ex-TechSpotter Posts: 18,353

    Hi .BillBert,

    Those logs.

    I personally am not experienced enough with instruction on what to do with the log entries.
    I was hoping that another member may check (and possibly still might)

    Glad at least the problem has gone :)
  10. .BillBert Newcomer, in training Posts: 52

    Thank you Kimsland

    I'll wait a little more for someone to help me or
    Maybe I should rename my thread? (but dont know how)

    Yes some of the problem is gone, but i still need help with my Applications
  11. xxdanielxx Newcomer, in training Posts: 1,214

    Open hijackthis and place a check next to the item below

    O4 - .DEFAULT User Startup: IEHOME.LNK = C:\Documents and Settings\Default User\Local Settings\Temp\iehome.bat (User 'Default user')
    O20 - AppInit_DLLs: myusemt.dll wcnonpe.dll woswelc.dll googlons.dll welyri.dll fssetle.dll jolinos.dll jolin0.dll hourpx2.dll theralte.dll


    --------------------------------

    Please run an on-line virus scan at http://www.kaspersky.com/virusscanner[b][color=blue]Kaspersky OnLine Scan[/color][/b] or if that doesnt work, you can use TrendMicro or BitDefender. (Please post the results of the scan(s) in your next reply)
  12. .BillBert Newcomer, in training Posts: 52

    I did what you told me i check on them and fixed them, but that didnt slove the program im still having

    Sorry i didnt see the scan part i thought it was part of ur slogan are something haha
  13. adu123 TechSpot Maniac Posts: 301

    place a checkmark next to the following entry:

    F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,svchost.xy3
    and click "fix"

    Right-click your Start button and go to "Explore", please delete these files (if present):

    C:\WINDOWS\system32\svchost.xy3

    C:\WINDOWS\system32\myusemtk.exe

    myusemt.dll
    wcnonpe.dll
    woswelc.dll
    googlons.dll
    welyri.dll
    fssetle.dll
    jolinos.dll
    jolin0.dll
    hourpx2.dll
    theralte.dll


    hopes that help:)
  14. xxdanielxx Newcomer, in training Posts: 1,214

    I had to go to sleep last night but yes we need to remove the file said above it is a lot easier using a the method below. Also if you can post the results from the test

    Please download the OTMoveIt2 by OldTimer.
    • Save it to your desktop.
    • Please double-click OTMoveIt2.exe to run it. (Vista users, please right click on OTMoveit2.exe and select "Run as an Administrator")
    • Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

      Code:
      C:\WINDOWS\system32\svchost.xy3
      C:\WINDOWS\system32\myusemtk.exe
    • Return to OTMoveIt2, right click in the "Paste List of Files/Folders to Move" window (under the light Yellow bar) and choose Paste.
    • Click the red Moveit! button.
    • A log of files and folders moved will be created in the c:\_OTMoveIt\MovedFiles folder in the form of Date and Time (mmddyyyy_hhmmss.log). Please open this log in Notepad and post its contents in your next reply.
    • Close OTMoveIt2
    If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.
  15. .BillBert Newcomer, in training Posts: 52

    Yea haha i had to go to sleep to...

    and its 10 in the morning so.. i need to go back to sleep

    Heres my scan (it doesnt look good...)

    I might be back at around 1, till then :)
  16. xxdanielxx Newcomer, in training Posts: 1,214

    Download & Install SDFix
    • Download SDFix & save it to your Desktop.
    • Double click SDFix.exe & it will extract the file to %systemdrive%
      (Drive that contains the Windows Directory, Typically C:\SDFix)

    Boot into Safe Mode
    • Restart your computer & start pressing the F8 key on your keyboard.
    • Select the Safe Mode option when the Windows Advanced Options menu appears, & then press Enter.

    Run SDFix
    • Open the extracted SDFix folder & double click RunThis.bat to start the script.
    • Type Y to begin the cleanup process.
    • It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
    • Press any Key and it will restart the PC.
    • When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
    • Once the desktop icons load the SDFix report will open on the screen & also save into the SDFix folder as Report.txt
    • Attach Report.txt back here
  17. .BillBert Newcomer, in training Posts: 52

    I should do the OTMoveIt2 by OldTimer. First right?
  18. .BillBert Newcomer, in training Posts: 52

    My OTMoving Text

    I never thought that svchost was a virus, i've always seen it in my task manger

    PS I'll do that last part later im really tired right now...
  19. Blind Dragon TechSpot Evangelist Posts: 4,048

    Sorry for cutting in but you need to fix this

    Fix the above mentioned hijackthis entries

    Download win32delfkil.exe.
    Save it on your desktop.
    Double click on win32delfkil.exe and install it. This creates a new folder on your desktop: win32delfkil.
    Close all windows, open the win32delfkil folder and double click on fix.bat.
    The computer will reboot automatically.
    Post the contents of the logfile c\windelf.txt.

    =====================================================


    Run CFScript

    Open notepad and copy/paste the text in the code box below into it:
    NOTE* make sure to only highlight and copy what is inside the quote box nothing out side of it.
    Also ..

    Pay particular attention to this :-

    Make sure the word File:: is on the first line of the text file you save (no blank line above it, & no space in front of it)
    Save this as CFScript.txt

    Then drag the CFScript.txt into ComboFix.exe as you see in the screenshot below.

    [IMG]

    This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply

    ====================================================



    Attach the combofix log
    the windelf.txt log
    and a new hijackthis log
  20. .BillBert Newcomer, in training Posts: 52

    I did what you told my Blind Dragron, but I dont know if I did the win32delfkiller property because it did not create a file named win32delf. When i ran it it just did the file searching

    Here are my logs