Bandwidth Mystery, help!

Zurles · Nov 24, 2006

Sup, well..

i once foolish clicked a porno link, and yep, i got some kind of virus.
i use AVG antivirus, freeversion and at first, my computer was saying that my version of windows is counterfeit. so ok i followed the instructions on this site, ran all the antivirus, safe mode.. step by step, perfect...

ok so the counterfeit problem is gone, windows now recognizes itself as genuine, and everything else is fine. except for one problem my internet speed is up and down like a yo-yo. i'm from the uk and i use the adsl service freedom 2 surf. so i ring the tech support, they their latency to me is around 1500ms, which should be around 17. so i turn my computer off and he says the latency to me becomes 17. which is perfect. there are 3 computers on my network. 1 is broken, 1 is a wireless laptop which works perfectly online if it runs without this computer on at the same time. and this one, which is wired and the latency turns huge every for long lengths of time, and is rarely what it should be. it is making things unplayable and i have no idea how to remove it. i have followed every step and have since deleted the logs because i thought the problem was fixed.

before i am forced to do the WHOLE procedure all over again, which takes a damn few hours on my computer. is there any easy simple method to attempt to fix this? what should i do?.. thanks, Dean

howard_hopkinso · Nov 24, 2006

Hello and welcome to Techspot.

Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.

If you`ve already followed the above instructions, then post the log files as requested below.

Post fresh HJT and AVG Antispyware logs as attachments into this thread, only after doing the above.

Regards Howard :wave: :wave:

This thread is for the use of Zurles only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

Zurles · Nov 24, 2006

k, avg found nothing thats why i didnt post

howard_hopkinso · Nov 24, 2006

Download the Pocket Killbox programme from HERE. Extract it but don`t run it yet.

You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.

Turn off system restore.(XP/ME only) See how here.> http://www.bleepingcomputer.com/forums/tutorial56.html

Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how here.> http://www.bleepingcomputer.com/forums/tutorial61.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how here.> http://www.bleepingcomputer.com/forums/tutorial62.html

Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

O2 - BHO: (no name) - {3301A7C2-0ABD-11D4-914D-00C04F610D24} - D:\WINDOWS\system\comcrt32.dll

O2 - BHO: (no name) - {73364D99-1240-4dff-B12A-67E448373148} - (no file)

O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} -

O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} -

O20 - Winlogon Notify: WBSrv - D:\WINDOWS\<Only fix this, if you`re not running Stardock/Windowblinds.

Click on the fix checked button.

Close HJT.

Run the killbox.exe file. When it loads type the full path to the file you would like to delete in the field and check the delete file on reboot button. press the Delete File button (looks like a red circle with a white X). It will prompt you to reboot, select no until you have finished inputting the files you want to delete, only then allow it to reboot and hopefully your files will now be deleted. If your computer doesn`t automatically restart, restart it manually.

This is the filepath you need to enter into killbox.

D:\WINDOWS\system\comcrt32.dll

Once your system has rebooted, turn system restore back on and rehide your protected OS files.

Post a fresh HJT log and let me know how your system is running.

Regards Howard