this computer make the internet slow when it turn on.

[kuszmania9999]

i also have tried taking out the hdd and make it as a slave in my own computer (windows xp) then run full scan of avira but no result

[evilfantasy]

Go HERE and install then run the Dr. Web CureIt and post that log.

[kuszmania9999]

well, after the full scan, it didn't find anything in that "main computer" by i did try scanning the other computer ( PC 06 & PC 03 ) and found something. However, i still sure this main computer affecting the rest when it turn on.

[kuszmania9999]

PC 06 Dr. Web CureIt Log

tsad.dll;C:\WINDOWS;Adware.TSAdvert;;
mirc.exe;C:\mIRC;Program.mIRC.601;;
mirc32.exe;C:\mIRC\backup;Program.mIRC.590;;
scoop.exe;C:\Scoop2000;Program.mIRC.570;;
MS-DOS Mode for Games.pif;D:\;BackDoor.Oblivion.1;Deleted.;
FOLDER.HTT\VbScript.3;D:\CYBER\FOLDER.HTT;VBS.Moks;;
FOLDER.HTT;D:\CYBER;Archive contains infected objects;Moved.;
MS-DOS Mode for Games.pif;D:\CYBER;BackDoor.Oblivion.1;Deleted.;
FOLDER.HTT\VbScript.3;D:\CYBER\FIFA\FOLDER.HTT;VBS.Moks;;
FOLDER.HTT;D:\CYBER\FIFA;Archive contains infected objects;Moved.;
MS-DOS Mode for Games.pif;D:\CYBER\FIFA;BackDoor.Oblivion.1;Deleted.;
FOLDER.HTT\VbScript.3;D:\CYBER\awang papar file\FOLDER.HTT;VBS.Moks;;
FOLDER.HTT;D:\CYBER\awang papar file;Archive contains infected objects;Moved.;
MS-DOS Mode for Games.pif;D:\CYBER\awang papar file;BackDoor.Oblivion.1;Deleted.;
FOLDER.HTT\VbScript.3;D:\CYBER\aku\FOLDER.HTT;VBS.Moks;;
FOLDER.HTT;D:\CYBER\aku;Archive contains infected objects;Moved.;
MS-DOS Mode for Games.pif;D:\CYBER\aku;BackDoor.Oblivion.1;Deleted.;
FOLDER.HTT\VbScript.3;D:\DRIVER\FOLDER.HTT;VBS.Moks;;
FOLDER.HTT;D:\DRIVER;Archive contains infected objects;Moved.;
MS-DOS Mode for Games.pif;D:\DRIVER;BackDoor.Oblivion.1;Deleted.;
FOLDER.HTT\VbScript.3;D:\DRIVER\LAN\FOLDER.HTT;VBS.Moks;;
FOLDER.HTT;D:\DRIVER\LAN;Archive contains infected objects;Moved.;
MS-DOS Mode for Games.pif;D:\DRIVER\LAN;BackDoor.Oblivion.1;Deleted.;
FOLDER.HTT\VbScript.3;D:\DRIVER\4IN1NA\FOLDER.HTT;VBS.Moks;;
FOLDER.HTT;D:\DRIVER\4IN1NA;Archive contains infected objects;Moved.;
MS-DOS Mode for Games.pif;D:\DRIVER\4IN1NA;BackDoor.Oblivion.1;Deleted.;
FOLDER.HTT\VbScript.3;D:\DRIVER\USB\FOLDER.HTT;VBS.Moks;;
FOLDER.HTT;D:\DRIVER\USB;Archive contains infected objects;Moved.;
MS-DOS Mode for Games.pif;D:\DRIVER\USB;BackDoor.Oblivion.1;Deleted.;
FOLDER.HTT\VbScript.3;D:\Tmp\FOLDER.HTT;VBS.Moks;;
FOLDER.HTT;D:\Tmp;Archive contains infected objects;Moved.;
MS-DOS Mode for Games.pif;D:\Tmp;BackDoor.Oblivion.1;Deleted.;
FOLDER.HTT\VbScript.3;D:\Raiden II\FOLDER.HTT;VBS.Moks;;
FOLDER.HTT;D:\Raiden II;Archive contains infected objects;Moved.;
MS-DOS Mode for Games.pif;D:\Raiden II;BackDoor.Oblivion.1;Deleted.;

[kuszmania9999]

PC 03 Dr. Web CureIt Log



tsad.dll;C:\WINDOWS;Adware.TSAdvert;Deleted.;
mirc.exe;C:\mirc;Program.mIRC.602;Deleted.;
mirc32.exe;C:\mirc\backup;Program.mIRC.591;Deleted.;
scoop.exe;C:\Scoop2000;Program.mIRC.570;Deleted.;
mirc32.exe;D:\mirc\backup;Program.mIRC.591;Deleted.;

[kuszmania9999]

This "Main Computer" acting as a server, sorry forgot to wrote that.

[evilfantasy]

Looks like you need to run all of the steps in the removal guide.

[kuszmania9999]

I got 1 pc here with windows xp, everytime i ran "web cure it" it shutdown somewhere around 3% completed
Same with running Avira anti virus, but this computer works fine except while scanning.
I can't hook it as a slave because the screw for the HDD to tight!

[evilfantasy]

Try this.

TrendMicro Sysclean

Create a new folder on the desktop by Right-Clicking an empty area of the desktop and select New > Folder. Name it Sysclean.

1. Download Sysclean by Trendmicro and save it to the new folder on your Desktop.
2. Download the latest Pattern Files from Trendmicro and save it to the same folder as the Sysclean. Pattern file is in Zip format such as lptxxx.zip (Windows)
3. Extract the contents of the lptxxx.zip in the folder where Sysclean in located.

• It will only work if these are in the same folder.

4. Reboot computer in SafeMode

    a) During BootUp process Press F8 continuously until selection appears
    b) Use Arrow Up+Down to select SafeMode on the selections menu.
    c) Hit Enter to proceed.

5. If it requires you to login please use the login name with administrative rights. Without this privilege, Sysclean will not delete/clean infected files located on System folder.
6. Open the Sysclean folder on on your Desktop and Double-click Sysclean to run and do a full system scan. This may take time. Reboot when finished, repeat as desired to make sure that all threats are removed.

[kuszmania9999]

well, it still shutting down
I'm going to turn this computer on for a while to make sure that it is not caused by overheating...After that i post the result

[kuszmania9999]

for a few days all of the computer acting fine, i mean the internet connection, and guess what, the ISP told us that they having problem ( They didn't mention earlier!) because of cables underseas thing...
Probably related to this.....
http://news.yahoo.com/s/ap/20080208/ap_on_hi_te/mideast_internet_outage

I think this thread solve already.

[evilfantasy]

Thanks for letting us know.