Tech Support Forum - View Single Post - computer running slow, problem with Rundll32.exe

**Angelfire777** · 08-20-2008, 11:42 AM

Hi,

I see you probably tried to download a full version of counterstrike through limewire. As you've seen in the scan report, the one you downloaded is infected. Downloading such programs from unreliable sources could spell disaster and that is exactly what happened to you. Please avoid doing so next time.

Please uninstall counter strike from your computer or you may get reinfected again soon.

Empty your recycle bin.

Open notepad.
Copy and paste the text inside the Code Box below into Notepad
Choose File > Save As and under "Save as type", choose "All Files".
Type clean.bat in the File name and save it to your desktop.

Code:

@echo off 

sc delete zenx1
sc delete xp1
sc delete unrealordBypass
sc delete serb1
sc delete sejt1
sc delete PCHWDRVDEVICE0
sc delete IlvMoneyDRIVER53
sc delete GR
sc delete Dual2
sc delete DISK_DRIVE32
sc delete Dua1
sc delete DBKDRVR54

if exist "%temp%\log.txt" del "%temp%\log.txt"

for %%g in ( 
"C:\Documents and Settings\amyho.RYAN\Desktop\sspsetup4259_.exe"
"C:\Documents and Settings\ryanho.RYAN\My Documents\LimeWire\Saved\broken heart donnie j.mp3"
"C:\Documents and Settings\ryanho.RYAN\My Documents\LimeWire\Saved\rolling stones donnie klang.mp3"
"C:\Documents and Settings\ryanho.RYAN\My Documents\LimeWire\Saved\shake it big bang.mp3"
"C:\Documents and Settings\ryanho.RYAN\My Documents\LimeWire\Saved\storm of trance lost angels.mp3"
"C:\Documents and Settings\ryanho.RYAN\Shared\counter strike bittorrent downloader.zip"
"C:\Documents and Settings\ryanho.RYAN\Shared\counter strike.zip"
"C:\WINDOWS\system2420172.exe"
) do ( 
del /a/f/q %%g 
if exist %%g echo.%%g >>"%temp%\log.txt" 
)>nul 2>&1 

if exist "%temp%\log.txt" (start notepad "%temp%\log.txt" 
) else echo.Deleted Successfully! 
echo. 
pause 
del %0

Locate clean.bat on your Desktop and double-click on it. Tell me what it says.

On your next reply, please include a

Fresh HijackThis log.
A detailed description on how's your machine running.
results of clean.bat

08-20-2008, 11:42 AM	#12 (permalink)
Angelfire777 Moderator/Analyst, Security Team ; Rangemaster, TSF Academy Join Date: Oct 2006 Posts: 4,580 OS: Vista	Re: computer running slow, problem with Rundll32.exe Hi, I see you probably tried to download a full version of counterstrike through limewire. As you've seen in the scan report, the one you downloaded is infected. Downloading such programs from unreliable sources could spell disaster and that is exactly what happened to you. Please avoid doing so next time. Please uninstall counter strike from your computer or you may get reinfected again soon. Empty your recycle bin. Open notepad. Copy and paste the text inside the Code Box below into Notepad Choose File > Save As and under "Save as type", choose "All Files". Type clean.bat in the File name and save it to your desktop. Code: @echo off sc delete zenx1 sc delete xp1 sc delete unrealordBypass sc delete serb1 sc delete sejt1 sc delete PCHWDRVDEVICE0 sc delete IlvMoneyDRIVER53 sc delete GR sc delete Dual2 sc delete DISK_DRIVE32 sc delete Dua1 sc delete DBKDRVR54 if exist "%temp%\log.txt" del "%temp%\log.txt" for %%g in ( "C:\Documents and Settings\amyho.RYAN\Desktop\sspsetup4259_.exe" "C:\Documents and Settings\ryanho.RYAN\My Documents\LimeWire\Saved\broken heart donnie j.mp3" "C:\Documents and Settings\ryanho.RYAN\My Documents\LimeWire\Saved\rolling stones donnie klang.mp3" "C:\Documents and Settings\ryanho.RYAN\My Documents\LimeWire\Saved\shake it big bang.mp3" "C:\Documents and Settings\ryanho.RYAN\My Documents\LimeWire\Saved\storm of trance lost angels.mp3" "C:\Documents and Settings\ryanho.RYAN\Shared\counter strike bittorrent downloader.zip" "C:\Documents and Settings\ryanho.RYAN\Shared\counter strike.zip" "C:\WINDOWS\system2420172.exe" ) do ( del /a/f/q %%g if exist %%g echo.%%g >>"%temp%\log.txt" )>nul 2>&1 if exist "%temp%\log.txt" (start notepad "%temp%\log.txt" ) else echo.Deleted Successfully! echo. pause del %0 Locate clean.bat on your Desktop and double-click on it. Tell me what it says. On your next reply, please include a Fresh HijackThis log. A detailed description on how's your machine running. results of clean.bat __________________ UNITE and ASAP since 2006 If we have helped you, please consider donating. The past won't be able to hurt you unless you keep on looking back at it.