Cpu usage dropping and spiking

[jness80537]

I also can not open my desktop icon, and the combofix took a lot of my stuff out of my bar at the bottom of the screen. How do I get those things back?

 

[Jacee]

Right now, I'd like you to scan your machine with ESET OnlineScan

1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
   ESET OnlineScan
2. Click the
   
   button.
3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
   1. Click on
      
      to download the ESET Smart Installer. Save it to your desktop.
   2. Double click on the
      
      icon on your desktop.
4. Check
   
5. Click the
   
   button.
6. Accept any security warnings from your browser.
7. Check
   
8. Push the Start button.
9. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
10. When the scan completes, push
    
11. Push
    
    , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
12. Push the
    
    button.
13. Push
    

 

[jness80537]

My pc crashed in the middle of the ESET scan, should I start it over?

 

[Jacee]

Let's do a couple of other things first ....
Flush the DNS cache and restore MS's Hosts file:
Copy and paste these lines in Note pad.

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save as flush.bat to your desktop.
Double click on the flush.bat file to run it.Vista and Windows 7... right click the .bat file and choose to run as Administrator. Your computer will reboot itself.


Next:
Download CKScanner by askey127 from HERE
Important - Save it to your desktop.
Doubleclick CKScanner.exe and click Search For Files.
After a very short time, when the cursor hourglass disappears, click Save List To File.
A message box will verify the file saved.
Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.

 

[jness80537]

I did the flush.bat, but the CKScanner is not working. I click on search for files, and then it goes to the hourglass, then a window pops up saying its not responding, and asks if I want to kill it or wait. The first time I waited and nothing happened, the second time I killed it and it said windows is searching for a solution and then the box closes.

 

[Jacee]

See if you can get it to run by right clicking and choosing to run as Administrator.

 

[jness80537]

It finally worked. Here is the ckscanner.txt file:


CKScanner - Additional Security Risks - These are not necessarily bad
c:\downloads\games\battlefield 1942 + expansions\patch + keygens\patch v1.61b cracked.exe
c:\downloads\games\battlefield 1942 + expansions\patch + keygens\keygens\battefield 1942.exe
c:\downloads\games\battlefield 1942 + expansions\patch + keygens\keygens\road to rome.exe
c:\downloads\games\battlefield 1942 + expansions\patch + keygens\keygens\secret weapons of ww2.exe
c:\downloads\utorrent\auto-load\alcohol_120__1.9.6.4629_retail___crack.3551408.tpb.torrent.loaded
c:\downloads\utorrent\auto-load\fish.tycoon.crack.4012780.tpb.torrent.loaded
c:\downloads\utorrent\downloads\reflexive games\- reflexive patches -\reflexive keygen\arcade.dat
c:\downloads\utorrent\downloads\reflexive games\- reflexive patches -\reflexive keygen\instructions read !!.txt
c:\downloads\utorrent\downloads\reflexive games\- reflexive patches -\reflexive keygen\reflexivearcade.dll
c:\downloads\utorrent\downloads\reflexive games\- reflexive patches -\reflexive unwrapper-cracker\fff-reflexv2.exe
c:\downloads\utorrent\downloads\reflexive games\- reflexive patches -\reflexive unwrapper-cracker\fff.nfo
c:\downloads\utorrent\downloads\reflexive games\- reflexive patches -\reflexive unwrapper-cracker\file_id.diz
c:\downloads\utorrent\downloads\reflexive games\- reflexive patches -\reflexive unwrapper-cracker\readme.chm
c:\program files\emachines games\blasterball 3\data\art\bitmaps\enemies\boss2_crack.jpg.wkz
c:\program files\emachines games\glyph\data\gfx\common\strata-crack.tga
c:\program files\emachines games\glyph\data\gfx\common\strata-crack.txt
c:\program files\gateway games\cubis gold 2\games\tutorial\tutorial\crack and crumble.xml
c:\program files\gateway games\cubis gold 2\resources\sounds\cubecrack.ogg
c:\program files\gateway games\polly pride pet detective\audio\glass_crack.ogg
c:\program files\gateway games\polly pride pet detective\images\s\fc\a\mirror_crack_strip.pnge
c:\program files\iwin.com\sproink\audio\scrystalcracked.ogg
c:\program files\iwin.com\sproink\images\cracked.pnge
c:\program files\iwin.com\sproink\images\cracked2.pnge
c:\program files\jupiterclub\global\crackerjack1\am_ptvalues_hi2.dat
c:\program files\jupiterclub\global\crackerjack1\am_ptvalues_hi3.dat
c:\program files\jupiterclub\global\crackerjack1\am_ptvalues_mask.dat
c:\program files\jupiterclub\global\crackerjack1\crackerjack1.inf
c:\program files\jupiterclub\global\crackerjack1\deck_backgroundreels.dat
c:\program files\jupiterclub\global\crackerjack1\deck_reel1.dat
c:\program files\jupiterclub\global\crackerjack1\deck_reel2.dat
c:\program files\jupiterclub\global\crackerjack1\deck_reel3.dat
c:\program files\jupiterclub\global\crackerjack1\deck_reel4.dat
c:\program files\jupiterclub\global\crackerjack1\txt_main.dat
c:\program files\jupiterclub\global\crackerjack1\txt_ptvalues.dat
c:\program files\jupiterclub\global\crackerjackcommon\crackerjackcommon.inf
c:\program files\jupiterclub\local\en\crackerjack1\am_ptcoins_hi2.dat
c:\program files\jupiterclub\local\en\crackerjack1\am_ptcoins_mask.dat
c:\program files\jupiterclub\local\en\crackerjack1\crackerjack1.inf
c:\program files\jupiterclub\local\en\crackerjack1\txt_ptcoins.dat
c:\program files\jupiterclub\local\en\crackerjack1\txt_ptcombos.dat
c:\program files\jupiterclub\local\en\crackerjack1\txt_statictext1.dat
c:\program files\jupiterclub\local\en\crackerjack1\txt_statictext2.dat
c:\program files\jupiterclub\local\en\crackerjackcommon\crackerjackcommon.inf
c:\program files\jupiterclub\local\en\menudescriptions\txt_desc_crackerjack1.dat
c:\program files\jupiterclub\mupdb\jupiterclub-en-crackerjack1
c:\programdata\wildtangent\polarpool\cache\dds\c%3a%5cprogram%20files%5cgateway%20games%5cpolar%20pool%5clevels%5cice_cave%5cscene%5ccrack.jpg.dds
c:\programdata\wildtangent\polarpool\cache\dds\c%3a%5cprogram%20files%5cgateway%20games%5cpolar%20pool%5clevels%5cice_cave%5cscene%5ccrack_alpha.jpg.dds
scanner sequence 3.ZZ.11.IGAPMN
----- EOF -----

 

[Jacee]

Please go to your downloads and program files listed in that log, and uninstall all cracks and keygens, then delete the listed folders.

It's really important, if you value your PC at all, to stay away from P2P file sharing programs,
like utorrent, Bittorrent, Azureus, Limewire, Vuze.
Criminals have "planted" thousands upon thousands of infections in the "free" shared files.
Some of the recent infections can turn your machine into a doorstop.
It's also very important to avoid any "cracks" or "Keygens" that allow unauthorized use of programs.
Besides being illegal, these files also are loaded with "planted" malware

After you've done that, update Java! Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update.
Updating Java:

• Download the latest version of Java Runtime Environment (JRE) 7.
  Java SE Downloads
• Scroll down to where it says "Java Runtime Environment (JRE) 7u2 allows end-users to run Java applications".
• Click the "Download" button to the right.
• Check the box that says: "Accept License Agreement".
• The page will refresh.
• Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
• Close any programs you may have running - especially your web browser.
• Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
• Check any item with Java Runtime Environment (JRE or J2SE) in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each Java versions.
• Reboot your computer once all Java components are removed.
• Then from your desktop double-click on jre-7u2-windows-i586-p.exe to install the newest version.

***uncheck any other applications (search providers, etc) that may come bundled with this update.

 

[Jacee]

If you're still with me after doing all of the above, can you tell me if Avira is working again, and can you get Windows important updates?

 

[jness80537]

Hi, most of what is in the list is not in my programs and features. I will look in the individual folders that I have on my pc, to see if there is an uninstall feature for them. There are only 3 or 4 of those items listed in the programs and features.
And on a side note, what did you mean, if I'm still with you?

 

[Jacee]

I just wanted to be sure Most users abandon their topics for help when keygens and cracks are found.

You're doing dood!

 

[jness80537]

No way, I'm already seeing a better performance speed in my pc. I'm not quitting now. Besides I really need my pc to work to the best that it can, as I need it so that I may get my Masters Degree in Human Resources. I have 18 months left of school, and I don't want to quit now, already been in for 4 years.
Thank you for all your help thus far, I'll keep trudging along til we get this fixed.

 

[Jacee]

See if you can get ESET to run for you now.

 

[jness80537]

Hi, just wanted to let you know that I am still here. I haven't felt real good, so I haven't been on the pc as much. I will be back tomorrow to try the ESET scan again.

 

[Jacee]

Okay.... I'd also like to know if you are able to Avira running.

 

[jness80537]

I'm back. Avira is working again, I am now doing a search to find the uninstall files for the cracks. Once I get them uninstalled, I will try and run the ESET scan again.

 

[Jacee]

Good deal

 

[jness80537]

The ones in blue, I have uninstalled. I found the folders for the jupiter club, which is a casino, but there is not an uninstall file, and the rest I am still working on. I do not know how to get rid of the utorrent reflexive crack.

CKScanner - Additional Security Risks - These are not necessarily bad
c:\downloads\games\battlefield 1942 + expansions\patch + keygens\patch v1.61b cracked.exe
c:\downloads\games\battlefield 1942 + expansions\patch + keygens\keygens\battefield 1942.exe
c:\downloads\games\battlefield 1942 + expansions\patch + keygens\keygens\road to rome.exe
c:\downloads\games\battlefield 1942 + expansions\patch + keygens\keygens\secret weapons of ww2.exe
c:\downloads\utorrent\auto-load\alcohol_120__1.9.6.4629_retail___crack.3551408.tpb.torrent.loaded
c:\downloads\utorrent\auto-load\fish.tycoon.crack.4012780.tpb.torrent.loaded
c:\downloads\utorrent\downloads\reflexive games\- reflexive patches -\reflexive keygen\arcade.dat
c:\downloads\utorrent\downloads\reflexive games\- reflexive patches -\reflexive keygen\instructions read !!.txt
c:\downloads\utorrent\downloads\reflexive games\- reflexive patches -\reflexive keygen\reflexivearcade.dll
c:\downloads\utorrent\downloads\reflexive games\- reflexive patches -\reflexive unwrapper-cracker\fff-reflexv2.exe
c:\downloads\utorrent\downloads\reflexive games\- reflexive patches -\reflexive unwrapper-cracker\fff.nfo
c:\downloads\utorrent\downloads\reflexive games\- reflexive patches -\reflexive unwrapper-cracker\file_id.diz
c:\downloads\utorrent\downloads\reflexive games\- reflexive patches -\reflexive unwrapper-cracker\readme.chm
c:\program files\emachines games\blasterball 3\data\art\bitmaps\enemies\boss2_crack.jpg.wkz
c:\program files\emachines games\glyph\data\gfx\common\strata-crack.tga
c:\program files\emachines games\glyph\data\gfx\common\strata-crack.txt
c:\program files\gateway games\cubis gold 2\games\tutorial\tutorial\crack and crumble.xml
c:\program files\gateway games\cubis gold 2\resources\sounds\cubecrack.ogg
c:\program files\gateway games\polly pride pet detective\audio\glass_crack.ogg
c:\program files\gateway games\polly pride pet detective\images\s\fc\a\mirror_crack_strip.pnge
c:\program files\iwin.com\sproink\audio\scrystalcracked.ogg
c:\program files\iwin.com\sproink\images\cracked.pnge
c:\program files\iwin.com\sproink\images\cracked2.pnge
c:\program files\jupiterclub\global\crackerjack1\am_ptvalues_hi2.dat
c:\program files\jupiterclub\global\crackerjack1\am_ptvalues_hi3.dat
c:\program files\jupiterclub\global\crackerjack1\am_ptvalues_mask.dat
c:\program files\jupiterclub\global\crackerjack1\crackerjack1.inf
c:\program files\jupiterclub\global\crackerjack1\deck_backgroundreels.dat
c:\program files\jupiterclub\global\crackerjack1\deck_reel1.dat
c:\program files\jupiterclub\global\crackerjack1\deck_reel2.dat
c:\program files\jupiterclub\global\crackerjack1\deck_reel3.dat
c:\program files\jupiterclub\global\crackerjack1\deck_reel4.dat
c:\program files\jupiterclub\global\crackerjack1\txt_main.dat
c:\program files\jupiterclub\global\crackerjack1\txt_ptvalues.dat
c:\program files\jupiterclub\global\crackerjackcommon\crackerjackcommon.inf
c:\program files\jupiterclub\local\en\crackerjack1\am_ptcoins_hi2.dat
c:\program files\jupiterclub\local\en\crackerjack1\am_ptcoins_mask.dat
c:\program files\jupiterclub\local\en\crackerjack1\crackerjack1.inf
c:\program files\jupiterclub\local\en\crackerjack1\txt_ptcoins.dat
c:\program files\jupiterclub\local\en\crackerjack1\txt_ptcombos.dat
c:\program files\jupiterclub\local\en\crackerjack1\txt_statictext1.dat
c:\program files\jupiterclub\local\en\crackerjack1\txt_statictext2.dat
c:\program files\jupiterclub\local\en\crackerjackcommon\crackerjackcommon.inf
c:\program files\jupiterclub\local\en\menudescriptions\txt_desc_crackerjack1.dat
c:\program files\jupiterclub\mupdb\jupiterclub-en-crackerjack1
c:\programdata\wildtangent\polarpool\cache\dds\c%3a%5cprogram%20files%5cgateway%20games%5cpolar%20pool%5clevels%5cice_cave%5cscene%5ccrack.jpg.dds
c:\programdata\wildtangent\polarpool\cache\dds\c%3a%5cprogram%20files%5cgateway%20games%5cpolar%20pool%5clevels%5cice_cave%5cscene%5ccrack_alpha.jpg.dds
scanner sequence 3.ZZ.11.IGAPMN

 

[Jacee]

Look in C:\users\specter\program files\utorrent ... also, you could use (free) Revo uninstaller:
Download Revo Uninstaller Freeware - Free and Full Download - Uninstall software, remove programs, solve uninstall problems

 

[jness80537]

Hey, for the Java, I'm not seeing where it says it allows end users to run. Do I need the Java SE 7u2 JRE platform, standard edition?