|
davo
|
 |
« on: October 19, 2010, 03:02:22 AM » |
|
hi joey,i have a file that wont delete.
its in windows folder,temp.
Perflib_Perfdata_788.dat
ive been trying to figure out axactly where it comes from,
so mant formats later with verious program installs,ive tracked it to getting ether windows live,or java.
upon researching online,is seems to be a backdoor trojan.
this can not be deleted,and if it is, it will come back after reboot.
it seems to slow the pc down to a crawl with many freezes.
all v/s/m removal techniques dont work.
it froze kaspersky during a scan,and am scanning it a second time.
yes i know very time consuming,next ill try a combo fix.
it would be great to know a simple way of permanently removing the file and also knowing how to prevent it from resurfacing.
it seems to dissapear during safe mode,but returns again.
so whatever it is,it seems to be active on a normal bootup.
any advice would be appreciated.thanks
|
|
|
|
|
Logged
|
|
|
|
|
Joey
|
 |
« Reply #1 on: October 19, 2010, 03:13:56 AM » |
|
Hi Davo,
Since you know the exact location of that file, here is what to do...
Insert a Linux Live CD into that computer. Boot off of that Live CD. When Live Linux is running, go into the exact location and delete the file.
|
|
|
|
|
Logged
|
|
|
|
|
davo
|
|
« Reply #2 on: October 19, 2010, 04:45:35 AM » |
|
hello again,just like in safe mode.the file has dissapered running the live disc.
from the experiance ive had with it,it doesnt do anything to the system,
appart from slow it down,just runs silently in the back ground.
perhaps this could have been the way my pc was being hacked a few months ago(unsure).
after going back into XP,it is in the temp folder but with a different number attached.
Perflib_perfdata_77c.dat
during several formats it seems to be added once i install windows live mesenger.
so im deciding wether or not to run the xp disc again.
its not a huge drama for me as i have several pc's with different os installed.
but others may have the same file and not the time to spend removing it.
before completly blowing the os away im going to try and figure out a way to remove it manualy,ther is a few posts on forums regarding it but im yet to find a posotive solution.
so far ive tried, kaspersky pures permanently delete data,ccleaner,and cleanse uninstaller pro's file shreder.
next ill try revo's hunter mode. then see what other programs can offer a solution.
|
|
|
|
|
Logged
|
|
|
|
|
davo
|
|
« Reply #3 on: October 19, 2010, 06:31:13 AM » |
|
ok ive tried 7 different programs,one was from an unsafe site that kasp blocked on my windows7 but did not on my xp,needless to say it was riskware.
the last one i tried is a program called lockhunter.
i can not unlock the program because its in use.
however it has shown me the process thats running it.
c:\program files\java\jre6\bin\jqs.exe
can not delete.
so it looks like its a java temp file.
seeing as im only using java to download with clipnabber, i will uninstall it with revo uninstaller.
its gone,now rebooting to see if it returns.
and my speedy bootup is back,with no sign of the temp file.
this was a discussion on several forums dating back to around 2006(from memory).
none of which stated it to be from java.
i hope this helps someone else out with a similar situation
|
|
|
|
|
Logged
|
|
|
|
|
Joey
|
|
« Reply #4 on: October 20, 2010, 09:02:01 PM » |
|
wow. I never would have thought it was a JAVA file. Thanks for the info
|
|
|
|
|
Logged
|
|
|
|
|
August 11, 2009, 05:11:29 PM
