Results 1 to 6 of 6

Thread: Running bot check question

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Junior Member
    Join Date
    Dec 2007
    Posts
    9

    Default Running bot check question

    I did a search for running bot-check & didn't find anything so I hope my question hasn't been answered yet.

    Anywho, the status bar at the bottom when it's doing that - is that stuff it's searching for, or stuff in my computer that is being searched?

    Also, is it common for the thing to slow down? While searching in the virtumonde (I've seen a lot of posts about that thing) part it seems to have slowed down quite a bit.


    Thanks


    Oh & ps... stuff it's found so far: MarketScore, Smitfraud-C.bs, WildTangent - Does spybot easily remove those things? Are they very harmful to my computer? What else do you know/can you tell me about them? Thanks so much!


    Katie

  2. #2
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    marinelover28540:

    During the running of a Spybot scan ("Check for problems") the status bar in the lower left hand corner of the screen shows the following:
    • "Running bot-check(xxxxx/yyyyy:zzzzzz)" where:
      • xxxxx = Current check count.
      • yyyyy = Total check count.
      • zzzzz = Malware check being performed.


    • The zzzzz value is not what is on your system, it is the name of the malware check being performed by Spybot.


    Checks for certain malware are more involved than others. So some checks run slower than others.

    I'm a little confused by these seemingly contradictory statements:

    Quote Originally Posted by marinelover28540 View Post
    I did a search for running bot-check & didn't find anything …
    Quote Originally Posted by marinelover28540 View Post
    … Oh & ps... stuff it's found so far: MarketScore, Smitfraud-C.bs, WildTangent - Does spybot easily remove those things? …
    MarketScore is either a tracking cook or spyware depending on what was found, Smitfraud-C.bs is malware and WildTangent is just a PUP (Potentially Unwanted Program). MarketScore and Smitfraud-C.bs should definitely be fixed, but the removal of WildTangent is optional.

    Some malware is easily removed and other malware may require that you request assistance from a experienced malware removal specialist in the Malware Removal forum.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  3. #3
    Junior Member
    Join Date
    Dec 2007
    Posts
    9

    Default

    Sorry about the confusion :D The first thing was that I did the search for the bot check in these forums but couldn't find anything that had to do w/ my question about what it meant. Thanks for answering that, I'm a lot less confused now :D ...and a lot less worried!

    And the second thing was what spybot had found on my comp so far.

    After I deleted a few of the wild tangent things, the next time the comp was turned on, I started getting these black dos boxes (windows\system32\command.exe) I had to do the scan a buncha times today to get rid of all the wild tangent stuff but then at the last scan it made the whole desktop black when it ran (was that my comp or the program?) I wasn't sure if it was from deleting the wild tangent stuff so I recovered that stuff just in case. Well when I closed S&D the black went away & my background & desktop came back up. Anywho, I've still got those command boxes coming up. Did I break something on the comp to make those come up? How do I fix it?

    Thanks again :D

  4. #4
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    marinelover28540:

    The command windows are most likely executing deletes of files that were in use when Spybot first attempted to delete them.

    If Spybot encounters a file that can not be deleted it adds a "RunOnce" startup entry so that during the next system startup another attempt is made to delete the file. The entries added for the execution of the delete commands at system startup would look similar to the following:

    Code:
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
    "SpybotDeletingxnnn"="command.com /c del \"*** filename ***""
    "SpybotDeletingxnnn"="cmd.exe /c del \"*** filename ***""

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  5. #5
    Junior Member
    Join Date
    Dec 2007
    Posts
    9

    Default

    Hey :D After I undeleted the files the little boxes were still there, but after it was restarted again, they quit showing up. So I think undeleting them fixed the boxes showing up. I mean fixed it so they don't come back. Your last post confuses me a little bit but I think I get it. :D

    So, I have a few more questions - First, if I have a bunch of questions should I just put them all in the same post? I mean if I have a question & it gets answered & then I have another question should I put it in the first topic I made or just make a new post? Wow I'm starting to confuse myself a little bit there :P

    And the other thing is, I think there's something else wrong w/ my comp. Like a virus. Would yall be able to help me with that or would I have to go to another forum or something? The thing is, I've got Computer Associates Antivirus thingie that we got for free from RoadRunner. Well for some time now, I've been unable to secure it & I don't know if it's updating properly either. Would a HJT log tell you whats wrong w/ my comp if its a virus? Or that Kaspersky thing, would that help? Oh and that website finallyfast.com (i think thats the addy) that I keep seeing on tv, has anyone checked it out? Is it as good as the tv says it is?

    Thanks so much for helping me :D Even if you can't help, thanks for reading

    Katie

  6. #6
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    marinelover28540:

    HijackThis logs are not interpreted in this particular forum. If you suspect that you have a virus or other malware consider posting in the Malware Removal forum and having someone take a look at your system.

    If you decide to have an experienced malware removal specialist assist you, please follow the procedure in the following link and produce a HijackThis log:
    If you suspect that your anti-virus program is not working properly or not being updated, consider changing to another one. There are many good programs available including many that are free for personal use such as Avast!, Avira Antivir, BitDefender, etc. See: Free anti-virus software.

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •