Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Cannot delete file that is killing my computer


  • Please log in to reply
2 replies to this topic

#1 jch39

jch39

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:07:21 AM

Posted 18 December 2009 - 10:41 PM

My computer is running very slow, and I keep getting pop ups when I open IE. A window opens up from www.thewebsitesurvey.com. I have run Malwarebyte's Anti-Malware and have gotten rid of everything except one file...

Rootkit.Agent C:\WINDOWS\system32\drivers\jccnwb.sys

I have tried to delete the file and a pop up stated, "cannot delete jccnwb: cannot read from the source file or disk"

I tried to delete it from command prompt but i'm kinda confused with command prompt. Especially since when I open command prompt, it shows "C:\Documents and Settings\joe>" When I know that the problem file is NOT in documents and settings. Anyway, I have little knowledge on how to control the command prompt. I did try a million different "del" functions that I saw online, but none worked, until it said, "A device attached to the system is not functioning."

I tried to start my computer in safe mode and it did not allow me. The black screen came up, I pressed the up arrow to highlight, then select "Safe Mode" and it said that something had changed perhaps because of something new installed. I haven't installed anything new. I also tried to click the other 2 Safe Mode options with no luck.

I also tried to find a system restore point. Unfortunately my computer mysteriously had NO restore points before this. (For the record, every time I've tried to use system restore in the past, it's done the same thing. I create a point and have it set to do them every so often, only to find that when I need a restore point, they are all gone.)

I'm not too knowledgeable with regedit, but I was wondering if I should just delete everything that has jccnwb in it??

The only thing that I can think is that I downloaded a song and maybe it was attached to it.

I have also run Spybot - Search and Destroy with no luck.

Thanks in advance for your help.

Edit: Moved topic from XP to the more appropriate forum to preclude the need to repost as suggested below. ~ Animal :thumbsup:

BC AdBot (Login to Remove)

 


#2 Guest_Abacus 7_*

Guest_Abacus 7_*

  • Guests
  • OFFLINE
  •  

Posted 18 December 2009 - 10:46 PM

:flowers:

You will get better Help on Viruses if you Post in here, Mate. There are Trained Experts there.

http://www.bleepingcomputer.com/forums/f/103/am-i-infected-what-do-i-do/

:thumbsup:

#3 maalim

maalim

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:istanbul

Posted 18 December 2009 - 10:57 PM

My computer is running very slow, and I keep getting pop ups when I open IE. A window opens up from www.thewebsitesurvey.com. I have run Malwarebyte's Anti-Malware and have gotten rid of everything except one file...

Rootkit.Agent C:\WINDOWS\system32\drivers\jccnwb.sys

I have tried to delete the file and a pop up stated, "cannot delete jccnwb: cannot read from the source file or disk"

I tried to delete it from command prompt but i'm kinda confused with command prompt. Especially since when I open command prompt, it shows "C:\Documents and Settings\joe>" When I know that the problem file is NOT in documents and settings. Anyway, I have little knowledge on how to control the command prompt. I did try a million different "del" functions that I saw online, but none worked, until it said, "A device attached to the system is not functioning."

I tried to start my computer in safe mode and it did not allow me. The black screen came up, I pressed the up arrow to highlight, then select "Safe Mode" and it said that something had changed perhaps because of something new installed. I haven't installed anything new. I also tried to click the other 2 Safe Mode options with no luck.

I also tried to find a system restore point. Unfortunately my computer mysteriously had NO restore points before this. (For the record, every time I've tried to use system restore in the past, it's done the same thing. I create a point and have it set to do them every so often, only to find that when I need a restore point, they are all gone.)

I'm not too knowledgeable with regedit, but I was wondering if I should just delete everything that has jccnwb in it??

The only thing that I can think is that I downloaded a song and maybe it was attached to it.

I have also run Spybot - Search and Destroy with no luck.

Thanks in advance for your help.




The Best way to Remove all kind of Virus,Trojans,Malware,Spyware,
Worm,Pop Up Advertisements ,Hijack Web browser rootkit and all Rogue Fake
Anti-virus in you Computer is Restart You Computer Safe Mode with Networking

1. Log out and reboot your machine.

2. When the machine starts the reboot sequence, press the F8 key repeatedly.

3. Select Safe Mode with Networking from the resulting menu.

4. Login. If the malware has changed your password, try logging in as
Administrator. By default, Administrator has no password.

5. The machine will continue booting, but the Windows desktop will look different.

Then in The Safe With Networking .Download and Scan By Using Malwarebytes’ Anti-Malware http://download.cnet.com/Malwarebytes-Anti...cdlPid=10997763
Download and Scan By Using Super Anti-Spyware Press here http://www.superantispyware.com/

Download and Scan By using Norman Malware Cleaner Press here http://majorgeeks.com/downloadget.php?id=5...0e991265b3250e7

Download ATF is a new, freeware, temporary file cleaner for Windows, IE, Firefox and Opera with a simple, easy-to-use interface.

The main screen allows the user to either clean all temporary files, or select files for cleaning. The program also knows if Firefox and or Opera is being used, and gives the option of cleaning the temporary files associated with those applications.

ATF Cleaner provides the user with a window showing the total bytes freed upon completion. The program is small (36kb), quick to run and no installation required. to Download ATF Cleaner press this link http://majorgeeks.com/ATF_Cleaner_d4949.html

6. When you're finished Remove Virus, Malware, Trojan, Worm,
rogue
virus rootkit and
Spyware log out and reboot back into normal mode




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users