DIGIT-ARC read-only archive · snapshot: July 23, 2026

help! virus

10 posts · originally from https://geek.digit.in/community/threads/help-virus.99151/

D
dsuresh Original post #1
Oct 5, 2008 at 6:50 PM
hi,
my system slow down every 20 - 30 min after booting .. i found a problem in temp file named C:\LOGFILE.ETL . file size increasing in every second . after 20-30 min harddisk full notification come from tray . unable to delete ....

help me

screeshots :
*img530.imageshack.us/img530/8967/screenhunter01oct051836xy3.gif
*img88.imageshack.us/img88/6263/screenhunter02oct051836yv7.gif
*img379.imageshack.us/img379/4848/screenhunter03oct051837oj3.gif
*img258.imageshack.us/img258/3000/screenhunter04oct051844bx1.gif
swatkat
swatkat #2
Oct 5, 2008 at 7:22 PM
Do you have/used any utility called Tracelog.exe? It is a part of Windows ResKit.
D
dsuresh #3
Oct 6, 2008 at 1:07 AM
No , i am not a power user ...
comp@ddict
Oct 6, 2008 at 11:25 AM
If prob persists...well..sorry but full system format if tht's feasible for u
swatkat
swatkat #5
Oct 6, 2008 at 10:50 PM
Hi,

Can you tell me what are the values present in the following Registry Key:
Code:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\GlobalLogger
You need to use Registry Editor (type regedit.exe in Run dialog box) to view the above mentioned key. A screenshot would help!

By the way, are you using or have you used a program called BootVis?
D
dsuresh #6
Oct 6, 2008 at 11:58 PM
*img148.imageshack.us/img148/7011/screenhunter02oct062356kb4.gif
swatkat
swatkat #7
Oct 7, 2008 at 1:06 AM
Thanks. Can you change the Start value in that Registry Key to 0? To do this, double-click on the value "Start" and change the value from 1 to 0. Reboot PC and see if the logfile.etl still continues to grow...

If you don't have Registry editing permissions in your user account, then you need to do it using an user account with Admin privileges...
D
dsuresh #8
Oct 7, 2008 at 2:34 AM
thanks swat cat .............. problem solved .......... thanks again
swatkat
swatkat #9
Oct 7, 2008 at 9:37 PM
Cool :) I wonder how WMI system/kernel logger was turned-on in your system!!
afonofa
afonofa #10
Oct 7, 2008 at 9:46 PM
If prob persists...well..sorry but full system format if tht's feasible for u
I really hope you never get to be in control of India's nukes! :D