rulechinbait.exe anybody?

[Guest]

My NEW laptop appeared to go really slow in processes and during surfing. I
went over to the task managaer and to my surprise, discovered that a so
called RULECHINBAIT.EXE is using 96% of the CPU!!! I found this file in the
PREFETCH folder in Windows, deleted it but it keeps on cropping up. Neither
Norton antivirus nor the new Microsoft Spyware beta detects it as a virus or
a malware....

Does anybody know anything about this myserious alien on my PC nad how I can
get rid of it?

 

[Will Denny]

Hi

Please try these programs as well to check for any spyware that may be on
your
system:

Ad-Aware - www.lavasoftusa.com
Spybot - http://www.safer-networking.org/
CWShredder - http://forum.aumha.org/downloads/cwshredder.zip
Spy Sweeper - www.webroot.com

Try SpyWareBlaster to stop intrusions:

http://www.javacoolsoftware.com/spywareblaster.html

Also see the following links:

http://aumha.org/a/parasite.htm
http://mvps.org/winhelp2002/unwanted.htm
http://www.microsoft.com/security/articles/spyware.asp

--


Will Denny
MS-MVP Windows Shell/User
Please reply to the News Groups

 

[Guest]

Thanks Denny, but I tried to get some info about this file and I couldn't
find ANYTHING on the net! Is it that mysterious? Has NOBODY heard of it or
experienced anything with it?

 

[Will Denny]

Hi

I can't find any reference to that file either. The programs I suggested
may see it as spyware. Have a look in msconfig>startup to see if the file
is referenced there. If so, uncheck it and then reboot your system.

--


Will Denny
MS-MVP Windows Shell/User
Please reply to the News Groups

 

[David H. Lipman]

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download Sysclean.com and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt359.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adaware with the latest definitions.
3) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode and shutdown as many applications as possible
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) Create a new Restore point


* * * Please report your results ! * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html







| My NEW laptop appeared to go really slow in processes and during surfing. I
| went over to the task managaer and to my surprise, discovered that a so
| called RULECHINBAIT.EXE is using 96% of the CPU!!! I found this file in the
| PREFETCH folder in Windows, deleted it but it keeps on cropping up. Neither
| Norton antivirus nor the new Microsoft Spyware beta detects it as a virus or
| a malware....
|
| Does anybody know anything about this myserious alien on my PC nad how I can
| get rid of it?

 

[Guest]

Thanks Dave. Will try ding so tomorrow, my laptop is at the office. Will
cerrtainly report back.
Cheers.

"David H. Lipman" escribió:

 

[Guest]

Hi Dave
Sorry but it didn't work. Pobably discovered, by shear accident, the
whereabouts of mass destruction waepons: they are not in the middle east,
they are in my PC: RULECHINBAIT.EXE (LOL)!

Thanks anyway.

 

[Kelly]

Clean out by cleaning your prefetch folder:

Either by Start/Run/CMD
del %systemroot%\prefetch\*.*

or by:

Controlling the Prefetch Parameters in Windows XP
http://www.jester2k.pwp.blueyonder.co.uk/jester2kpcc.htm

Added info:

Prefetch Folder in Windows XP Explained Here:
http://www.kellys-korner-xp.com/xp_p.htm#xp_prefetch

If still the same, run this tool and send the logfile to me via private
email:

Windows XP Startup Programs Tracker
http://www.kellys-korner-xp.com/xp_u.htm#xp_util

--
All the Best,
Kelly (MS-MVP)

Troubleshooting Windows XP
http://www.kellys-korner-xp.com