[Mthras]

Hey there,

I use Emule for years now, never had any problems worth mentioning, but my current installation is behaving strangely:

It started like 2 weeks ago when i found a strange file in my completed files folder, dont know the exact name but it was something like 'z5Tx2H4r.tmp'. I am a 100% sure that i never ordered emule to download such a file so i deleted it.
Then 2 days ago, while firing up emule, i got a message saying something like: 'Your Friends.met file is corrupt' (just in case it is important: i never use emule friends or chat or anything like that). I restarted my comp, started emule again and the message didnt show up again.
Yesterday I added a few more files to the download, without noticing that my diskspace wasnt enough for them, so when i later checked, I realized that most of the newly added files where put on hold, so far so good, my bad i know!
But: Today, i cleaned up my HD, made more than enough room for all the downloads, started emule and discovered that most of the downloads are gone! There is only 2 files (out of maybe 15) left in the list, under shared files it also only shows these 2 files and no, i dont work with download categorys so they are not hidden anywhere! when i check my 'Temp' folder, all the temp files are still there, its just that emule doesnt want to work with them anymore... all the files in question lack the *.part.met.bak file though, there is only the other two, the *.part files and the *part.met files.

So i am quiet confused:
- are these problems related?
- has someone hijacked my emule?
- how can i 'reinsert' the already existing temp files, or do i have to redownload them again?
- should i reinstall emule?
- any other info/suggestions?

my specs:
Win7 64
emule 0.50a
router active, UDP and TCP open and accessible
running KAD only

thanx alot and cheers!

Mthras

This post has been edited by Mthras: 01 May 2012 - 03:24 PM

[xilolee]

Mthras, on 01 May 2012 - 05:17 PM, said:

It started like 2 weeks ago when i found a strange file in my completed files folder, dont know the exact name but it was something like 'z5Tx2H4r.tmp'. I am a 100% sure that i never ordered emule to download such a file so i deleted it.

Read the guide for avoiding fake files (during the search).
Since you are using only kad, check this topic (click)

Mthras, on 01 May 2012 - 05:17 PM, said:

But: Today, i cleaned up my HD, made more than enough room for all the downloads, started emule and discovered that most of the downloads are gone! There is only 2 files (out of maybe 15) left in the list, under shared files it also only shows these 2 files and no, i dont work with download categorys so they are not hidden anywhere! when i check my 'Temp' folder, all the temp files are still there, its just that emule doesnt want to work with them anymore... all the files in question lack the *.part.met.bak file though, there is only the other two, the *.part files and the *part.met files.

Probably you have used some aggressive cleaner-programs that has deleted the bak files...

Mthras, on 01 May 2012 - 05:17 PM, said:

- how can i 'reinsert' the already existing temp files, or do i have to redownload them again?

If you see, in server log, red errors like these:

Quote

03/05/2012 1.31.21: Error: 002.part.met () is corrupt, unable to load file
03/05/2012 1.33.35: Error: Invalid part.met file version! (002.part.met => )

Check this post (click)

Mthras, on 01 May 2012 - 05:17 PM, said:

- should i reinstall emule?

No

Mthras, on 01 May 2012 - 05:17 PM, said:

- any other info/suggestions?

my specs:
Win7 64
emule 0.50a
router active, UDP and TCP open and accessible
running KAD only

If you haven't done it yet, run emule as an administrator (or disable UAC)

[fox88]

The file name z5Tx2H4r.tmp looks like an automatically generated name for temporary files. It might be useful to know it's size and contents, but that is impossible since the file was deleted.
Try to scan disk(s) for file system errors. Also make sure you did not get any malware.

[xilolee]

Searching google, I've found this (from 2004!!!):

http://forum.avast.com/index.php?topic=7448.0

If you have/find other trz*.tmp files, it seems a simple and very fast solution for removing them (other solutions had used combofix and other programs, spending days to resolve it).



If you want to use that program (cleanup!):
1) close emule and rename your temp folder (otherwise it removes all your part/part.met files, i.e. your incomplete/temporary/partial files).
Something that is not starting with temp or tmp!
2) first run cleanup in demo mode (from windows command line/ms-dos prompt) to check the files that will be deleted

cd \                        (press enter)
cd program files\cleanup!   (press enter)
cleanup -demo               (press enter)

3) if log doesn't show important files for you, run cleanup in normal mode

(anyway the first time you run it, it asks you for demo mode)

This post has been edited by xilolee: 03 May 2012 - 11:04 PM

[Mthras]

Thanx for all the input so far, its really appreciated!

I`ll start working on this problem again and report back on the progress as soon as I find some time.

greetings

Mthras

[fitchness]

Mi dispiace, non lo so.