Bad virus

  • Thread starter Thread starter Mohamed H
  • Start date Start date
M

Mohamed H

this virus cause a lot of problems to me . It always tern
of McAfee, also I remove it from the startup it back
again , I download the MicrosoftAntispyware but no way
what can I do , the file name is below
eliteykc32.exe
File name: eliteykc32.exe
 
This is not really a virus but rather the Elite Tool Bar which is a BHO -
browser helper object.

Here is a page that talks about it:
http://uk.geocities.com/darren_st/etb/

You can use their instructions for removal or follow the steps found below:

--
If you are under attack and MSAS does not seem to help:

*Submit suspected spyware report in the tools menu of MSAS*

1. Download:
lspfix.exe www.cexx.org/lspfix.htm
ccleaner.exe www.ccleaner.com
killbox.exe www.bleepingcomputer.com/files/killbox.php

2. Reboot into safe mode - http://tinyurl.com/pfca

3. Clean out all temp file locations - ccleaner.exe
(be sure to configure to delete all temp files
and not just those 48 hours old or older)

4. Run MSAS at least twice in full/deep mode

5. Run a robust, updated antivirus software scan

6. Reboot into normal mode,see if problem has been corrected

7. Install and use killbox to delete stubborn files

Battle Notes:
- If you have trojans (files that won't go away),
you may have to disable System Restore on XP:
http://tinyurl.com/movy

- If your Internet connectivity quits:
http://support.microsoft.com/kb/892350
LSPFix - http://www.cexx.org/lspfix.htm

- This program will not detect or remove viruses
http://www.microsoft.com/athome/security/viruses/default.mspx

** For a detailed attack plan **
http://spywarewarrior.com/sww-help.htm

*** For assistance in battling infestations***
- Get HijackThis.exe from:
http://tomcoyote.org/hjt/hjt199//HijackThis.exe
- Save it to C:\hjt (new folder)
- Open it and select "Scan and Save Log"
- Note where you saved the log
- Send it to Ron Kinner as an attachment
- Ron's email address is (e-mail address removed)
- Put Hijack in the subject so he knows it's not spam
- He will tell you what to do next


Application Notes:
Registering a VB6 dll seems to fix missing agents:
1) Open up a command prompt (start -> run -> cmd)
2) Type in the following "regsvr32 msvbvm60.dll" (without the quotes).
3) Close and re-open Windows AntiSpyware

- Several issues are addressed by Microsoft -
Cookies, supported OS, and cost.
http://www.microsoft.com/athome/security/spyware/software/faq.mspx

- This program will not work with Windows 98 or ME.
If you need a tool for 9X/ME, go here:
http://www.majorgeeks.com/downloads31.html

- If your taskbar is on the side of your screen, the alerts
scroll off the screen. Move the taskbar back to the
bottom or top to stop the scroll, then revert back.

- Mark Ferguson maintains an FAQ:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.txt
 
Remove BHO's in IE with MSAS:
1. Click "Tools" - "Advanced Tools" - "System Explorers".

2. In the left pane, underneath "Internet Explorer", click "IE BHOs".

You will see a list of installed Browser Helper Objects. As noted in the
key, BHOs preceded by a star should be safe, those next to an exclamation
point are unknown, and those next to a red "X" are those Microsoft
AntiSpyware deem hazardous.

Click a BHO for more detailed information if available, such as the BHO
name, description, and publisher name. Also, in the right pane, you can
choose to temporarily or permanently block the BHO. If the BHO is hazardous,
you may want to consider permanently removing it. However, for unknown BHOs,
you may want to consider only temporarily removing the object and examining
the effects later from within Internet Explorer.
 
Back
Top