Help on removing virus

  • Thread starter Thread starter Tony Pagett
  • Start date Start date
T

Tony Pagett

I have recently formatted my hard drive and reinstalled XP.
I allowed Windows to update itself and recieved 24 viruses in the proccess.
I have installed the following and run them in safe and normal mode but
cannot delete all of the viruses.

Spybot
Avast
Zone alarm
Microsoft antivirus
BHO Demon

At start up OWSEUI.dll and eetu.exe try to access the internet.

I have a search bar attached to internet explorer that will not remove

Microsoft antivirus will not keep any settings that I give it (real time
protection switches off and will not switch back on again.)

I can use the internet as normal but cannot connect to Microsoft update.

BHO Demon finds something at startup but the program freezes and crashes if
I try to look at what has been found.

Microsoft antivirus finds DNSCatcher Adware and when I delete it it says
services.exe has been removed. When I reboot and run Microsoft antivirus
DNSCatcher Adware has returned.

Any ideas please?

Tony
 
Viruses or Spyware?

If it's a virus, what is the name of the virus? Your antivirus software
should identify it.


--
 
From: "Tony Pagett" <[email protected]>

| I have recently formatted my hard drive and reinstalled XP.
| I allowed Windows to update itself and recieved 24 viruses in the proccess.
| I have installed the following and run them in safe and normal mode but
| cannot delete all of the viruses.
|
| Spybot
| Avast
| Zone alarm
| Microsoft antivirus
| BHO Demon
|
| At start up OWSEUI.dll and eetu.exe try to access the internet.
|
| I have a search bar attached to internet explorer that will not remove
|
| Microsoft antivirus will not keep any settings that I give it (real time
| protection switches off and will not switch back on again.)
|
| I can use the internet as normal but cannot connect to Microsoft update.
|
| BHO Demon finds something at startup but the program freezes and crashes if
| I try to look at what has been found.
|
| Microsoft antivirus finds DNSCatcher Adware and when I delete it it says
| services.exe has been removed. When I reboot and run Microsoft antivirus
| DNSCatcher Adware has returned.
|
| Any ideas please?
|
| Tony
|

Tony:

There is NO Microsoft branded anti virus product. You must mean Microsoft anti spyware
Beta.

Make sure that SpyBot is SpyBot Search and Destroy v1.4
I also suggest you download, install and update the following software...

Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/

Finally, please submit samples of the following toVirus Total --
http://www.virustotal.com/flash/index_en.html

eetu.exe
OWSEUI.dll
services.exe


The submission will then be tested against many different AV vendor's scanners.
That will give you an idea what it is and who recognizes it. In addition, unless told
otherwise, Virus Total will provide the sample to all participating vendors.

When you get the report, please post back the exact results.

Please note that you should search the PC for SERVICES.EXE .
The real OS version should be %windir%\system32\SERVICES.EXE

If it is found in another location (other than ServicePack or patch related locations) than
it is surely an infector !
 
You can download SP2 and install it offline the next time you reformat and
reinstall. In other words, don't attach to the Internet until you've at
least installed SP2 and enabled the firewall.

You can also apply other Windows Updates offline, by downloading and using
AutoPatcher:
http://www.autopatcher.com/


--
 
I have recently formatted my hard drive and reinstalled XP.
I allowed Windows to update itself and recieved 24 viruses in the proccess.
Click to expand...

Note that wouldn't have happened if you had done one of the
following:

A. Made sure the XP firewall was active before connecting to the
internet.
B. Kept a copy of the install file of your favorite firewall on CD
and installed it after re-installing Windows and before going online.
C. Use a external firewall/router

Art

http://home.epix.net/~artnpeg
 
I have recently formatted my hard drive and reinstalled XP.
I allowed Windows to update itself and recieved 24 viruses in the proccess.
I have installed the following and run them in safe and normal mode but
cannot delete all of the viruses.

Spybot
Avast
Zone alarm
Microsoft antivirus
BHO Demon

At start up OWSEUI.dll and eetu.exe try to access the internet.

I have a search bar attached to internet explorer that will not remove

Microsoft antivirus will not keep any settings that I give it (real time
protection switches off and will not switch back on again.)

I can use the internet as normal but cannot connect to Microsoft update.

BHO Demon finds something at startup but the program freezes and crashes if
I try to look at what has been found.

Microsoft antivirus finds DNSCatcher Adware and when I delete it it says
services.exe has been removed. When I reboot and run Microsoft antivirus
DNSCatcher Adware has returned.

Any ideas please?

Tony
Click to expand...
It might be safer at this point, since you've installed very
little, to WIPE the drive (in other words, a deep cleaning),
reformat it and then:

get a router

Install Windows again

Install your own firewall immediately - use a free one if you don't
have or plan to purchase one. You can still get the free Sygate
firewall, which is an excellent choice:
http://smb.sygate.com/support/documents/spf/spf_download.htm

Have your AV on disk ready to install next - again, you can use one
of the free ones if you choose: AVG, Avast, are two good ones.

Update Windows.

Or, it might be better to update windows before you install the AV
- I'm not sure and maybe someone else on the forum could clarify.

Louise
 
Or, it might be better to update windows before you install the AV
- I'm not sure and maybe someone else on the forum could clarify.
Click to expand...

No need for a av to do Windows Update. Just a firewall before going
online. After Windows update, hightail it on over to mozzila.org and
download a decent browser and email app. What you do about av after
that is up to you. I never use realtime av since it's unnecessary
"underfootware" for me.

Art

http://home.epix.net/~artnpeg
 
I have recently formatted my hard drive and reinstalled XP.
I allowed Windows to update itself and recieved 24 viruses in the
proccess. I have installed the following and run them in safe and
normal mode but cannot delete all of the viruses.

Spybot
Avast
Zone alarm
Microsoft antivirus
BHO Demon

At start up OWSEUI.dll and eetu.exe try to access the internet.

I have a search bar attached to internet explorer that will not
remove

Microsoft antivirus will not keep any settings that I give it
(real time protection switches off and will not switch back on
again.)

I can use the internet as normal but cannot connect to Microsoft
update.

BHO Demon finds something at startup but the program freezes and
crashes if I try to look at what has been found.

Microsoft antivirus finds DNSCatcher Adware and when I delete it
it says services.exe has been removed. When I reboot and run
Microsoft antivirus DNSCatcher Adware has returned.

Any ideas please?

Tony
Click to expand...
Start with some light reading.
http://www.sans.org/rr/papers/index.php?id=1298
After downloading SP2 and AV,firewall and other goodies burn them to
disk.Now that you have prepared yourself-format and install
everything before going on the net.
-max
--
Playing Nice on Usenet:
http://oakroadsystems.com/genl/unice.htm#xpost
My Pages: http://home.neo.rr.com/manna4u/
http://home.neo.rr.com/manna4u/keepingclean.html
http://home.neo.rr.com/manna4u/virusprevention.html
http://home.neo.rr.com/manna4u/tools.html
Change nomail.afraid.org to yahoo.com to reply.
Registered Linux User #393236
 
Back
Top