Need some removal tools please

[Chance1234]

Ok trying to sort out my laptop a bit,
windows 2002

on start up i get a pop up which says

"PE-Shield:Heuristic Virus Alert" a file was altered

also suspicious in task manager

niks123.exe
tauc.exe
wuam.exe
wuawx.exe
wuawx.exe

i have looked a few of these up and im either getting pages in foreign or a security alert. what i really need to find is removal tools. currently my laptop is off line at the moment so i want to download progs on this one and transfer them via USB drive.

I have Ad-Aware, Spy blaster and webwasher installed on my machine but they have failed to remove them, also i have avg guard but something is stopping us from installing it.

Chance,

Filmmaker, gentleman and soon to be a mac user

http://WWW.5YLAC.S5.COM

,

http://WWW.HOWTOBESPOOKY.CO.UK

 

[carrr]

wuam.exe:

http://www.sophos.com/virusinfo/analyses/w32rbotm.html

wuawx.exe:

http://it.trendmicro-europe.com/ent...etail.php?id=60030&VName=WORM_RBOT.BK&VSect=T

Both worms...I'd wager the same for the others.
Kill the processes manually, then start working on removal.
You'd be well served to try an online virus scan/removal tool such as Trend Micro's housecall:

http://housecall.trendmicro.com/

On an XP machine, you need to disable system restore before beginning removal:

http://service1.symantec.com/SUPPOR...2001111912274039?OpenDocument&src=sec_doc_nam

Further, depending on the tenacity of the particular bug, you may be best served to reboot into safe mode in order to complete removal.

Tired of waiting for an answer? Try asking better questions. See: faq222-2244

 

[Chance1234]

thanks getting rid of wuam.exe allowed us to install AVG.

wish ihadnt though 762 infected files! tis is going to be a lonnnnnng day

Chance,

Filmmaker, gentleman and soon to be a mac user

http://WWW.5YLAC.S5.COM

,

http://WWW.HOWTOBESPOOKY.CO.UK

 

[AnalogAnomaly]

You most likely have more. While i'm happy for you that you've been able to get rid of the afore-mentioned worms.. the largest amount of infected files i've seen on one boxen is 49,312 virii infected files, and 672 spyware apps. I personally reccomend F-Secure Anti-Virus or Kapersky Labs/Bit Defender as AVG is just as bad as McAffe in my book. If you have not already, i would also get Spybot Search and Destroy and Adware(both of which are free anti-spyware applications)

Best of luck to you,
Analog

 

[Chance1234]

Format and clean install time i fear :-(

damm annoying have lost most of my .exe's through the clean up, have been meaning for ages to do a CD with all the apps on i most commonly used but never got round to it. joyus of joy

cursed PC's, hence why i will soon being buying a mac

Chance,

Filmmaker, gentleman and soon to be a mac user

http://WWW.5YLAC.S5.COM

,

http://WWW.HOWTOBESPOOKY.CO.UK

 

[AnalogAnomaly]

... He said the m-word...

I must now go wash my hands.

 

[diogenes10]

AnalogAnomaly
Wow! And from idle curiosity-did you clean it or redo it?

Chance
A different browser instead of new hardware?

-------------------------------------
It's 10 O'Clock ( somewhere! ).
Are your registry and data backed up?

 

[Chance1234]

that was the final straw, im looking forward to becoming a one button clicker

Chance,

Filmmaker, gentleman and soon to be a mac user

http://WWW.5YLAC.S5.COM

,

http://WWW.HOWTOBESPOOKY.CO.UK

 

[AnalogAnomaly]

I was able to save the OS, so no, i did not format and re-install had to run anti-virus app 3 times then manually remove a few. The OS was saved without having to format and re-install, the biggest threat was the user had multiple bagel infections. Also, he had norton installed. People wonder why i bash norton, avg, mcaffe, and the like. machines and users like this is the reason why. Any machine that's been used and has had mcaffe on it for alteast 6 months.. i'll find atleast 200 infected files, even if the definitons are "up to date". People who have mcaffe or nothing and say "oh i don't have virii" always make me laugh. Then there are those who claim that linux doesn't get virii, that it doesn't have virus problems, that it's immune to such things.. such bull.. people like that need to be taken out and shot. Okay this rant is done for now, i'm going to go turn an AOL cd into a taco shaped napkin holder with a heat gun..

 

[kiddpete]

AnalogAnomaly,

I downloaded F-Secure Anti-Virus, and the machine refused to boot on the last restart. It kept cycling between a DOS type text screen, and the Win XP Home start up screen. I had to go into safe mode to restore the system to restart it. Maybe there's a reason these products are not well known?

 

[AnalogAnomaly]

Indeed there is. The reason is this: The uneducated masses are about as computer literate as AOL Tech support. Those who have delt with such people, or find themselves correcting grevous errors made by such people on a regular basis will understand my hatred of these creatures. That said, it's likely rebooting because you have something else installed that's conflicting with f-secure. as someone in MIS I would presume you know that you don't install two different programs for one thing (yes there are exceptions to this, like spybot and adaware which work beautifully together) as it is likely to cause severe conflicts. Depending on which version of F-secure you downloaded another anti-virus, or firewall application may be to blame, the most common culprits of such things are McAffe, Norton, and Zone Alarm. E-Trust is as well but nobody really uses e-trust(which is to say that it's user base is quite small, not non-existant). Check for such conflicts or tell me what you have installed and i may be able to assist.

"People should be required to have a licence to operate a computer as one does a car." -Anonymous