cpu processes

[Guest]

there is a process in my pc that is using about 98% of cpu. the name is mo82ss7245.exe.... would anyone know what program this is related to or could it be a virus? I have done full scan with updated panda and it keeps finding trj/agent.f virus and says it has disinfected it... but it just keeps coming back... I have gone to the panda web site and followed their instructions on how to remove all trace by disbling the restore function and then re-enabling it, but still nothing...can anyone help me? thanks in advance.

 

[Michael D. Alligood]

This file can be associated with spyware programs. Anti-virus software and
firewalls do not fully protect your system against the majority of spyware
and privacy threats. Spyware is commonly bundled with software downloads,
attached to e-mails, or transmitted through networks so it can appear to be
legitimate software, but once installed it can be nearly impossible to
detect and remove without the help of a dedicated spyware removal tool such
as:

Ad-Aware 6.0

SpyBot 1.3

SpyWare Blaster

HiJackThis

Please make sure that you download the updates for each of these programs to
ensure complete detection of known spyware programs. Although nothing is
absolute in removing spyware and keeping it off, downloading and executing
the programs above can dramically decrease future infections.

--
Best of luck!

Michael D. Alligood
MCSA, MCP, CCNA, A+,
Network+, i-Net+, CIW A, CIW CI

there is a process in my pc that is using about 98% of cpu. the name is

mo82ss7245.exe.... would anyone know what program this is related to or
could it be a virus? I have done full scan with updated panda and it keeps
finding trj/agent.f virus and says it has disinfected it... but it just
keeps coming back... I have gone to the panda web site and followed their
instructions on how to remove all trace by disbling the restore function
and then re-enabling it, but still nothing...can anyone help me? thanks in
advance.

 

[Will Denny]

Hi

Have you virus-checked your system with the latest definitions for your AV program and checked for any spyware that may be on your system:

Ad-Aware - www.lavasoftusa.com
Spybot - http://www.safer-networking.org/
CWShredder - http://www.spywareinfo.com/~merijn/downloads.html

Try SpyWareBlaster to stop intrusions:

http://www.javacoolsoftware.com/spywareblaster.html

Also see the following links:

http://mvps.org/winhelp2002/unwanted.htm
http://www.microsoft.com/security/articles/spyware.asp

 

[Guest]

Thanks... however, I already have updated spybot and adaware... they don't find anything. I also downloaded a program called cwshredder and ran that but did not find anything. Anything else I can do about it?

 

[Michael D. Alligood]

Yes. Click START--RUN and type: msconfig
Click the Start up tab and see if the process is loading when windows loads.
If you see the file in there, uncheck the box, then Apply and OK. Restart
you computer. See if that works.

--
Best of luck!

Michael D. Alligood
MCSA, MCP, CCNA, A+,
Network+, i-Net+, CIW A, CIW CI

Thanks... however, I already have updated spybot and adaware... they don't

find anything. I also downloaded a program called cwshredder and ran that
but did not find anything. Anything else I can do about it?

 

[Guest]

Yes, updated AV same day right before scan and found many viruses in the restore folder, but thought it would rid me of them, but seem to keep getting same one over and over again. AV keeps giving me notification that file was disinfected... spyware check was also done.

thanks,
Frenchie

 

[Will Denny]

Hi

If you have viruses in the Restore folder, your AV program won't be ableto delete them.

You will need to stop/start System Restore - this will also delete all existing checkpoints:

Right click on My Computer, select Properties and then the System Restore tab. Enable 'Turn off System Restore on all drives' and click Apply>OK. Then reboot your PC. After that first reboot go back into System Restore, disable 'Turn off System Restore on all drives' and click Apply>OK. Then reboot your PC again. Afterthis second reboot the virus(es) would have been deleted and you will have a newly created checkpoint.

 

[Guest]

thank you very much, it seems to be working... however now i get a popup window at startup:
The SCU is currently in diagnostic or selective startup mode, causing this message to be displayed and the utility to run every time windows starts.

choose the normal startup mode on the General tab to start windows normally and undo the changes you made using the SCU.

what should I do?

thanks
Frenchie

 

[Michael D. Alligood]

There should be a small check box on the lower left hand side of the SCU
windows that says, "Do not display this message again." Check that box and
click OK

--
Best of luck!

Michael D. Alligood
MCSA, MCP, CCNA, A+,
Network+, i-Net+, CIW A, CIW CI

thank you very much, it seems to be working... however now i get a popup window at startup:
The SCU is currently in diagnostic or selective startup mode, causing this

message to be displayed and the utility to run every time windows starts.

choose the normal startup mode on the General tab to start windows

normally and undo the changes you made using the SCU.