Maybe OT -- ewindo--Finds Malware in memory

[Bob Vickers]

edwindo finds 16 instances of the same malware in my memory--It dosn't
delete it --their support told me to run a scan in safe mode (Win2k) Running
in safemode -- In Safe Mode It dosn't even find it so no chance to delete
it.

Help Appreciated.
T.I.A.
for email change .net to .com

Log File Below:
---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------

+ Created on: 10:45:33 AM, 8/2/2005
+ Report-Checksum: 424C8149

+ Scan result:

[204] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning
[232] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning
[496] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning
[632] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning
[700] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning
[912] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning
[956] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning
[972] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning
[1140] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning
[1180] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning
[1216] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning
[1272] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning
[1304] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning
[1336] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning
[1372] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning
[1624] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning


::Report End

 

[CARP]

[972] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning

While in Safe Mode, delete the folder C:\WINNT\etb\

Then search your registry for all references to nt_hide62.dll and/or etb and
delete them.

Reboot.

 

[CARP]

[972] C:\WINNT\etb\nt_hide62.dll -> Spyware.EliteBar : Error during
cleaning

While in Safe Mode, delete the folder C:\WINNT\etb\

Then search your registry for all references to nt_hide62.dll and/or etb and
delete them.

Reboot.

 

[CARP]

Reboot.

Such good advice, I had to give it twice!

Sorry.

 

[Bob Adkins]

edwindo finds 16 instances of the same malware in my memory--It dosn't
delete it --their support told me to run a scan in safe mode (Win2k) Running
in safemode -- In Safe Mode It dosn't even find it so no chance to delete
it.

Help Appreciated.
T.I.A.
for email change .net to .com

Run a full ewido scan in Safe Mode. It will not find any memory-resident
malware, but will find the source and clean it. A safe mode scan will be a
bit slow, as hard disk acceleration drivers will not be loaded.

 

[jmatt]

Also, click on Elite Bar on this link for further instructions on how
to remove.

http://www.kephyr.com/spywarescanner/library/index.phtml?source=appvisit

 

[Richard Steinfeld]

edwindo finds 16 instances of the same malware in my memory

What's "ewindo?"

Richard

 

[jmatt]

What's "ewindo?"

Typo.

ewido security suite free for Windows 2000/XP
http://www.ewido.net/en/features/
http://www.ewido.net/en/download/

* Posted via http://www.sixfiles.com/forum
* Please report abuse to http://xinbox.com/sixfiles