virus help

[Feronni]

I have recently updated a friend's computer (who alas had an outdated virus
checker running and not kept up to date) with AVG Free edition.

It found loads of viruses most successfully removed or quarrantined. But
there are 3 trojans still showing that it says cannot be removed - I have
done searches for these on the net but can find no info on them.

One is named by AVG as
beoockam.exe and this can be found running as a process in task manager.
Ending this process only seems to make it appear again.

The other two are named as worm.exe and updmgr.exe

Any help / advice appreciated

 

[Thorsten Matzner]

I have recently updated a friend's computer (who alas had an outdated virus
checker running and not kept up to date) with AVG Free edition.

It found loads of viruses most successfully removed or quarrantined. But
there are 3 trojans still showing that it says cannot be removed

You can try to remove the items from the Safe Mode.
"A Description of the Safe Boot Mode Options in Windows XP"
(http://support.microsoft.com/?kbid=315222)

 

[relic]

I have recently updated a friend's computer (who alas had an outdated
virus checker running and not kept up to date) with AVG Free edition.

It found loads of viruses most successfully removed or quarrantined.
But there are 3 trojans still showing that it says cannot be removed
- I have done searches for these on the net but can find no info on
them.

One is named by AVG as
beoockam.exe and this can be found running as a process in task
manager. Ending this process only seems to make it appear again.

The other two are named as worm.exe and updmgr.exe

Any help / advice appreciated

Lots of viruses hide in the \System Volume Information folder. Turn "System
Restore" off, reboot to clear it, rescan, then you can turn it back on.

 

[null]

I have recently updated a friend's computer (who alas had an outdated virus
checker running and not kept up to date) with AVG Free edition.

It found loads of viruses most successfully removed or quarrantined. But
there are 3 trojans still showing that it says cannot be removed - I have
done searches for these on the net but can find no info on them.

One is named by AVG as
beoockam.exe and this can be found running as a process in task manager.
Ending this process only seems to make it appear again.

The other two are named as worm.exe and updmgr.exe

Any help / advice appreciated

worm.exe :
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=101022

updmgr.exe may be spyware. Use Adaware and Spybot




Art
http://www.epix.net/~artnpeg

 

[me]

I have recently updated a friend's computer (who alas had an outdated virus
checker running and not kept up to date) with AVG Free edition.

It found loads of viruses most successfully removed or quarrantined. But
there are 3 trojans still showing that it says cannot be removed - I have
done searches for these on the net but can find no info on them.

One is named by AVG as
beoockam.exe and this can be found running as a process in task manager.
Ending this process only seems to make it appear again.

The other two are named as worm.exe and updmgr.exe

Any help / advice appreciated

updmgr could be KeenValue's adware (any kazaa on that PC?).
It has registry entry(-ies). Google it -- plenty of info.

J

 

[FromTheRafters]

I have recently updated a friend's computer (who alas had an outdated virus
checker running and not kept up to date) with AVG Free edition.

It found loads of viruses most successfully removed or quarrantined. But
there are 3 trojans still showing that it says cannot be removed - I have
done searches for these on the net but can find no info on them.

One is named by AVG as
beoockam.exe and this can be found running as a process in task manager.
Ending this process only seems to make it appear again.

The other two are named as worm.exe and updmgr.exe

Those are file names. Just as important would be the malware names
that the scanner indicated, and the location of the files as stated by
the scanner. If you forgot to write them down, you may be able to
find them logged in the scanners log file. Also it might be a good
idea to scan in safe mode and delete them (if possible). Even after
deleting them you may find the scanner alerts to them again in the
"_restore" directory - and this can be fixed by purging the restore
points.