w32/spybot.DCF

J

Jed Crary

F-Prot antivirus real time protector found the following:

c:\windows\system32\hllcxpa.exe is a security risk named
w32/spybot.DCF

Zone alarm shows that the program changes

I cant seem to send a report even with firewall disabled
and the microsoft program does not see it.
 
S

Steve Wechsler [MVP]

Jed said:
F-Prot antivirus real time protector found the following:

c:\windows\system32\hllcxpa.exe is a security risk named
w32/spybot.DCF

Zone alarm shows that the program changes

I cant seem to send a report even with firewall disabled
and the microsoft program does not see it.

Jed,

Is the issue of not being able to send a report the result of an error
message concerning proxy settings ? This is not an uncommon error
message and is *most* likely related to the server(s) you're attempting
to send the report to. Keep trying, please.

hllcxpa.exe is also known as WORM_RBOT.AFG
http://ae.trendmicro-europe.com/ent...tail.php?id=82469&VName=WORM_RBOT.AFG&VSect=T

Advise you to download the Syclean Package to remove it. Create a folder
on the C:\ drive and name it Sysclean. Download the Sysclean Package
from here : http://www.trendmicro.com/download/dcs.asp
Extract sysclean.com to the Sysclean folder.
Then download the latest pattern file :
http://www.trendmicro.com/ftp/products/pattern/cpr/lpt360.zip

Extract lpt360.zip to the Sysclean folder.
Boot to Safe Mode, open Sysclean by double clicking sysclean.com.
Scan the system by clicking the Scan button.
Sysclean is very thorough and will take some time to detect and remove
the infection. Advise you to run it again from within Safe Mode prior to
rebooting to Normal mode.

HTH,
Steve Wechsler (akaMowGreen)
MVP Windows Server
 
J

Jed Crary

-----Original Message-----


Jed,

Is the issue of not being able to send a report the result of an error
message concerning proxy settings ?
Correct.

This is not an uncommon error
message and is *most* likely related to the server(s) you're attempting
to send the report to. Keep trying, please.

hllcxpa.exe is also known as WORM_RBOT.AFG
http://ae.trendmicro-europe.com/ent...tail.php?id=82469&VName=WORM_RBOT.AFG&VSect=T

Advise you to download the Syclean Package to remove it. Create a folder
on the C:\ drive and name it Sysclean. Download the Sysclean Package
from here : http://www.trendmicro.com/download/dcs.asp
Extract sysclean.com to the Sysclean folder.
Then download the latest pattern file :
http://www.trendmicro.com/ftp/products/pattern/cpr/lpt360.zip

Extract lpt360.zip to the Sysclean folder.
Boot to Safe Mode, open Sysclean by double clicking sysclean.com.
Scan the system by clicking the Scan button.
Sysclean is very thorough and will take some time to detect and remove
the infection. Advise you to run it again from within Safe Mode prior to
rebooting to Normal mode.

HTH,
Steve Wechsler (akaMowGreen)
MVP Windows Server
.

I Will try your suggestion.
Thanks
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top