PE_finaldo.b removal?????????

  Les53 22:12 12 Feb 2006

I am trying to remove PE_finaldo.b which has infected a file called windows/win32ssr.exe.

PC Cillin has detected this virus but is unable to clean/quarantine.

If i use the microsoft spyware removal tool in advanced options under running processes i can locate it and stop the process.

what i can't do is use pc cillin as the options are grey out, but it been detected and in the view box.

Any ideas welcolmed

  skidzy 22:15 12 Feb 2006
  Les53 22:34 12 Feb 2006

Thanks i will give that a go.
Any other ideas?

  skidzy 22:42 12 Feb 2006

Try ewido first and get back to me,i think this will sort your problem.
If not,will try something else.
You could always run msantispy
click here

  skidzy 22:45 12 Feb 2006
  Les53 23:25 12 Feb 2006

Can seem to find the pattern 2.812.02 on PC cillon. It also mentions delete file but alas it cannot clean or quarantine. I even tried stopping the process then trying.

Does not detect it, but clearly shows it in running programmes/services in the advanced tools section.

  skidzy 23:28 12 Feb 2006

Have you tried Ewido ?

  Skyver 23:34 12 Feb 2006

Start in safe mode and delete windows/win32ssr.exe, run Ewido, if your anti virus program is enabled again, use it.

  skidzy 23:37 12 Feb 2006

Les i suggest you run this

click here

Then post the log here

click here

  skidzy 23:47 12 Feb 2006

Les,have you had any suspicous emails lately,you will need to make sure its permantely deleted from you email if it came from looks like that is the origin.
Read this.
click here

  Les53 22:34 17 Feb 2006

ewido fixed it good and proper plus found a few other nasties as well. Full marks to Ewido.
Thanks everybody

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Galaxy Note 8 vs iPhone X

Aardman's new YouTube channel to share the work of independent animators

iPhone X vs Samsung Galaxy Note 8

Les meilleurs navigateurs internet 2017