Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help With Infection


  • Please log in to reply
7 replies to this topic

#1 ejplace

ejplace

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:02:25 PM

Posted 23 March 2006 - 01:29 PM

Starting yesterday morning whenever i try changing my url from my homepage, IE instantly crashes and closes. I'm running I6 w/SP2. It does as soon as i try to type in a new url or select the down arrow to access history. Also Windows Explorer is crashing when I go there. Also Office2000Pro when I open any of the programs there (word, Excel,etc.) it says its not installed and run setup where I installed it at. Removed Office and reinstalled it and that didn't help. Have ran CCleaner and tried r unning panda but my comp wont let me. I need help desperately!

BC AdBot (Login to Remove)

 


#2 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:02:25 PM

Posted 23 March 2006 - 02:19 PM

If you have a Windows System Restore date from before the problem began - use it.



If that works, there are several anti-malware tools you need to download and install which will give you protection against malware attack and tools to use if any gets through, but you will need IE (or another browser) to do it.

Let us know.

#3 ejplace

ejplace
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:02:25 PM

Posted 23 March 2006 - 02:34 PM

Thanks, the seemed to work. I can change url's and office works again. the only problem is now i get this error box popping up:
Runner Error
fspex.exe lacks a '-' (the app id separator)

How to I get rid of this and what programs do you reccomend I download?
Thanks for the help, much appreciated.

#4 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:02:25 PM

Posted 23 March 2006 - 03:01 PM

Process File: fspex or fspex.exe
Process Name: F-Secure Anti-Virus Updater

Description:
fspex.exe is a process associated with F-Secure Anti-Virus Software.

You may need to uninstall and reinstall your anti-virus ap.
Did you get this from your ISP? Do you like it? Do you have their firewall too?
If you do have their firewall, do not run the one that comes with XP. Running two firewalls may cause conflicts and connectivity problems.

The following are tools to have for protection and/or maintenance and to have ready when you need them.

Antivirus programs - freeware
(you can only use one resident anti-virus program on your computer. More than one will conflict so if you have a current one that you keep updated do not install an additional one.)

AVG:
http://www.grisoft.com/us/us_index.php

Avast Anti-virus freeware
http://www.komando.com/bestshareware.asp

Anti-malware freeware
(You can run as many of these as you wish. Generally there is no conflict between these and you should always run several since each may find malware that the others may not find)

Ad-Aware SE Personal - freeware
http://www.lavasoft.com/
Click on Adaware SE Personal in “Products” on the left side of the page
Or it may be easier to find it here:
http://fileforum.betanews.com/detail/Adawa...nal/965718306/1


Spybot S&D: http://www.safer-networking.org/en/index.html
Be sure to enable “Teatimer” which gives you realtime protection against malware invasion. (absolutely necessary)

Microsoft Windows Defender
http://www.microsoft.com/athome/security/s...re/default.mspx
This also provides realtime protection. (absolutely necessary)


SpywareBlaster: http://www.javacoolsoftware.com/spywareblaster.html

Microsoft Malicious Software Removal Tool (Win XP and Win 2000):
http://www.microsoft.com/security/malwareremove/default.mspx

AČ - Free from http://www.majorgeeks.com/download4281.html . Run it, click Search for Updates, then click Scan.


CWShredder
CW Shredder removes some variants of spyware known as the Coolwebsearch Trojan. The Trojan takes advantage of a flaw in a key component of Windows -- Microsoft's version of the Java Virtual Machine -- to install itself via popups often found on porn and illegal software (a.k.a. "warez") sites. Run CWShredder after installing, and have it look for updates. Then click the "Fix" button, and the program will both scan and fix any problems it finds. If your system does not have this kind of spyware, it will give you the good news.
Freeware
http://www.intermute.com/spysubtract/cwshr...r_download.html


Ccleaner
http://www.ccleaner.com/
Microsoft Baseline Security Analyzer (MBSA)
MBSA is an easy-to-use tool designed for the IT professional that helps small and medium businesses determine their security state in accordance with Microsoft security recommendations and offers specific remediation guidance. Improve your security management process by using MBSA to detect common security misconfigurations and missing security updates on your computer systems.
http://www.microsoft.com/technet/security/...a2/default.mspx

The following are web based scans that should be put in "bookmarks" in IE.

Kaspersky Anti-Virus Web Scanner
http://www.kaspersky.com/service?chapter=161739400#betatest


Panda Activescan
http://www.pandasoftware.com/activescan/co...n_principal.htm

Trend Micro antivirus and malware scan:
http://housecall-beta.trendmicro.com/en/st...orp.asp?id=scan

Etrust Anti-virus web scanner
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx.

online trojan scans here –
Sygate Trojanscan
http://scan.sygatetech.com/pretrojanscan.html


Windows Security Trojanscan
http://windowsecurity.com/trojanscan
See instructions for it here:
http://www.windowsecurity.com/trojanscan/trojanscan.asp

One scan that will work with Mozilla based browsers:
Trend Micro antivirus European Edition (supports Mozilla based browsers)
http://uk.trendmicro-europe.com/consumer/h...call_launch.php

Edited by Enthusiast, 23 March 2006 - 03:07 PM.


#5 ejplace

ejplace
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:02:25 PM

Posted 23 March 2006 - 03:14 PM

Thanks again. I tried deleting the program, however when I click Change/Remove in the Control Panel, nothing happens. Also when I go to the Start Menu and go the the Uninstall FSsecure AntiVirus nothing happens, the message still appears every minute or so. I dont know if this is because I uninstalled it yesterday because it had expired and after doing System Restore it messed something up? Ideas?

#6 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:02:25 PM

Posted 23 March 2006 - 03:33 PM

If F Secure expired I would install AVG instead of paying for it again.

Many of us here use AVG - it works well, it's free, and it updates automatically.

Using System Restore would have reversed everything you did yesterday.

Try installing F Secure again and then uninstalling it.
If you can't, stop it from starting in the start menu either by using msconfig or even better, the following freeware ap which is easier to use:

Startup Inspector
And
Startup Monitor

http://www.windowsstartup.com/download.php

Download both. Startup Inspector to regulate startups and Monitor to make you aware when something tries to add itself to your startup menu and require your permission.

#7 ejplace

ejplace
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:02:25 PM

Posted 23 March 2006 - 07:16 PM

Computer will still not uninstall F Secure. If I select it in the Add/Remove Programs, nothing happens...annoying message still popping up. Any ideas?

#8 phantazy

phantazy

  • Members
  • 107 posts
  • OFFLINE
  •  
  • Location:London UK
  • Local time:08:25 PM

Posted 23 March 2006 - 07:27 PM

This is from Kelly Theriot: Open a Command Prompt window and leave it open. Close all open programs. Click Start, Run and enter TASKMGR.EXE Go to the Processes tab and End Process on Explorer.exe. Leave Task Manager open. Go back to the Command Prompt window and change to the directory the AVI (or other undeletable file) is located in. At the command prompt type DEL <filename> where <filename> is the file you wish to delete. Go back to Task Manager, click File, New Task and enter EXPLORER.EXE to restart the GUI shell. Close Task Manager.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users