Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Win32:small-eke / Win32netheif-w /win32:cimuz-af

  • Please log in to reply
2 replies to this topic

#1 glueboot


  • Members
  • 22 posts
  • Local time:02:48 AM

Posted 08 July 2007 - 11:35 AM

Hello :flowers:

I've been clearing up my boyfriend's computer and have come across a number of problems that I hope you can help with.

The first problem I came across is c:\windows\system32\mstsdsc.exe

I came across this in the start up program list and turned it off. Every time I reboot the computer it has switched itself back on and has tried to access the internet (but I have blocked it).

After reading that mstsdsc.exe is a virus I decided to run an virus scan. It found three viruses:


I moved the files associated with Netheif to the chest and that wasn't a problem as it wasn't in system folder. However, the file with the Small-EKE is in the system folder at: c:\windows\system32\tmwsock.dll

And Win32:Cimuz-AF is at c:\windows\system32\mstsdsc.exe

This is probably my boyfriend's fault because he tells me his anti-virus subscription ran out months ago. :thumbsup:

I have installed Zone Alarm and Avast.

Any advice on how to fix these problems would be much appreciated.

His OS Windows XP SP2


BC AdBot (Login to Remove)


#2 buddy215


  • Moderator
  • 13,318 posts
  • Gender:Male
  • Location:West Tennessee
  • Local time:01:48 AM

Posted 08 July 2007 - 12:04 PM

Install Super Antispyware. Run it in safe mode. Allow it to quarantine whatever it finds.

Post a Hijack This log in the Hijack This Forum by following the directions in the link below. DO NOT post the log in this forum.

How To start Windows in Safe Mode
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 glueboot

  • Topic Starter

  • Members
  • 22 posts
  • Local time:02:48 AM

Posted 08 July 2007 - 02:12 PM

Will do. Thanks for your reply.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users