Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Win32:small-eke / Win32netheif-w /win32:cimuz-af


  • Please log in to reply
2 replies to this topic

#1 glueboot

glueboot

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:12:07 PM

Posted 08 July 2007 - 11:35 AM

Hello :flowers:

I've been clearing up my boyfriend's computer and have come across a number of problems that I hope you can help with.

The first problem I came across is c:\windows\system32\mstsdsc.exe

I came across this in the start up program list and turned it off. Every time I reboot the computer it has switched itself back on and has tried to access the internet (but I have blocked it).

After reading that mstsdsc.exe is a virus I decided to run an virus scan. It found three viruses:

Win32:Netheif-W
Win32:Small-EKE
Win32:Cimuz-AF

I moved the files associated with Netheif to the chest and that wasn't a problem as it wasn't in system folder. However, the file with the Small-EKE is in the system folder at: c:\windows\system32\tmwsock.dll

And Win32:Cimuz-AF is at c:\windows\system32\mstsdsc.exe

This is probably my boyfriend's fault because he tells me his anti-virus subscription ran out months ago. :thumbsup:

I have installed Zone Alarm and Avast.

Any advice on how to fix these problems would be much appreciated.

His OS Windows XP SP2


Thanks!

BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • BC Advisor
  • 12,985 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:11:07 AM

Posted 08 July 2007 - 12:04 PM

Install Super Antispyware. Run it in safe mode. Allow it to quarantine whatever it finds.
http://www.superantispyware.com/

Post a Hijack This log in the Hijack This Forum by following the directions in the link below. DO NOT post the log in this forum.
http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/
--------------------------------------------------------------------------------

How To start Windows in Safe Mode
http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss

A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”


#3 glueboot

glueboot
  • Topic Starter

  • Members
  • 22 posts
  • OFFLINE
  •  
  • Local time:12:07 PM

Posted 08 July 2007 - 02:12 PM

Will do. Thanks for your reply.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users