PE_finaldo.b removal?????????

  Les53 22:12 12 Feb 06
Locked

I am trying to remove PE_finaldo.b which has infected a file called windows/win32ssr.exe.

PC Cillin has detected this virus but is unable to clean/quarantine.

If i use the microsoft spyware removal tool in advanced options under running processes i can locate it and stop the process.

what i can't do is use pc cillin as the options are grey out, but it been detected and in the view box.

Any ideas welcolmed

  skidzy 22:15 12 Feb 06
  Les53 22:34 12 Feb 06

Thanks i will give that a go.
Any other ideas?

  skidzy 22:42 12 Feb 06

Try ewido first and get back to me,i think this will sort your problem.
If not,will try something else.
You could always run msantispy
click here

  skidzy 22:45 12 Feb 06
  Les53 23:25 12 Feb 06

Can seem to find the pattern 2.812.02 on PC cillon. It also mentions delete file but alas it cannot clean or quarantine. I even tried stopping the process then trying.


msantispy
Does not detect it, but clearly shows it in running programmes/services in the advanced tools section.

  skidzy 23:28 12 Feb 06

Have you tried Ewido ?

  Skyver 23:34 12 Feb 06

Start in safe mode and delete windows/win32ssr.exe, run Ewido, if your anti virus program is enabled again, use it.

  skidzy 23:37 12 Feb 06

Les i suggest you run this

click here

Then post the log here

click here

  skidzy 23:47 12 Feb 06

Les,have you had any suspicous emails lately,you will need to make sure its permantely deleted from you email if it came from there...it looks like that is the origin.
Read this.
click here

  Les53 22:34 17 Feb 06

ewido fixed it good and proper plus found a few other nasties as well. Full marks to Ewido.
Thanks everybody

This thread is now locked and can not be replied to.

What is ransomware and how do I protect my PC from WannaCry?

Disney layout supervisor Rob Dressel on the challenges of visualising Moana

Siri vs Google Assistant