Re: HELP ME - ECCI.EXE virus/spyware keeps popping back Find, Notepad

From: Colonel Flagg (colonel_flagg_at_NOSOUPFORJ00internetwarzone.org)
Date: 08/05/03


Date: Mon, 4 Aug 2003 21:03:52 -0400

In article <6169fc3a.0308041611.5492df97@posting.google.com>,
electricbikesguide@yahoo.com says...
> Is there anyway to get rid of the ECCI.EXE virus that has imbedded
> itself in my PC and keeps on replicating?
>
> I've deleted it several times (using Spybot to halt its live operation
> first) but it is resilient and even learns how to stop Spybot from
> ending it as a resident program.
>
> ECCI.EXE stealhily dials out and can remove ZoneAlarm from memory; or,
> by pass Zone Alarm's dial-out firewall. It has even deleted Zone
> Alarm's alert log.
>
> Right now, ECCI.EXE re-appears if Windows 98's "find" or "notepad" is
> used. However, Eudora doesn't cause it to re-appear, and this is just
> about the only program that doesn't cause ECCI.EXE to reappear from
> the grave.
>
> Using Spybot, I've removed ECCI.EXE from the startup programs, but
> once ECCI.EXE re-appears, the startup program sequence contains
> ECCI.EXE again.
>
> Using "Add/Remove Programs" and the German-made AntiVir9x (a.k.a. Luke
> Filewalker) also causes ECCI.EXE to reappear. Mouse and program
> operations slows down drastically.
>
> Is there a way to get rid of ECCI.EXE with using Find, Add/Remove
> Programs?
>
> This virus appeared on our system on 31 July 2003 possibly by email
> attachment with a subject header that sounded like "Current Currency
> Rates" or similar.
>
> Thanks in advance for all replies.
>

some help has already been given to you. since you're so goddamn stupid
that you can't read the written word, i'm not gonna help you any
further. once you show just an inkling of intelligence and get off your
lazy ass and try to help yourself, i'll give you some pointers.

-- 
Colonel Flagg
http://www.internetwarzone.org/
Privacy at a click:
http://www.cotse.net 
Wanna ask a question in Usenet?
http://www.tuxedo.org/~esr/faqs/smart-questions.html
Everything about Usenet answered:
http://www.internetwarzone.org/answers.html
America WILL NOT forget 9-11-01


Relevant Pages

  • HELP ME - ECCI.EXE virus/spyware keeps popping back Find, Notepad
    ... I've deleted it several times (using Spybot to halt its live operation ... Using Spybot, I've removed ECCI.EXE from the startup programs, but ... Is there a way to get rid of ECCI.EXE with using Find, ... This virus appeared on our system on 31 July 2003 possibly by email ...
    (alt.computer.security)
  • Re: HELP ME - ECCI.EXE virus/spyware keeps popping back Find, Notepad
    ... >I've deleted it several times (using Spybot to halt its live operation ... >Using Spybot, I've removed ECCI.EXE from the startup programs, but ... >Filewalker) also causes ECCI.EXE to reappear. ...
    (alt.computer.security)
  • Re: Unwanted items on screen when IE is used.
    ... I have used Spybot and it does not get rid of the items, ... screeen or in favorites. ... > Tutorial on how to use HijackThis: ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: explorer.exe - application error
    ... I ran spybot, ... > to the admin acct. ... > remembered reading somewhere that an added on shell command may be ... is to get rid of the particular rt. ...
    (microsoft.public.win2000.applications)
  • Re: dll problem
    ... There is a another quicker way of getting rid of these AOCTRES files. ... I know you must have tried Spybot and Ad-aware6 and none of them were ... This will prevent the computer from loading these files at boot up ... >> on the registry and all the spyware software like spybot ...
    (microsoft.public.windowsxp.general)

Quantcast