Re: msxsvc.exe & www.myfiledistribution.com

From: Max M.Wachtel III (maxpro4u_at_nomail.afraid.org)
Date: 12/26/04


Date: Sat, 25 Dec 2004 23:47:50 -0500

Bill G wrote:
> My son's PC continues to try to access myfiledistribution.com (which I'm now
> blocking in WinProxy). I have not yet found the process that's doing this.
> Browse isn't open. Also, I see an application die at startup now msxsvc.exe
> Not sure what this is either. Some registry entries for it in /software/dvx
>
> Any help would be much appreciated.
>
> BTW, Happy Holidays!
>
>
Beginning of standard canned reply.

Update Windows. Use a firewall.
Use an Anti-Virus of your choice and keep it updated.
In Windows Explorer, set Folder Options to “show all files”.
Clean out all temp, cache, ect. files.
Download BeClean here:
http://boozet.xepher.net/beclean/

Download Sysclean from here:
http://www.trendmicro.com/ftp/products/tsc/sysclean.com
Read this(it tells you how to use it!):
http://www.trendmicro.com/ftp/products/tsc/readme.txt
Reboot into safe mode and run Sysclean, write down results, then reboot
normally.
If offending file is in “restore” read this:
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039?OpenDocument&src=sec_doc_nam

Download AdAware from here:
http://www.majorgeeks.com/download506.html
Read the help files,download the winsock fix, and then Update and run
AdAware.
If you lose your Internet connection after running AdAware run the fix.
Winsock Fix here:
http://www.tacktech.com/display.cfm?ttid=257

Download Spybot Search+Destroy here:
http://www.safer-networking.org/en/download/index.html
Read this:
http://www.safer-networking.org/en/tutorial/index.html
Update and run Spybot (enable all protection).

Download Spyware Blaster here: (enable all protection)
http://www.javacoolsoftware.com/spywareblaster.html

Run a couple of online scanners (pick a different one than your main AV):

BitDefender:
http://www.bitdefender.com/scan/licence.php

Norton:
http://security.symantec.com/sscv6/home.asp?errorCode=3&langid=ie&venid=sym&plfid=23&pkj=XHPGJRSOMVZGYYTZXPE&bhcp=1

Panda:
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

eTrust:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

House Call:
http://housecall.trendmicro.com/housecall/start_corp.asp

If the previous do not solve your problems:
Download Bazooka here:
http://www.kephyr.com/spywarescanner/

Download SwatIt here:
http://swatit.org/

Download KL-Detector here
http://dewasoft.com/privacy/kldetector.htm

Download CWShredder here
http://www.intermute.com/spysubtract/cwshredder_download.html

Download HijackThis here:
http://www.majorgeeks.com/download3155.html
Install, run and save the log that is created. Don’t let it fix anything
yet!
You can find forums to post the log to have it analyzed here:
http://tomcoyote.org/hjt/

Download Stinger here:
http://vil.nai.com/vil/stinger/

Download eScan here:
http://www.mwti.net/antivirus/free_utilities.asp
Rename the downloaded file escan.zip and extract (with a zip program) to
C:\Downloads, which you will have to create. Run the updater
(kavupd.exe) and then run eScan (mwavscan.exe).

End of standard canned reply.

-- 
Keeping Windows Clean: http://www.geocities.com/maxpro4u/madmax.html
Virus Cleaning+Fixes:  http://www.geocities.com/maxpro4u/TechPros
Change nomail.afraid.org to neo.rr.com so you can reply by e-mail
(nomail.afraid.org has been set up specifically for
  use in Usenet. Feel free to use it yourself.)


Relevant Pages

  • Re: mfcid32.exe spawns with 100% cpu occupancy
    ... > I am experiencing an apparent virus attack on my Window 2K. ... In Windows Explorer, set Folder Options to “show all files”. ... Download Sysclean from here: ... Read the help files,download the winsock fix, and then Update and run ...
    (microsoft.public.security.virus)
  • Re: TR/Dldr.WinSh.AC.02
    ... In Windows Explorer, set Folder Options to “show all files”. ... Download Sysclean from here: ... Read the help files,download the winsock fix, and then Update and run ... Download eScan here: ...
    (microsoft.public.security.virus)
  • Re: Help-Spyware
    ... My laptop has become infected with Spyware. ... I tried to download Noadaware which was recommended but I stopped as ... Update Windows. ... Read the help files,download the winsock fix, and then Update and run ...
    (microsoft.public.windowsxp.general)
  • Re: Slow system - scumware?
    ... > My new home system was lightning fast - until recently. ... > picked up some spyware or something so I ran AdAware - no help. ... Download Sysclean from here: ... Read the help files,download the winsock fix, and then Update and run ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Slow system - scumware?
    ... > My new home system was lightning fast - until recently. ... > picked up some spyware or something so I ran AdAware - no help. ... Download Sysclean from here: ... Read the help files,download the winsock fix, and then Update and run ...
    (microsoft.public.windowsxp.help_and_support)