8oeucz.exe file malicious & can't delete, help!

G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

I have a crazy acting Win 2K Pro(sp4), it has a file
named '8oeucz.exe' listed & jumping all over the Processes
list, consuming all kinds of processor, and preventing the
PC from starting beyond the desktop background(no icons).
I can get the task manager open & then Run, command line.
Worse when connected to the internet. I can kill all the
startups in MSconfig and get it started at times.
All MS security & updates are in place. Spybot & F-Prot
don't find it. Other suspect applications I can't un-
install include:
The other suspect applications I can't uninstall are:
'Context Display'
'Internet Optimizer'
'LookSmart Search'
'Lycos Search'
'Remove MyApp'
'RON Display'
'URL Display'
'WSEM Update'

Help!!
Any suggestions appreciated.
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

There is a lot of junk that is very hard to get rid of these days. I would however
try downloading AdAware also being sure to update it right away which is an option
when you start the program. They are doing almost daily updates. Try it once and if
it finds anything try again. If it continues to keep finding problems you will need
to try more advanced techniques as explained in the link below. It would also be
worth trying to run AdAware in safe mode if it does not work otherwise. If need be
you could try loading safe mode on networking to download and install software if
regular mode will not allow it. Note that booting into safe mode with networking will
disable a software firewall.

Configure AdAware to use custom options after you select start. Then enable all
possible options by selecting customize that would normally be red in color.While in
customize select tweaks and then cleaning engine and enable try to unregister objects
prior to deletion. Delete all of your temporary internet files and cookies before
scanning. if you continue to have problems you might try to disable BHO capability in
Internet Explorer by going into tools/advanced options and disable third party
browser extensions that will require a reboot. You may have to reinstall any
applications using BHO's when done. BHODemon can help find and eliminate unwanted
BHO's.

The Process Explorer tool from SysInternals may help you in tracking down rogue
processes and Autoruns may help also with startup programs list that will be a lot
more extensive than msconfig. --- Steve

http://www.lavasoftusa.com/
http://www.definitivesolutions.com/bhodemon.htm
http://www.aumha.org/a/quickfix.htm -- more advanced procedures including Hijack
this.
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

"Edward29" <anonymous@discussions.microsoft.com> wrote in message
news:2d41d01c469fa$f9416710$a501280a@phx.gbl...
> I have a crazy acting Win 2K Pro(sp4), it has a file
> named '8oeucz.exe' listed & jumping all over the Processes
> list, consuming all kinds of processor, and preventing the
> PC from starting beyond the desktop background(no icons).
> I can get the task manager open & then Run, command line.
> Worse when connected to the internet. I can kill all the
> startups in MSconfig and get it started at times.
> All MS security & updates are in place. Spybot & F-Prot
> don't find it. Other suspect applications I can't un-
> install include:
> The other suspect applications I can't uninstall are:
> 'Context Display'
> 'Internet Optimizer'
> 'LookSmart Search'
> 'Lycos Search'
> 'Remove MyApp'
> 'RON Display'
> 'URL Display'
> 'WSEM Update'
>
> Help!!
> Any suggestions appreciated.
>