unwanted program in msconfig

There is a program loading at startup "exee.exe" I can't get rid of (msconfig). It loads itself into c:\windows\all users\start menue\programs\start up deleting it in safe mode doesn't work. Virus scans from pcpitstop didn't identify any viruses but I have a feeling it is a spywhere program. Can someone help me get rid of it, it slows computer and mouse way down for a short time. Searches here and on google lead me to think it is a spywhere file so I have let pit reset my security settings.

 

Hello Bill,

Search or ask here http://www.spywareinfo.com/yabbse/

The tool the board will ask you to use is here: http://www.tomcoyote.org/hjt/

Another tool the board will ask you to use is SpyBotS&D here http://spybot.safer-networking.de/


Regards - Charles

 

fixxed

They determind it was the bug bear virus thanks for the links.

 

Bill

The programs mentioned may find but not clean this one. Hope they lead you to the correct cleaner. This was not clear in your reply. If you had a Virus scanner you should find out why it did not detect this.

Don't make the mistake of thinking that enough steps to keep it from starting at boot means that is in fact cleaned from your computer.

To be sure below are the tools to do so.

BugBear fix tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.b
ugbear@mm.removal.tool.html


Special Virus cleaners

Stinger <http://vil.nai.com/vil/stinger/>
PQremove <http://www.webmasterfree.com/software/2911.html>
SysClean <http://www.trendmicro.com/download/tsc.asp>

These are the Delta force for only the newest and most prolific viruses today.

Use these if it is possible that a virus may have disabled your regular scanner.

For a quick clean, and then if they find and clean anything do a full deep scan with a full-fledged scanner.

If you suspect a virus has disabled your regular scanner you should do 3 things

1. Download STINGER, PQREMOVE and SysClean and run 1 or more of them. NOTE: always download them do not run an older one that you have had; these 3 are updated almost daily. Get the LPT$ file with SysClean as it is the def file.

2. Do an online dedicated Trojan/worm scan and online regular virus scan.

3. If your virus scanner was up to date, and "IF" either 1 or more of above finds a virus then it is possible that your virus scanner has been disabled. You should completely uninstall and reinstall your virus scanner update it and run it in full mode with max settings.

Online scans

Online Virus scanners
<http://www.anti-trojan.net/at.asp?l=en&t=onlinecheck>

<<http://housecall.antivirus.com/http...ie&venid=sym&plfid=20&pkj=OFRIWOBWYSHSFVIGMKI>

<http://www.pandasoftware.com/activescan/com/activescan_principal.htm>

Mike

 

Thanks Mike, The spyware board sent me to the right cleaner and it appears to be gone. It did disable my NAV butI think I have that back and goning. I will run your links Thanks for all the help. For a side of info I Have disabled sharing of certain directories I had active to make files more convienient acrost my network but a week of unproductive time just killed the little time I thought I was saving.