Virus removal

[skysidhe]

Originally Posted by xoxoxoBruce

Oh, so you don't believe me, huh? :p
Look here.

Yes I am the original Ms. Thomas. The doubter.

Originally Posted by tw

1) I have watched Malwarebytes identify many items - and not one was malware. One was the installation program for a software package. Another even wipes out a cookie for The Cellar.

2) How does antivirus 'clean' something that is not known to be malware? That is the problem. All these virus companies share databases of known malware. Then each attempts to develop cures for as many as possible. Not every company has a cure for every currently found malware.

3) Do you have malware? Read an earlier discussion we had on rootkit viruses to appreciate the complexity. Some places to watch include Task Manager. New processes that cannot be explained are one indication. Processes that consume too much CPU time are another. A program that summarizes all internet connections is another useful utility. If something attempts to randomly reconnect to the internet - a symptom.

4) One important maintenance option is a program that verifies anti-virus is working. I have seen anti-virus programs disabled without indication. That anti-virus maintenance program identified (and sometimes could not fix) the problem.

I have even seen one anti-virus program disable the other anti-virus program.

biookmarked both for reading later

[classicman]

Uggghhh READ!

no bruce - thats not it at all.
Should I remove the Spyware Dr. program I currently have?

Also I have virusScan. It just ran out.
Should I renew it or get a different anti-virus program?

[classicman]

ok - I downloaded Malwarebyte's and uninstalled Spyware Doctor. I ran Malwarebytes and it found 99 objects infected. I deleted all the trojans.

[classicman]

Some of the items marked are labeled "Registry Key" and "Registry Value."
Do I delete them too?

[mbpark]

Yes, you want to do that, or else you'll get more error message popping up telling you that things are missing, and you'll have a slower startup time because of it.

[classicman]

thanks - It seems to be running faster/better.
OK, I deleted them all and ran malware till it came up clean...
Now every time I start anything, I get the following error message:

"The application or DLL C:\WINDOWS\system32\fevowafo.dll is not a valid Windows image. Please check this against your installation diskette."

The program continues to load normally, but what is this message all about and how do I stop/prevent/fix it.

[xoxoxoBruce]

http://www.prevx.com/filenames/18719...OWAFO.DLL.html

[mbpark]

Get yourself Autoruns from sysinternals.com and you'll be able to see exactly where certain programs like that start up at. You can then disable this one.