Strange behaviour in Windows XP

[Paul Brewer]

Hi

A mate of mine, who's just got himself a new PC and a broadband
connection has got a really odd problem.

Basically, Windows update pops up every 20 or so seconds in the bottom
right-hand tray, each time the information box stays open until the
next one appears. The globe icons stay, if left alone there will be 20
or 30 of them in the tray, but when you hover the mouse cursor over
them theu disappear.

IE6 won't load, if we double-click the icon the window opens for less
than a second, and then closes.

The windows task manager behaves in exactly the same way, opens for
less than a second and then closes.

Mozilla firebird opens and stays open without any problems.

I ran Hijack this, came up with an odd program message which was:

Global startup: eOvKiA|Y.exe

It couldn't remove it because the file was in use. I managed to find it
using search, in safe mode, and removed it, but the problem is still
there.

AdAware and Spybot S&D found lots of spyware, but haven't been able to
detect and stop the problem.

Any ideas, anyone? It's driving us mad!

TIA

--
Paul-B Reply-to address is spamtrap... use paul @ streetka dot biz
without the spaces

[Lance Delacroix]

On Wednesday 22 October 2003 09:17 pm, Paul Brewer issued a fatwa thus:

> It couldn't remove it because the file was in use. I managed to find it
> using search, in safe mode, and removed it, but the problem is still
> there.

Good work! But I wonder if it managed to clone itself or to create a new
..exe file somewhere.

I don't have the faintest ****ing idea what the problem is, but I might
suggest that you disable all unneeded services while you're digging around
in there.

You might try checking your startup programs to see if there's anything
there that shouldn't be.

[Chuck]

On 22 Oct 2003 18:17:39 GMT, "Paul Brewer" <spam-begone@lycos.co.uk>
wrote:

>Hi
>
>A mate of mine, who's just got himself a new PC and a broadband
>connection has got a really odd problem.
>
>Basically, Windows update pops up every 20 or so seconds in the bottom
>right-hand tray, each time the information box stays open until the
>next one appears. The globe icons stay, if left alone there will be 20
>or 30 of them in the tray, but when you hover the mouse cursor over
>them theu disappear.
>
>IE6 won't load, if we double-click the icon the window opens for less
>than a second, and then closes.
>
>The windows task manager behaves in exactly the same way, opens for
>less than a second and then closes.
>
>Mozilla firebird opens and stays open without any problems.
>
>I ran Hijack this, came up with an odd program message which was:
>
>Global startup: eOvKiA|Y.exe
>
>It couldn't remove it because the file was in use. I managed to find it
>using search, in safe mode, and removed it, but the problem is still
>there.
>
>AdAware and Spybot S&D found lots of spyware, but haven't been able to
>detect and stop the problem.
>
>Any ideas, anyone? It's driving us mad!
>
>TIA

Presuming that AA and SSD actually removed everything they found, next
do HijackThis. Start here:
http://forums.spywareinfo.com/index.php?showtopic=5187


Chuck
I hate spam - PLEASE get rid of the spam before emailing me!
Paranoia comes from experience - and is not necessarily a bad thing.

[Giel]

i dont know winxp, but stating up in save-mode or starting up holding shift
might help to stop the files being in use.
I hope you use some anti-virus aswell.

--
__________________________________________________
Stop those lagging advertisements and spies, they're slowing up your
internet!
Use this simple ProxyAutoConfig script:
http://nina.xs4all.nl/pac/no-ads_no-proxy.pac
ps;this overrides other proxysettings, you will be surfing without
one(direct).

A dutch howto and help is here:
http://nina.xs4all.nl/pac

For nerds:
I like the above pac-script extended !
How 'bout uploading me a beter one here:
http://nina.xs4all.nl/upnav.htm

Like all cool services at giel's, this is free and continues as long as it
does not constipates my connections.
"Lance Delacroix" <lance_delacroix@fastmail.fm> wrote in message
news:bn6kj2$tueo2$1@ID-110594.news.uni-berlin.de...
> On Wednesday 22 October 2003 09:17 pm, Paul Brewer issued a fatwa thus:
>
> > It couldn't remove it because the file was in use. I managed to find it
> > using search, in safe mode, and removed it, but the problem is still
> > there.
>
> Good work! But I wonder if it managed to clone itself or to create a new
> .exe file somewhere.
>
> I don't have the faintest ****ing idea what the problem is, but I might
> suggest that you disable all unneeded services while you're digging around
> in there.
>
> You might try checking your startup programs to see if there's anything
> there that shouldn't be.
>
>