From: "Robert" <R_***@hotmail.com>

| Hi all,
| I just wanna know whether the following description was derived from the
| latest virus?
| [os] win2k pro with sp4, mcafee7.1 with latest virus definition and scan
| engine. all packages updated
| [symptom]1. Cannot paste, cannot drag file
|                2. SVCHOST.exe take more than 90% usage of CPU
|                3. Error reported of explorer.exe frequently
|                4.found virus files: ucilonyc.exe;kgjdj27.exe; ozify.exe;
| pcmsg.dll, 32kb.com; cleanup.com; winserver32.exe; win.exe; winsys.exe;
| unere.exe; SVCHOST32.EXE
|                5. Remove all detected files, replace the svchost.exe on
| &root&\system32
|
| NONEFFECTIVE!!!
| Wish get prompt help/solution.
|
| Best Regards
| --
| Nothing is easy,
| Everything is possible.

"David H. Lipman" wrote:

> From: "Robert" <R_***@hotmail.com>
>
> | Hi all,
> | I just wanna know whether the following description was derived from the
> | latest virus?
> | [os] win2k pro with sp4, mcafee7.1 with latest virus definition and scan
> | engine. all packages updated
> | [symptom]1. Cannot paste, cannot drag file
> |                2. SVCHOST.exe take more than 90% usage of CPU
> |                3. Error reported of explorer.exe frequently
> |                4.found virus files: ucilonyc.exe;kgjdj27.exe; ozify.exe;
> | pcmsg.dll, 32kb.com; cleanup.com; winserver32.exe; win.exe; winsys.exe;
> | unere.exe; SVCHOST32.EXE
> |                5. Remove all detected files, replace the svchost.exe on
> | &root&\system32
> |
> | NONEFFECTIVE!!!
> | Wish get prompt help/solution.
> |
> | Best Regards
> | --
> | Nothing is easy,
> | Everything is possible.
>
> There are anti virus News Groups specifically for this type of discussion.
>
>     microsoft.public.scripting.virus.discussion
>     microsoft.public.security.virus
>     alt.comp.virus
>     alt.comp.anti-virus
>
> Dump the contents of the IE Temporary Internet Folder cache (TIF)
>
> start --> settings --> control panel --> internet options --> delete files
>
> 1)    Download the following four items...
>
>          McAfee Stinger
>          http://vil.nai.com/vil/stinger/
>
>          Trend Sysclean Package
>          http://www.trendmicro.com/download/dcs.asp
>
>          Latest Trend Pattern File.
>          http://www.trendmicro.com/download/pattern.asp
>
>          Ad-aware SE (free personal version v1.05)
>          http://www.lavasoftusa.com/
>
> Trend Sysclean Method  1
> ---------------------------------------
> Create a directory.
> On drive "C:\"
> (e.g., "c:\sysclean")
>
> Download SYSCLEAN.COM and place it in that directory.
> Download the signature files (pattern files) by obtaining the ZIP file.
> For example;  lpt524.zip
>
> Extract the contents of the ZIP file and place the contents in the same directory as
> SYSCLEAN.COM.
>
> Trend Sysclean Method  2
> ---------------------------------------
> The utility SYSCLEAN_FE in "Procedure 1" at the following URL
> http://www.ik-cs.com/got-a-virus.htm  automates the download and execution process of the
> Trend Sysclean Package.
>
>
> 2)     Update Ad-aware with the latest definitions.
> 3)     Reboot your PC into Safe Mode and shutdown as many applications as possible
> 4)     Using Trend Sysclean, Stinger and Ad-aware, perform a Full Scan of your
>         platform and clean/delete any infectors/parasites found.
>         (a few cycles may be needed)
> 5)     Restart your PC and perform a "final" Full Scan of your platform using the three
>         utilities;  Trend Sysclean, Stinger and Ad-aware
>
> * * *  Please report your results !  * * *
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>