zxx, mscrss.exe & winudp.exe

June 14, 2009 at 04:29:51
Specs: Windows XP, x86 AMD 2593, 2gb RA
Dear all,

My parents are having major issues with their computer and I was hoping someone cleverer than I could advise me how to help rid their pc of two particularly problematic viruses.

For info, the computer runs Windows XP, is fairly high-spec and it has AVG, Ad-Aware and StopZilla installed.

The problems started when my naive younger brother downloaded something for XBox Live which turned out to be a virus. It stole his MSN password and 24 hours later my parents credit card had £128 less on it as someone had used his details to hack into his Xbox account and spend all that money!

My younger brother then downloaded a program called 'MSN Password Recovery' (I know, but he is only 10 and has no common sense whatsoever)!

If I go the startup screen on msconfig there is a process called mscrss that I can't get rid of (although I have unclicked it). When I log into Windows a program called winudp.exe tries to run automatically. Finally, a program called zxx keeps being found and removed by StopZilla but each time I reboot the computer it comes back.

I have done online scans with Onecare and Trend Micro Housecall (and the latter removed several other pieces of damaging malware) but the three I mention above remain. Neither AVG, As-aware or StopZilla seem to recognise them as viruses.

Can anyone help me out on this? I'm at the end of my tether.

Thank you!

See More: zxx, mscrss.exe & winudp.exe

Report •

June 14, 2009 at 05:42:14
Boot to safe mode. Try to download, update & run anti malware from malwarebytes.org

You can also burn it to a CD on another machine & run it that way.

If that doesn't work or partially helps, download Hijack This. Try to remove the files you mentioned there. If you don't understand all of the log, use processlibrary.com or post the log.

If they still reappear from the registry, I'll give you some registry keys where they might be.

How do you know when a politician is lying? His mouth is moving.

Report •

June 14, 2009 at 20:06:31
downup.exe and windup.exe are virus

Report •

June 15, 2009 at 01:30:24
Guapo, thank you for your advice. I did as you said and it appears that anti malware has removed the problem. Next step is for my parents to dit down and have an 'internet security' chat with my little bro! Once again, thank you and best wishes.

Report •

Related Solutions

June 15, 2009 at 05:47:44
I'm glad it worked. Say hello to little bro.

How do you know when a politician is lying? His mouth is moving.

Report •

Ask Question