Help Needed: W32.Jeefo Virus

[Joel C]

Hi all.

During that last two weeks I have been hit with 'Generic Host Error' error reports relating too the "W32.Jeefo" virus. I use to get about 5-10 a day. (The error boxes that you can send to Microsoft through the net)

Yesterday i installed Norton Anti Virus 2004. Since then every time I start my computer or open a file/folder I am hit consistently with Virus Alerts, with high risk, all caused by the "W32.Jeefo" virus. All I can do is click OK.

All the files are .exe files. And I think they are deleting them as some applications I cannot open anymore.

I was going to back up my files via CD, to do a reformat of my computer. But now I cannot open a burning program because it has infected my burning .exe file.

Anyone know any information with this virus and how I can cease the problem?

Any help is appreciated. Thanks in advance.

Joel

 

[jim boy]

In these sorts of cases, the best thing is to get info from the virus sites. In your particular case, look at http://securityresponse.symantec.com/avcenter/venc/data/w32.jeefo.html. You can skip down to the section that says 'removal instructions'


Basically it says update your virus scanner, then reboot the machine into safe mode before running a scan. It sounds like a nasty virus, so back up all your data files, you may need to reformat.

 

[Joel C]

Thanks for that Jim Boy.

After the Norton installation I have encountered a few problems and think it would be easy to just start over. I have backed up all-important files to CDRs.

So I’m thinking ill do a System Recovery?/Reformat? of the whole computer. Just a few q's before I attempt it.

Will a system recovery wipe everything and make it like you had just purchased new computer with original programs installed?
Will this definitely fix the entire virus?
Should I be aware of anything else either before/during/after the process of it?

Thanks again!

Edit: and some .exe files that had apparently been infected (which i backed up) could it bring the virus back after the reformat?

 

[Borgsta]

If the virus was on the PC when u backed up your files you are screwed as they will still have the virus when u put them back on the pc.

I believe using the Norton removal instructions is your best bet. It may take a while, but formatting will probably take longer. You may have to re-install programs but they wont have the virus on them.

 

[Joel C]

Cheers Borgsta, Yeah well thats alright. Only .exe files were infected so i can donwload and install thoes programs again. All the important files were only docs, pics, etc.

 

[Joel C]

Alright, I ended up doing a sucessfull system recovery.

But im back to square one, within 1 hour after the recovery i recieve this message again!:

Any ideas on how i can solve this, after sending the error report it comes up with the microsoft crash analysis and says it is the W32.Jeefo virus... But how could i get it within an hour of the recovery? Btw i hadnt put on any of my backed up files yet.

 

[Borgsta]

the system recovery just puts Windows back to where you were when it last saved it, doesnt it? or is that system restore

If so, the virus is probably there so you didnt actually get rid of it. Scan your PC and delete all the files.

 

[Joel C]

Well i did the one where it deleats all files/programs that were installed after i purchased it. So it only had original preinstalled files which came with the pc.

Just relised Generic Host Process for Win32 Services, is a file "svchost.exe" located in C:\WINDOWS\system32\svchost.exe. Could that have anything to do wiht it?

 

[Borgsta]

Thats an important file. At this stage if I were you I would give up and format the PC. Make sure you do a full format if you want to do that.

Then straight away install Norton, update the virus checker and scan all those Cd's that you backed up.

Sounds like a nasty virus if you let it mutate a bit.