Strange Error Message

[Andrew Porter]

I downloaded a file that contained a virus. I used AVG
antivirus to remove a 'Trojan Horse: Downloader' virus.
However, since then, a new file keeps appearing in my
Temp directory every time the computer is restarted.
This file is called msbb.exe.
It causes an error message to occur on starting the
computer, and sometimes during programs:

"16 bit MS-DOS Subsystem"
The NTVDM CPU has encountered an illegal instruction
CS: 0f69 IP:020d OP:63 6861 72 73

I can delete msbb.exe, but on restarting, it reappears.
Any ideas what has happened? Running full checks for
viruses didn't throw up anything, and I have tried to
check for files modified the day i got the virus, but
none of them seemed suspicious.

Thanks
Andrew

[CRS]

I have a recollection that this may be a "spyware" program. It would be
worth your while downloading and running the free version of Ad-Aware
from http://www.lavasoftusa.com - if it is spyware, that should get rid
of it for you.

CRS.

__________________________________________________ ______________________
Original message from Andrew Porter follows ...

> I downloaded a file that contained a virus. I used AVG
> antivirus to remove a 'Trojan Horse: Downloader' virus.
> However, since then, a new file keeps appearing in my
> Temp directory every time the computer is restarted.
> This file is called msbb.exe.
> It causes an error message to occur on starting the
> computer, and sometimes during programs:
>
> "16 bit MS-DOS Subsystem"
> The NTVDM CPU has encountered an illegal instruction
> CS: 0f69 IP:020d OP:63 6861 72 73
>
> I can delete msbb.exe, but on restarting, it reappears.
> Any ideas what has happened? Running full checks for
> viruses didn't throw up anything, and I have tried to
> check for files modified the day i got the virus, but
> none of them seemed suspicious.
>
> Thanks
> Andrew
>

Thanks for your help. I downloaded some spyware checking
software, and it has solved the problem. Also uncovered
a worrying number of other things knocking around in my
system...

>-----Original Message-----
>I have a recollection that this may be a "spyware"
program. It would be
>worth your while downloading and running the free
version of Ad-Aware
>from http://www.lavasoftusa.com - if it is spyware, that
should get rid
>of it for you.
>
>CRS.
>
>__________________________________________________ _______
_______________
>Original message from Andrew Porter follows ...
>
>> I downloaded a file that contained a virus. I used
AVG
>> antivirus to remove a 'Trojan Horse: Downloader'
virus.
>> However, since then, a new file keeps appearing in my
>> Temp directory every time the computer is restarted.
>> This file is called msbb.exe.
>> It causes an error message to occur on starting the
>> computer, and sometimes during programs:
>>
>> "16 bit MS-DOS Subsystem"
>> The NTVDM CPU has encountered an illegal instruction
>> CS: 0f69 IP:020d OP:63 6861 72 73
>>
>> I can delete msbb.exe, but on restarting, it
reappears.
>> Any ideas what has happened? Running full checks for
>> viruses didn't throw up anything, and I have tried to
>> check for files modified the day i got the virus, but
>> none of them seemed suspicious.
>>
>> Thanks
>> Andrew
>>
>.
>

[CRS]

Yes, it's astonishing how these things build up. When I first ran Ad-
Aware it reported 200+ "objects" that shouldn't have been there.

CRS.

__________________________________________________ ______________________
Original message from follows ...

> Thanks for your help. I downloaded some spyware checking
> software, and it has solved the problem. Also uncovered
> a worrying number of other things knocking around in my
> system...
>
> >-----Original Message-----
> >I have a recollection that this may be a "spyware"
> program. It would be
> >worth your while downloading and running the free
> version of Ad-Aware
> >from http://www.lavasoftusa.com - if it is spyware, that
> should get rid
> >of it for you.
> >
> >CRS.
> >
> >__________________________________________________ _______
> _______________
> >Original message from Andrew Porter follows ...
> >
> >> I downloaded a file that contained a virus. I used
> AVG
> >> antivirus to remove a 'Trojan Horse: Downloader'
> virus.
> >> However, since then, a new file keeps appearing in my
> >> Temp directory every time the computer is restarted.
> >> This file is called msbb.exe.
> >> It causes an error message to occur on starting the
> >> computer, and sometimes during programs:
> >>
> >> "16 bit MS-DOS Subsystem"
> >> The NTVDM CPU has encountered an illegal instruction
> >> CS: 0f69 IP:020d OP:63 6861 72 73
> >>
> >> I can delete msbb.exe, but on restarting, it
> reappears.
> >> Any ideas what has happened? Running full checks for
> >> viruses didn't throw up anything, and I have tried to
> >> check for files modified the day i got the virus, but
> >> none of them seemed suspicious.
> >>
> >> Thanks
> >> Andrew
> >>
> >.
> >
>