Buffer Overflow Protection

[suvinv_2006]

hi i got message from virus alert like this bo:stack Blocked by Buffer Overflow Protection
(11/12/2006 1:13:21 AM Blocked by Buffer Overflow Protection WORKGROUP\SYSTEM C:\WINDOWS\system32\services.exe::LoadLibraryA bo:stack)so how will i remove this virus from xp o.s

[Hack]

Welcome to the forums.

Is this a company PC or your own machine?

[suvinv_2006]

personal computer

[suvinv_2006]

its my own pc

[wiccaan]

Check out this post on another forum:
http://www.geekstogo.com/forum/index...ic=123927&st=0

Not trying to lead you away from this, but I would rather you read the real topic instead of me power phrasing it.

But here ya go: small details of what needs to be done:

"You have a Wareout infection!"

"ou may want to print out these instructions for reference, since you will have to restart your computer during the fix.

Please download FixWareout from one of these sites:
http://downloads.subratam.org/Fixwareout.exe
http://www.bleepingcomputer.com/file...Fixwareout.exe

Save it to your desktop and run it. Click Next, then Install, make sure "Run fixit" is checked and click Finish.
The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.

Once the desktop loads a text file will open (report.txt), you can close it - the file has already been saved."

Next open HiJackThis, do a System Scan Only, and check the following items if found:

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O1 - Hosts: localhost 127.0.0.1
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O17 - HKLM\System\CCS\Services\Tcpip\..\{97B9B0F9-12C7-49DF-9930-450579F6B81F}: NameServer = 85.255.115.107,85.255.112.121
O17 - HKLM\System\CCS\Services\Tcpip\..\{A4665262-31AD-4610-B2D5-2357EC17E427}: NameServer = 85.255.115.107,85.255.112.121
O17 - HKLM\System\CCS\Services\Tcpip\..\{FCAF4601-B1A1-4513-96E9-A034BB0DB9DB}: NameServer = 85.255.115.107,85.255.112.121
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.107 85.255.112.121
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.115.107 85.255.112.121
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.107 85.255.112.121

Click FIX CHECKED. Close HijackThis.

There its lots more info in that thread, so please be sure to read through it. The original poster marked it as resolved, so I assume that they figured the issue out and got it fixed. Hope this helps ya