On Wed, 12 Dec 2007 18:21:31 GMT, Dave Goldman wrote:
> My main anti virus client is Zone Alarm. The signatures are always up to
> date. For the last couple weeks, the program has found & treated
> multiple instances of "vundo", abetear", & sometimes "darksma". The
> program always says they have been treated and no further action is
> neccessary, But it continues, and continues. As a result, I have
> run the "Multi AV command line utility" repeatedly both in safe &
> regular mode. The various signatures for "Sophos", "Trend", "Kaspersy"
> etc all update each time, but the problem continues. I have also run the
> "Vundo Fix" utility, that didn't find anything, but then the
> Zone Alarm window pops up w/ addition instances, all being treated, but
> it just won't go away.
> I have had to boot to "last known good config..." twice, & use restore
> points several times just to boot up. The only other symptom, is the web
> browser will open extra windows when left alone....sometimes a 404, &
> sometimes "sexbuddies" in the address bar & a script error on the page.
Download and run HijackThis;
(http://aumha.org/downloads/hijackthis.zip)
Read this Tutorial *before* first use;
(http://www.bleepingcomputer.com/forums/index.php?showtutorial=42)
Once done > run HijackThis > save a scan log and post it to /any/ of the
following (expert) forums for analysis.
*Note, //registration// *is* required prior to posting a log.
- Not listed in any particular order -
(http://www.theeldergeek.com/forum/index.php?s=2e9ea4e19d3289dd877ab75a8220bff6&showforum=29)
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php?page=hijackthis)
(http://aumha.net/viewforum.php?f=30)
(http://forums.spywareinfo.com/index.php?&showforum=1
(http://www.spywarewarrior.com/viewforum.php?f=5)
(http://www.bleepingcomputer.com/forums/forum22.html)
(http://www.dslreports.com/forum/cleanup)
(http://forum.malwareremoval.com/viewforum.php?f=11)
(http://www.cybertechhelp.com/forums/forumdisplay.php?f=25)
(http://www.atribune.org/forums/index.php?showforum=9)
(http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html)
(http://forums.spywareinfo.com/index.php?showforum=1
(http://www.techmonkeys.co.uk/forums/viewforum.php?f=
(http://forum.networktechs.com/forumdisplay.php?f=130)
(http://forums.maddoktor2.com/index.php?showforum=17)
(http://forums.spywaretimes.com/index.php?showforum=2)
(http://www.bluetack.co.uk/forums/index.php?showforum=172)
(http://forums.techguy.org/f54-s.html)
(http://forums.tomcoyote.org/index.php?showforum=27)
(http://forums.subratam.org/index.php?showforum=7)
(http://www.5starsupport.com/ipboard/index.php?showforum=1
(http://www.malwarebytes.org/forums/index.php?showforum=7)
(http://www.wilderssecurity.com/forumdisplay.php?f=26)
(http://makephpbb.com/phpbb/viewforum.php?f=2)
(http://forums.techguy.org/54-security/)
(http://forums.security-central.us/forumdisplay.php?f=13)
(http://castlecops.com/forum67.html)
(http://gladiator-antivirus.com/forum/index.php?showforum=170)
>> Stay informed about: Vundo, Abetear won't go away