Re: Any idea which bug this is?

From: "Victek" <Victek@xxxxxxxxxxxxxxx>

| I worked on a system today where the task manager, regedit, ctrl-alt-del,
| Internet Explorer, and Safe mode were all disabled. This PC has the Verizon
| Security Suite installed and updated, though it appeared the malware had
| turned off the AV component (so much for the VSS). I was able to install,
| update and scan with both MBAM and SuperAntiSpyware. They found and removed
| a quite a bit, but the PC was still crippled. All of the disabled features
| remained broken, and Firefox and Opera could only browse sporadically.

| Is there a particular malware responsible for the above, or has this become
| the norm?


Just about the norm. Each new piece of malware gains from the "benefits" learned from its
predeccessors.

Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

Then post the contents of the HJT log in your post in one of the below expert forums...

{ Please - Do NOT post the HJT Log here ! }

Forums where you can get expert advice for HiJack This! (HJT) Logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.malwarebytes.org/forums/index.php?showforum=7

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://aumha.net/viewforum.php?f=30
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


.

Relevant Pages

  • Re: poison ivy trojan
    ... | Also in the task scheduler, I suspect that may have a lot to do with what's ... Download and execute HiJack This! ... Then post the contents of the HJT log in your post in one of the below expert forums... ... Forums where you can get expert advice for HiJack This! ...
    (microsoft.public.windows.vista.general)
  • Re: Virus? malware?
    ... Please stay far away from the fake MS MVP, software plagiarizer and software pirate who ... Download and execute HiJack This! ... Then post the contents of the HJT log in your post with a full explanation of your problem ... Forums where you can get expert advice for HiJack This! ...
    (alt.comp.anti-virus)
  • Re: Virus Problems
    ... blocking me from going to any sites that help with security issues. ... Download and execute HiJack This! ... Then post the contents of the HJT log in your post with a full explanation of your problem ... Forums where you can get expert advice for HiJack This! ...
    (microsoft.public.windowsxp.security_admin)
  • Re: WMIPRVSE trying to TFTP a lot! Why?
    ... | We use McAfee with rules to block any TFTP use, ... Download and execute HiJack This! ... Then post the contents of the HJT log in your post with a full explanation of your problem ... Forums where you can get expert advice for HiJack This! ...
    (microsoft.public.windowsxp.general)
  • Re: Troj/Rustok-N and WINBLUESOFT
    ... | quite a bit of trouble as a result. ... Download and execute HiJack This! ... Then post the contents of the HJT log in your post with a full explanation of your problem ... Forums where you can get expert advice for HiJack This! ...
    (microsoft.public.windowsxp.security_admin)