Found another redirecting virus

BleepingComputer.com: Found another redirecting virus

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

Found another redirecting virus

#1 W8TLS

New Member

Group: Members
Posts: 3
Joined: 17-January 11

Posted 19 January 2011 - 06:34 PM

I found a redirecting virus on my computer that my antivirus doesn't pick up when scanning the file. Only after it is in memory. I use Eset Smart Security 4. My antivirus subscription had expired and all of a sudden no mater what search engine I used it would randomly redirect me to some other page. After I updated my subscription it was found in memory and couldn't be deleted.

This is what file I found.
"C:\Users\Tim\AppData\Local\d3dHelpPlay\compatHelplib.dll",SystemcfgTask CRLapiTrust" (Line from Hijackthis).

Also here in the registry.
"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run"

It infected my Windows 7 64 bit. I had to boot into my Windows Xp to delete it (Easier for me to do this).

I found very little on the web about this. I still have the file and I'm going to submit it to Eset.

Thought I'd share. Also I'm new here