Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Reoccuring Vundo.B and Virtumundo


  • Please log in to reply
12 replies to this topic

#1 Agkistrodon

Agkistrodon

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:06:02 AM

Posted 03 January 2009 - 05:07 PM

I've ran ScanSpyware multiple times but both of these keep coming back. "Removal" option does not seem to help. I cannot turn on my windows automatic update, which shows as "on" in the system info, but shows an icon in the quick start that it is off. I assume this is related. I get various pop ups and most web pages take minutes to load.

Currently running Windows XP SP3 on a desktop with zone alarm and AVG/Scan Spyware/Ad-Aware/Spyware Blaster. Mostly use Firefox unless IE is needed. Any help is appreciated.

BC AdBot (Login to Remove)

 


#2 PropagandaPanda

PropagandaPanda


  • Malware Response Team
  • 10,433 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:02 AM

Posted 03 January 2009 - 05:29 PM

Hello Agkistrodon.

Let's see what we can do.

Disable Realtime Protection
Antimalware programs can interfere with the tools we need to run. Please temporarily disable all realtime protections you have enabled. Refer to this page, if you are unsure how.

AVG is probably the only program that uses realtime protection.

To disable AVG:
  • Please navigate to the system tray on the bottom right hand corner and look for this Posted Image sign.
  • Right click it-> select Quit Control Center.
  • A warning will pop up, click Yes
Download and run MalwareBytes Anti-Malware
If you already have MBAM installed, simply update and run a quick scan.

Please download Malwarebytes Anti-Malware setup and to your desktop.
alternate download link 1
alternate download link 2

Refer to the steps given here on installing MalwareBytes, running the scan, and saving the log file (not on using File Assasin).
  • If you have trouble updating, try the other mirror download site.
  • Should the computer in question not be able update using the normal method download the update file from here, using another machine if needed. Simple double click the file to install the updates.
  • If MalwareBytes asks to reboot to remove certain items, do so right away.
Please include the scan logfile in your next reply.

Download and Run Avira AntiRootkit
Please navigate to the download page of Avira AntiRootkit and click on Download to save it to your Destop.
  • You should now find a file called: antivir_rootkit.zip on your Desktop. Right click it and select Extract All. Delete the .zip file after extraction.
  • You should now have a folder with Setup.exe and some other files within it on your Desktop.
  • Double-click Setup.exe, then Next.
  • Highlight the radio button to accept the license agreement and then click Next.
  • Then click Next and Install to finalise the installation process.
  • Click Finish You may now also delete the folder with the extracted files from the zip archive).
You successfully installed Avira AntiRootkit
  • Please now navigate to Start > All Programs > Avira RootKit Detection. Then select Avira RootKit Detection
  • Click OK when a message window pops up
  • Click Start scan and let it run. Be patient and the scan finishes.
  • Click View report and copy the entire contents into your next reply.
Do not choose to rename any items found yet. There may be false positives.

With Regards,
The Panda

#3 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:08:02 AM

Posted 03 January 2009 - 07:32 PM

ScanSpyware???


http://www.malwarebytes.org/roguenet.php?id=102

there are so many now, bad ones that is?

Excuse me PP
Chewy

No. Try not. Do... or do not. There is no try.

#4 PropagandaPanda

PropagandaPanda


  • Malware Response Team
  • 10,433 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:02 AM

Posted 03 January 2009 - 07:41 PM

Hello DaChew.

Nothing to be excused for. This is an open forum :thumbsup: .

Name sounded funny to me, but didn't notice it was a rogue.

The Panda

#5 Agkistrodon

Agkistrodon
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:06:02 AM

Posted 03 January 2009 - 07:49 PM

Wish I had known it was a rogue. Just added to my issues it seems. Here is the MBAM report after reboot:

Malwarebytes' Anti-Malware 1.31
Database version: 1604
Windows 5.1.2600 Service Pack 3

1/3/2009 6:30:50 PM
mbam-log-2009-01-03 (18-30-50).txt

Scan type: Full Scan (C:\|)
Objects scanned: 109041
Time elapsed: 47 minute(s), 40 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 3
Registry Keys Infected: 14
Registry Values Infected: 3
Registry Data Items Infected: 2
Folders Infected: 12
Files Infected: 39

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
C:\WINDOWS\system32\geBuVPjj.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\ngtamsth.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\jzsena.dll (Trojan.Vundo) -> Delete on reboot.

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0ca24ad5-9db7-4c67-8382-e796d0adf4f5} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{0ca24ad5-9db7-4c67-8382-e796d0adf4f5} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{85fe499f-e3cd-434c-9ccf-e67b9cd8a168} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{85fe499f-e3cd-434c-9ccf-e67b9cd8a168} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{0ca24ad5-9db7-4c67-8382-e796d0adf4f5} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{85fe499f-e3cd-434c-9ccf-e67b9cd8a168} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\scanspyware_is1 (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\ScanSpyware (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\GetPack (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\987831e7 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\getmodule32 (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\getpack26 (Trojan.Agent) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\gebuvpjj -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\gebuvpjj -> Delete on reboot.

Folders Infected:
C:\Program Files\ScanSpyware (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4 (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\customscanlist (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\database (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\ignorelist (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\languages (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\logs (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\quarantine (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\quarantine\January-03-2009_02-10-11-PM (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\skins (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Start Menu\Programs\ScanSpyware (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Start Menu\Programs\ScanSpyware\3.9.1.4 (Rogue.ScanSpyware) -> Quarantined and deleted successfully.

Files Infected:
C:\WINDOWS\system32\jzsena.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\geBuVPjj.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\jjPVuBeg.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\jjPVuBeg.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ngtamsth.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\htsmatgn.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Desktop\Internet Downloads\ScanSpyware_3.9.1.4.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Local Settings\Temp\gettpa226.exe (Adware.Dropper) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\2XYQ8JTG\upd105320[1] (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\57HMN4BD\index[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\UWBJZLUA\divx[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\UWBJZLUA\load[1].exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\orrlxvnt.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ssbtsr.exe (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\wpv891229907565.cpx (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\ScanSpyware.chm (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\ScanSpyware.exe (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\unins000.dat (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\unins000.exe (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\database\ssdb010309.db (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\ignorelist\ignorelist.db (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\languages\eng.dll (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\logs\January-03-2009_01-38-38-PM.txt (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\logs\January-03-2009_01-42-51-PM.txt (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\logs\January-03-2009_02-01-30-PM.txt (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\logs\January-03-2009_02-10-00-PM.txt (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\logs\January-03-2009_02-10-11-PM.txt (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\logs\January-03-2009_02-30-24-PM.txt (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\logs\January-03-2009_02-30-36-PM.txt (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\logs\January-03-2009_03-44-42-PM.txt (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\logs\January-03-2009_03-44-55-PM.txt (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\logs\January-03-2009_04-01-33-PM.txt (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\quarantine\January-03-2009_02-10-11-PM\QRF2.tmp (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\skins\Skin.dll (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Program Files\ScanSpyware\3.9.1.4\skins\skin.skin (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Start Menu\Programs\ScanSpyware\3.9.1.4\Diagnose & Fix.lnk (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Start Menu\Programs\ScanSpyware\3.9.1.4\Help.lnk (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Start Menu\Programs\ScanSpyware\3.9.1.4\ScanSpyware.lnk (Rogue.ScanSpyware) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Start Menu\Programs\ScanSpyware\3.9.1.4\Uninstall.lnk (Rogue.ScanSpyware) -> Quarantined and deleted successfully.

#6 Agkistrodon

Agkistrodon
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:06:02 AM

Posted 03 January 2009 - 07:50 PM

Still having issues with the automatic updates even after reboot. Here is the Avira report:



Avira AntiRootkit Tool - Beta (1.0.1.17)

========================================================================================================
- Scan started Saturday, January 03, 2009 - 18:37:07 PM
========================================================================================================

--------------------------------------------------------------------------------------------------------
Configuration:
--------------------------------------------------------------------------------------------------------
- [X] Scan files
- [X] Scan registry
- [X] Scan processes
- [ ] Fast scan
- Working disk total size : 74.50 GB
- Working disk free size : 38.81 GB (52 %)
--------------------------------------------------------------------------------------------------------

Results:
Hidden value : HKEY_USERS\S-1-5-21-507921405-2052111302-682003330-1003\Software\SecuROM\License information -> datasecu
Hidden value : HKEY_USERS\S-1-5-21-507921405-2052111302-682003330-1003\Software\SecuROM\License information -> rkeysecu

--------------------------------------------------------------------------------------------------------
Files: 0/73244
Registry items: 2/270221
Processes: 0/48
Scan time: 00:05:50
--------------------------------------------------------------------------------------------------------
Active processes:
- rabliicr.exe (PID 2684) (Avira AntiRootkit Tool - Beta)
- System (PID 4)
- smss.exe (PID 648)
- csrss.exe (PID 704)
- winlogon.exe (PID 740)
- services.exe (PID 784)
- lsass.exe (PID 796)
- ati2evxx.exe (PID 964)
- svchost.exe (PID 984)
- svchost.exe (PID 1052)
- svchost.exe (PID 1160)
- svchost.exe (PID 1200)
- svchost.exe (PID 1248)
- svchost.exe (PID 1288)
- vsmon.exe (PID 1420)
- ati2evxx.exe (PID 1476)
- explorer.exe (PID 1760)
- aawservice.exe (PID 180)
- avgcc.exe (PID 684)
- jusched.exe (PID 696)
- dthtml.exe (PID 760)
- CTHELPER.EXE (PID 932)
- ProfilerU.exe (PID 1016)
- SaiMfd.exe (PID 1104)
- MOM.exe (PID 1120)
- iTunesHelper.exe (PID 1128)
- HookManager.exe (PID 1136)
- zlclient.exe (PID 1144)
- msmsgs.exe (PID 1188)
- ctfmon.exe (PID 1264)
- CTSyncU.exe (PID 1292)
- CCC.exe (PID 1988)
- spoolsv.exe (PID 184)
- AppleMobileDeviceService.exe (PID 628)
- AskService.exe (PID 864)
- avgamsvr.exe (PID 1724)
- avgupsvc.exe (PID 1596)
- avgemc.exe (PID 1964)
- CTSVCCDA.EXE (PID 1984)
- DTSRVC.exe (PID 1872)
- svchost.exe (PID 2084)
- svchost.exe (PID 2268)
- svchost.exe (PID 2376)
- iPodService.exe (PID 3088)
- alg.exe (PID 3388)
- wscntfy.exe (PID 3628)
- svchost.exe (PID 3788)
- avirarkd.exe (PID 2668)
========================================================================================================
- Scan finished Saturday, January 03, 2009 - 18:42:58 PM
========================================================================================================

#7 PropagandaPanda

PropagandaPanda


  • Malware Response Team
  • 10,433 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:02 AM

Posted 03 January 2009 - 08:03 PM

Hello.

Click on your Start Menu, then Run, then type:
services.msc

In the Service Contol Manger, double click Automatic updates. Change the startup type to Disabled. Hit Apply. If the service is stopped, Start the service. Click OK.

Tell us what the setting was, and if the service was running before any changes were made.

With Regards,
The Panda

#8 Agkistrodon

Agkistrodon
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:06:02 AM

Posted 03 January 2009 - 08:19 PM

It was already set to disabled. The service is stopped, but all the buttons to start, stop, pause and resume are grayed out so I am unable to start the service. I chose disable again, applied and still no option to start the stopped service.

#9 PropagandaPanda

PropagandaPanda


  • Malware Response Team
  • 10,433 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:02 AM

Posted 03 January 2009 - 08:22 PM

Hello.

Sorry I don't know what I was thinking there.

Please change the startup to "Automatic".

Then try start the service.

With Regards,
The Panda

#10 Agkistrodon

Agkistrodon
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:06:02 AM

Posted 03 January 2009 - 08:28 PM

No worries, I just appreciate the help!

That worked, thank you. Is there anything further I need to do regarding the vundo/virtumundo malware other than regular scans?

#11 PropagandaPanda

PropagandaPanda


  • Malware Response Team
  • 10,433 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:02 AM

Posted 03 January 2009 - 09:06 PM

Hello.

Might want to run some regular scans like you said. Perhaps F-Secure?

F-Secure Online Scan
This scan is for Internet Explorer only.
  • It is suggested that you disable security programs and close any other windows during the scan. While your security is disabled, please refrain from surfing on other sites. Refer to this page if you are unsure how.
  • Go to F-Secure Online Scanner
  • Follow the instructions here for installation.
  • Accept the License Agreement.
  • Once the ActiveX installs, click Full System Scan
  • Once the download completes, the scan will begin automatically. The scan will take some time to finish, so please be patient.
  • When the scan completes, click the Automatic cleaning (recommended) button.
  • Click the Show Report button and copy the entire report in your next reply.
  • Be sure to re-enable any security programs.
With Regards,
The Panda

#12 Agkistrodon

Agkistrodon
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:06:02 AM

Posted 03 January 2009 - 11:00 PM

Below is the FSecure log. I'm still having issues with the internet being sluggish (multiple clicks to get pages to load, click and nothing happens, etc.). I feel like I still have something going on.....

Scanning Report
Saturday, January 03, 2009 20:52:32 - 21:48:44

Computer name: PRIVATE-OSCF1Y9
Scanning type: Scan system for malware, rootkits
Target: C:\
Result: 3 malware found
TrackingCookie.Webtrends (spyware)

* System

TrackingCookie.Xiti (spyware)

* System

TrackingCookie.Yieldmanager (spyware)

* System

Statistics
Scanned:

* Files: 40255
* System: 4505
* Not scanned: 6

Actions:

* Disinfected: 0
* Renamed: 0
* Deleted: 0
* None: 3
* Submitted: 0

Files not scanned:

* C:\PAGEFILE.SYS
* C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT
* C:\WINDOWS\SYSTEM32\CONFIG\SAM
* C:\WINDOWS\SYSTEM32\CONFIG\SECURITY
* C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE
* C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM

Options
Scanning engines:

* F-Secure USS: 2.40.0
* F-Secure Blacklight: 0.0.0
* F-Secure Hydra: 2.8.8110, 2009-01-03
* F-Secure Pegasus: 1.20.0, 2008-11-17
* F-Secure AVP: 7.0.171, 2009-01-02

Scanning options:

* Scan defined files: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ZIP XXX ANI AVB BAT CMD JPG LSP MAP MHT MIF PHP POT SWF WMF NWS TAR
* Use Advanced heuristics

Copyright 1998-2007 Product support |Send virus sample to F-Secure
F-Secure assumes no responsibility for material created or published by third parties that F-Secure World Wide Web pages have a link to. Unless you have clearly stated otherwise, by submitting material to any of our servers, for example by E-mail or via our F-Secure's CGI E-mail, you agree that the material you make available may be published in the F-Secure World Wide Pages or hard-copy publications. You will reach F-Secure public web site by clicking on underlined links. While doing this, your access will be logged to our private access statistics with your domain name.This information will not be given to any third party. You agree not to take action against us in relation to material that you submit. Unless you have clearly stated otherwise, by submitting material you warrant that F-Secure may incorporate any concepts described in it in the F-Secure products/publications without liability.

Edited by Agkistrodon, 03 January 2009 - 11:01 PM.


#13 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:08:02 AM

Posted 03 January 2009 - 11:20 PM

I'm still having issues with the internet being sluggish (multiple clicks to get pages to load, click and nothing happens, etc.).


I have been having the same problem, I power cycled my modem and router that helped, some forums have been sporadiclly slow lately, too many people off work on the internet
Chewy

No. Try not. Do... or do not. There is no try.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users