Staff member reported strange behavior like browser not keeping security level settings and search results that would take her to other sites than what was searched for.
The machine is running XP SP3 with all latest MS patches. It is also using Symantec Corp. Ed. ver. 9 with latest virus defs dated 3/16/09.
When I view threat history I find the following files listed:
1/13/2009 InstalAVg_880460[1].exe file was quarantined successfully.
3/10/2009 Flasher.exe file was quarantined successfully.
3/11/2009 tyui.1236777766.exe file was deleted successfully.
3/16/2009 tt_1237212311.exe file was quarantined successfully.
3/16/2009 pp02.exe The process was terminated and the file was quarantined successfully.
3/16/2009 tt_1237226506.exe file was quarantined successfully.
I downloaded latest defs for Spybot Search & Destroy and did another scan. It reported finding Virtumonde and said if fixed it, and advised disconnecting from Internet and rebooting after initial scan and if that didn't resolve problem get help from form such as this.
I tried booting into safe mode and rerunning Spybot's scan/fix for it, but that did not work. I ran another full scan with Symantec in Safe mode and it reported clean system.
So, began looking on Internet for additional scanners/fixes.
Please advise. Thanks.
Lukelanta