I download a torrent infected. i was running bitdefender but he does not recognize the virus. the internet slow down, i run wireshark and see a lot of emails in/out. the winlogon.exe connect to a irc server port 65520 and a site under 80 port thsweb04.thsale.com. I cant remove this, i format the pc, install winxp sp3 fresh. when i run the wireless card driver, installs it, and connect to the provider, the virus come back trying to download more malware. so i install windows 7 build 7000 and now the virus come back in win7:
taskhost.exe TCP 54472 10.10.18.23 65520 126.96.36.199 Sent C:\Windows\system32\taskhost.exe Microsoft® Windows® Operating System
taskhost.exe 1840 TCP 54473 10.10.18.23 80 http 188.8.131.52 thsweb04.thsale.com Established C:\Windows\system32\taskhost.exe Microsoft® Windows® Operating System
the system show various errors windows. im running a livecd to acess internet cause the os slows down the internet.
Thank very much sorry for the english.
Edited by Rors, 06 April 2009 - 10:44 AM.