Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Possible AntiSpy Protector 2009 infection


  • This topic is locked This topic is locked
3 replies to this topic

#1 jcsc

jcsc

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:02:51 AM

Posted 01 September 2009 - 10:27 PM

Hi everyone.

I was reading on the main page about the AntiSpy Protector 2009 infection and I think I may have it... or what's left of it.

Avast was disabled, Windows firewall was turned off, Automatic updates was turned off and I could not run Malwarebytes.

Anyway, I've tried everything.

Right now, this is what's going on.

I uninstalled Avast and got a free 30-day trial of Panda Antivirus. I've run Malwarebytes and it came up 0 infected files. Panda has says this:

"Hacking tool detected: Rootkit/Farfli.X" and where it says "Additional information," it has "Path: C:\svfp.exe[install.exe]"

Also, in my taskbar is a red Windows Security Alert (the process is wscntfy.exe) and I cannot get Windows Update on automatic in the security center, even though it shows it under the specific "windows update" section.

Please help me. Thank you.

Edited by jcsc, 01 September 2009 - 10:28 PM.


BC AdBot (Login to Remove)

 


#2 jcsc

jcsc
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:02:51 AM

Posted 01 September 2009 - 11:21 PM

OK. I just tried to delete the file in Panda.

Now the Windows Security area showed automatic updates as being 'on' and the task bar icon went away.

Turned off system restore (in case something was hiding in there... had that problem before) and restarted the comp.

Panda is running it's scan that it does on start-up and the windows security notification has not appeared again.

Windows updates are now downloading automatically.

Does this mean I'm OK now?

#3 jcsc

jcsc
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:02:51 AM

Posted 02 September 2009 - 07:01 PM

I'm running Panda again today now that I'm off work and it still shows:

"Hacking tool detected: Rootkit/Farfli.X" and "Path: C:\svfp.exe[install.exe]"

For action, it just says "Notified" instead of 'deleted' or 'moved to quarantine'

Please help. Thanks.

#4 jcsc

jcsc
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:02:51 AM

Posted 04 September 2009 - 08:39 PM

My computer seems to be ok now. Thanks.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users