Win7 Ultimate 32bit (x86)
File Name: Oburaa.exe
Size: 220 KB (225,280b)
Original File Name: Daniels.exe
Worm Files installed:
Size: 61.7KB (63,232b) (62KB in folder details view)
installer copies worm files to the system.
the worm files are repeatedly copied under new names.
Originally it was displaying pop-ups (defeated that).
Problem still remains that it hijacked my google clicks - it redirects me to spam sites.
typing in a URL will have the proper result. but visiting google.com and clicking on a search result will get me directed to a spam site or simply not load the next page.
All .SYS and .EXE files have been manually quarantined.
All created registry entries have been removed.
oddly enough - also can't start Malware Bytes or use the default Super Anti-Spyware startup.
Super Anti-Spyware fails to detect this virus.
I've restored my FFox About:Config and restored my IE settings to default.
Edited by WaxyChicken, 14 September 2010 - 11:12 PM.
Moved from Win 7 to Am I Infected ~ Hamluis.