Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Redirect Virus


  • Please log in to reply
3 replies to this topic

#1 edw987

edw987

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:03:12 PM

Posted 13 August 2011 - 09:23 AM

Combofix does not stop Backdoor.Tidserv
See http://www.pcmag.com/article2/0,2817,2370676,00.asp
See http://www.symantec.com/security_response/writeup.jsp?docid=2008-091809-0911-99

I also had to shut off the system restore.

This virus blocks microsoft security update site and redirects google.

BC AdBot (Login to Remove)

 


#2 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,962 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:03:12 PM

Posted 13 August 2011 - 10:18 PM

Hello,

I'm moving your topic to the Am I Infected forum. Those articles you linked to are quite old, especially in the world of malware.

Do you need assistance in removing this infection?

Orange Blossom :cherry:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#3 edw987

edw987
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:03:12 PM

Posted 01 September 2013 - 09:15 AM

Had slowness on my computer, writing to disk a lot, so I let Combofix run, and it decided to delete my working directory! I am running XP with service pack 3, I use AVG antivirus, which I turned off. I have lost several weeks of work. My directory was under the c: drive. As I do computation it included compiled and executable files, as well as powerpoint and word documents. Combofix homed in on this directory and deleted it! It did not ask for permission. I could not restore it, tried going to the restore point it created but it did not restore the files. Tried using CFDQ-UsrPrf.exe but it says Error: 0x00007766 !! Aborting

 

This thread can be closed - I found a copy of all my deleted files in something called Qoobox.


Edited by edw987, 01 September 2013 - 10:07 AM.


#4 rotor123

rotor123

  • Moderator
  • 8,093 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:03:12 PM

Posted 01 September 2013 - 10:33 AM

Hi

I suggest starting a new Post here: http://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-logs/

 

Please follow the directions at the top of the page http://www.bleepingcomputer.com/forums/topic34773.html

 

I suggest this since it appears You are still having Virus issues.

 

Please let us Know when that is done so we can close this post.

 

Good Luck

Roger


Edited by rotor123, 01 September 2013 - 10:58 AM.

Fortune Cookie says: Fortune not Found: Abort, Retry, Ignore?

Sent from my All-In-One Desktop. Perfect for Internet, Not for heavy usage or gaming however.

How Does a computer get Infected? http://www.bleepingcomputer.com/forums/t/2520/how-did-i-get-infected/
Forum Rules,    The BC Welcome Guide

167 @ June 2015





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users