A new virus attack

satyre · Post by **satyre** » Fri Jan 21, 2011 1:35 am

I got a virus attack. Running Vista 32, MSE2.0 and Zonealarm fee firewall.

Zonealarm actually helped to notice it when it came up for the permission to access, otherwise I wouldn't know. Then I scanned with Malwarebytes, SuperAntispyware, and Spybot. The first two caught lots of the infected files.

The name of this virus/torjan or whatever is "Whitesmoke". Even after it removed all what it can catch, I have problem now.

Now Windows update and MSE update don't work.

I get the error code 80072EFE when perform either update. Upon googling, I saw several suggestions and I followed several of them. But it didn't fix the problem.

Also, the FF v.3.6.12 is being directed to other sites by opening a tab automatically.

Any suggestion. I am tired of dealing with it several hours now.

mnosteele52 · Post by **mnosteele52** » Fri Jan 21, 2011 6:01 am

This is the TDSS rootkit, use TDSS Killer then ComboFix to fully remove it, then uninstall and reinstall MSE for it to work right.

Also, you should not use MSE with Zone Alarm..... you shouldn't use Zone Alarm with anything to be honest.

satyre · Post by **satyre** » Fri Jan 21, 2011 8:57 am

"you should not use MSE with Zone Alarm.."

ZA used to have conflict before, now it is working very well after MS released an update. I am using this only to monitor what is going out, if any. If I didn't have this I wouldn't have known it is in my PC and trying to access. MSE didn't catch it when it came in.

I wonder any other reason not to use it together.

Last night, I re-formated and installed everything back now.

Post by **YeOldeStonecat** » Fri Jan 21, 2011 10:27 am

Yeah I've seen ZA really screw up a lot of PCs...can't stand it, I'd have to format my own computer if ZA got within 10 feet of it.
Most malware now is "rootkit" in form....need heavy duty cleaners like Mno mentioned....

Sava700 · Post by **Sava700** » Fri Jan 21, 2011 2:10 pm

Ugg zone alarm is the devil!!! Sounds like you've been infected a while if your seeing this much after a few scans just that they didn't "evolve" till now to cause you problems.

I do alot of stuff and Avast home free hasn't failed me yet along with a once a week run of malwarebytes behind windows firewall and the router.

satyre · Post by **satyre** » Fri Jan 21, 2011 4:48 pm

Sava700 wrote:Ugg zone alarm is the devil!!! Sounds like you've been infected a while if your seeing this much after a few scans just that they didn't "evolve" till now to cause you problems..

Sava, I am using only Zone alarm firewall not their antivirus product. That is the only reason I found this infection when it tried to access the net.

I have been using MSE but it didn't catch.