View Single Post

  #4  
Old 03-13-2005, 05:20 AM
Cache's Avatar
Cache Offline
ST&T Secret Police
 
Join Date: Jun 2004
Location: UK
Posts: 616
Here is somthing I missed first time around:

O4 - HKLM\..\Run: [Windows Media Player] wmediaplayer.exe
O4 - HKLM\..\RunServices: [Windows Media Player] wmediaplayer.exe

The above indicates that you also have the W32/Agobot-NQ worm.

Basically, your computer is completely plagued with viruses, adware, spyware and just about every variety of infection going. It may well be an easier task to reformat and re-install your OS, rarther than spending hours trying to tackle all these infections.

Regarding Bube.d (aka Win32.Beavis), this is indeed somthing to look into. Although I would expect to see a list as long as my arm in the trusted zone. However, your security setting for HTTP have been lowered, which may also be an indication of Bube.d. You should hope that Bube.d is not present because of the fact it infects Explorer.exe, which makes it very nasty indeed.

You can download KAV from here:
http://www.kaspersky.com/index.html

Also, if you do have Bube.d, you may find you are blocked from the KAV site due to changes in the HOSTS file.

If so:
Download the Hoster from here: http://members.aol.com/toadbee/hoster.zip
Press 'Restore Original Hosts' and press 'OK'
Exit Program

For more detailed information on Bube.d and its removal, see the link below:

http://computercops.biz/postt106277.html

Last edited by cache : 03-13-2005 at 06:01 AM.
Reply With Quote