Just recently discovered these little nasties lurking on my hard drive in the WIN32 folders:
WIN32/Obfuscator.VP
WIN32/zbot
WIN32/Foidan.B
would it be safe to manually remove these from this folder?
I noticed that my Microsoft Security Essentials programme had been uninstalled. I re-installed it and that is when it picked these critters up.
I received Windows updates the night before and everything seemed to be not right after that. My Internet struggles to cope with loading some webpages.
I also can't load my DVDFab application up now after clicking the desktop Icon. But I can load the other applications up. Tried everything even though the target path is pointing to the right programme for the DVDFab shortcut icon.
Also System Restore is now inoperable, showing the message "Cannot create restore point, please restart computer" which is no use. Its amazing what damage these viruses can do.
Can anyone please tell me how to fix the shortcut icon problem?
VirTool:Win32/Obfuscator are detections for programs that have had their purpose obfuscated to hinder analysis or detection by anti-virus scanners. They commonly employ a combination of methods including encryption, compression, anti-debugging and anti-emulation techniques.
Attempt to run and post DDS and I will attempt to help you clean up.
DDS logs
DDS is a diagnostic tool, which scans your computer and produces logs which can be analysed by your helper.
There are three kinds of men: The ones that learn by reading; The few who learn by observation;
The rest of them have to pee on the electric fence and find out for themselves...
Agreed! Something uninstalled Microsoft Security Essentials and that action was not mentioned in any Obfuscator info. Something else may have installed these other tools as a smoke screen for the real threat.
Originally posted by Mez: Agreed! Something uninstalled Microsoft Security Essentials and that action was not mentioned in any Obfuscator info. Something else may have installed these other tools as a smoke screen for the real threat.
You got the picture, Mez.. WIN32/zbot is a Trojan that has probably brought in a ton of stuff including a Rootkit... Obfuscator keeps you from seeing any of it.
P.S. MSE has the ability to remove Obfuscator, that's why the Ttojan turned it off.
