Real nasty

[Chewy]

half virus/half trojan malware

http://www.f-secure.com/sw-desc/spyaxe.shtml

one of my clients went where he shouldn't, it's getting dangerous out there

[cornholio7]

same happened here to one of my clients with this virus, ended up formatting in the end

[Chewy]

well guess what, chewy told the friend he was reloading, I fought this sob for
2 hours over the last 2 days!
Safe mode, msconfig, spybot, NAV!
safe mode last known good, turned it off finally, now to kill the sob after
I reupdate everything!

[cornholio7]

best of luck , i tried , i failed , in the end i just thought it quicker to start again

[Chewy]

in the end i just thought it quicker to start again

if you saw all the stuff I would have to reload and update
besides chewy stubborn
nasty bugger loaded in safe mode and kept fighting

[cornholio7]

luckily in my case i installed this about a month ago so there wasn't much on it

[drfsupercenter]

I used to have spyware and viruses, I just reformatted the hard drive. This is about the fourth or fifth installation of Windows now, that is how many times I got a virus or spyware. One time, it even corrupted Windows and I had to do a repair install to backup all my data, then wipe the drive.

[Chewy]

finally, another hour and it looks like it's gone
regedit nav and spybot(found other problems also)
there's aolaim loading but I won't remove that virus!
I'll run trojanhunter from safe mode just to be sure

[cornholio7]

it looked good for me a couple of times , until i connected to the net and bam, there it was again

[Chewy]

yep right, damn thing keeps reloading I found a good site for it

http://www.techspot.com/vb/topic36910.html

format c:

next time I will listen corn!!!!!!!!!!!!!!!!!!!!!!!!!!!!

whoever wrote this nasty is good, very good

[mill]

What were they using for protection that it got thur?

[cornholio7]

in the case i had, nav2005, spybot, ad-aware , i think their problem was a dial up connection but time will tell , its a crafty devil this one
they reckon that it came after a windows update , but i doubt it .

[mill]

Maybe after a windows update but not with, unless it was a bogus update that might have poped up claiming to be a windows update.The way my lucks been going ill get it next. anyone try this?

https://www.microsoft.com/security/malwareremove/default.mspx

[cornholio7]

the thing is it looks like a genuine windows virus alert message and sends you to spy axe's web site so you can pay for the fix - now thats cheeky (see the picture in chewys link in the first post)

[blutach]

How to avoid it?

Regards