Search:

Well, they sent a reply saying it's a new virus.

The last time I ran HouseCall on it, it didn't detect it. I believe that TROJ_SMALL.AN is the same as Download.Trojan and SillyDl, which has been mentioned in this thread. At least according to...

The file kbdus.exe also contains the string ' Marca = "hckdw2003*" ' This seems to be part of some script (possibly VBScript) that is embedded in the executable. There are a bunch of foreign words...

As an update, I downloaded ClamWin and had it scan the kbdus.exe file, but it didn't detect anything.

Thanks for the info Nihil,

According to Belarc, none of my hotfixes failed verification although a few were unmarked.

True. So maybe my assertion was a little over-zealous when I said that my system had all the MS patches. I guess I could compare the security updates in IE SP1 and Win2K SP4 with the patches my...

Yes, I was running that many copies of Notepad when I ran HiJackThis. AVWUPSRV.EXE is in fact my AV, AntiVir.

My System currently has Win2K Service Pack 3 and IE 6.0.2600.0000 with the following...

Hmm...well I guess counter.cab looks suspicious.

HiJackThis Log:
Logfile of HijackThis v1.97.7
Scan saved at 10:09:47 PM, on 10/27/2004
Platform: Windows 2000 SP3 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running...

First of all, I do not use any email clients with HTML renderers (like Outlook Express for instance). I am also familiar with the security epidemic in IE. These days, I usually disable scripting when...

Yeah, I know.

Even in Safe Mode with the latest definitions, I don't think I've found what I'm looking for.

Search & Destroy found nothing. AdAware found a CAB file with SyncroAdX.dll in it,...

Well, as I mentioned in the first post, I've done pretty much everything in that list. I hacen't tried scanning my system in Safe Mode yet, but I somehow doubt it'll turn up anything new. Still, I'll...

Yeah, my virus protection was updated when I did the scan.

According to Symantec:


What I'd like to know is what it downloaded and executed on my system.

A while ago, I started noticing strange behavior in Internet Explorer. Whenever I did a search with Google, my search results would be modified to include extra links that I know Google would not...