I didn't have the virus you posted about, but I did just get infected with an
ad-ware bundle. I've seen it called various things, but one thing was a .dll
named ATPartners.dll, another was SAHAgent.exe, and another was TV Media.
All are documentd ad-ware/spy-ware. Norton Antivirus 2004 couldn't remove
it, neither could their removal tool. I tried deleting it manually (all day
process on a Sunday, grrr! I think I succeeded in removing it, but my
network connections stopped working so I must have been a little bit
overzealous in the registry entries I removed. So today I restored from an
earlier restore point. Maybe that would work.
All seems well now for me, and Norton Antivirus 2004 reports clean. Luckily
I knew exactly when I was infected. It disappointed me greatly that my
machine was so easily infected by this junk, especially after all of the hype
about the security in sp2. I think the "payload" for it was download via
Java, but I truly don't want to re-infect my machine to find out. This
ad-ware has been identified for about a year, sp2 should have known it was
out there. Maybe a more direct and targeted approach is the better approach
to solving security issues. "Someone" should publish a list of sites to put
into the Restricted Sites zone in Internet Explorer, it would also be nice if
IE had a way to import it from a text file, maybe an "Add-On". (Hint:
Business idea with a "Killer-App")
"steller" wrote:
> runing windows xp. My virus scan detects the bdd virus, which is presented
> with repeated popups that suggest clean, delete, or exclude. They seem to be
> from windows system 32, but I can not find the file, and it always requires
> one of the popups be excluded rather than deleated. I have tried ad-aware,
> spy-bot, and housecleaner (keeper?) but the virus prevails. Windows explored
> shuts down randomly as well, related? I would love to be rid of this pest.
> thanks
>
|