backdoor bdd virus

[Guest]

runing windows xp. My virus scan detects the bdd virus, which is presented
with repeated popups that suggest clean, delete, or exclude. They seem to be
from windows system 32, but I can not find the file, and it always requires
one of the popups be excluded rather than deleated. I have tried ad-aware,
spy-bot, and housecleaner (keeper?) but the virus prevails. Windows explored
shuts down randomly as well, related? I would love to be rid of this pest.
thanks

 

[Guest]

I didn't have the virus you posted about, but I did just get infected with an
ad-ware bundle. I've seen it called various things, but one thing was a .dll
named ATPartners.dll, another was SAHAgent.exe, and another was TV Media.
All are documentd ad-ware/spy-ware. Norton Antivirus 2004 couldn't remove
it, neither could their removal tool. I tried deleting it manually (all day
process on a Sunday, grrr! I think I succeeded in removing it, but my
network connections stopped working so I must have been a little bit
overzealous in the registry entries I removed. So today I restored from an
earlier restore point. Maybe that would work.

All seems well now for me, and Norton Antivirus 2004 reports clean. Luckily
I knew exactly when I was infected. It disappointed me greatly that my
machine was so easily infected by this junk, especially after all of the hype
about the security in sp2. I think the "payload" for it was download via
Java, but I truly don't want to re-infect my machine to find out. This
ad-ware has been identified for about a year, sp2 should have known it was
out there. Maybe a more direct and targeted approach is the better approach
to solving security issues. "Someone" should publish a list of sites to put
into the Restricted Sites zone in Internet Explorer, it would also be nice if
IE had a way to import it from a text file, maybe an "Add-On". (Hint:
Business idea with a "Killer-App")

 

[Ron Chamberlin]

Start your machine from Safe Mode and run the AntiVirus scan.

Ron Chamberlin
MS-MVP