Thread: Virus/Worm???
View Single Post
  #1 (permalink)  
Old December 16th, 2007
pluck07 pluck07 is offline
Novicius
 
Join Date: November 20th, 2007
Posts: 4
pluck07 is flying high
Exclamation Virus/Worm???

Hello everyone, this is my first time posting. I looked through the forum and several others and couldn't find anything quite the same, so I'm posting my problem individually.

I'm running windows vista, with System Mechanic 7 pro and iolo virus protection and iolo firewall.

Just the other day, my limewire started opening on it's own every time I close it. So I just uninstalled it. I know what you all might be thinking though. (Oh great, another Worm.Win32.VB.an attack). But, I believe I have a mutated version of this worm, because my task manager still works. Another thing that leads me to believe it's not that worm is the fact that I don't have the winupdates.exe problem that's common with that worm.

Instead, ONLY when I connect to the internet, cmd.exe starts up (the windows command prompt app) and the CPU usage goes straight up to between 40%-50% and sometimes as high as 90%-100% on that one process. Another thing I notice is that I have found some unusual files lurking on my computer. They are as follows:

In the C:\Users\MyName directory I have these files (I'll put the exact file names in quotes):

"a" (which is a zipped file and is 623KB in size)
"Crack" (which is an application file that is 821KB in size)
"services" (which is an application file that is 36KB in size)
"vbzip10.dll" (which is an application extension and is 144KB in size)

Now, I've deleted these files running normally and in safe mode but they come back every time I restart the computer, so that tells me there are relevant files in my system that help these return. I've also used my antivirus and done full system scans, I've used my system mechanic, Ad-Aware 6pro, CCleaner and spyHunter and they all return zero results. I've tried to do my own homework and can't find anything relating to my exact problem, so I came here.

Any ideas???
Reply With Quote