Recently it seems like this virus has gotten almost out of control. From what I understand and I have seen it’s not so much a virus in it’s own, but a downloader for other much more nefarious programmes. It seems as if everytime I see this virus it has different attributes, different executables, and libraries. At first before most spyware programmes could detect it, I would spent a very long time removing the individual files and startup entries using tools like Unlocker and Spybot’s TeaTimer. Between these two programmes there are very few viruses/malware that can survive.
Once the startup entries and processes are removed, TeaTimer will prevent new changes. Alas, here was the catch this last time. The virus had hijacked the TCP/IP stack. Meaning that all of my web traffic was being routed to fictious pages. Furthermore attempts to download Spybot and download updates for various anti-virus programmes were blocked.
I was having a hell of a time until I tried Malwarebytes Anti-malware. I had seen this software on customers’ computers before. But this was the first time I used it myself. I have to say, it’s a miracle worker. It removed the files, and the startup entries. And to top things off, it killed the processes. I still had to do some cleaning up with HijackThis. But all in all, I’m very impressed. For the first time a Freeware Antimalware programme did the job. I’ll definitely be using it in the future, and recommending it to clients.
