PornDail-177.dldr.... I Can't get rid of this virus.....

[TOMMY@hotmail.com]

When I updated my MacAfee antivirus last week and scanned allover the
computer, the mentioned virus was detected in this folder
....D:\WINDOWS\system32\windialup\2443.exe( I have my XP installed on
D:\).... My antivirus suggested me to clear it ,and ...well... I did it.

Three days later I updated my antivirus again with the latest virus
signatures ,then ran the program.....This time a Trojan was detected in
C:\VolumeInformation\A0142026.exe.... It was PornDail-177.dldr
again.....subsequently I deleted the infected files...

And today, I updated my MacAfee again, then ran it and scanned all
drives,all
folders and every where... , the same damn thing was detected in:
D:\WINDOWS\system32\windialup .....again.

What can I do now?.... the antivirus is not able to clear this jerk
completely from my computer and I am worrying of more future troubles......
(Also, from the previous week that I have installed my CD RW, the
computer's
Memory Frequency has decreased from 400 MHZ to 256 MHz...but there is no
problem with the computer's performance.)

Can anybody help me?

(PS: I have zoneAlarm Pro installed and its security is set to high both for
"Internet" and "Trusted zone". Also,to be honest, I am not a visitor of
porn
sites...)

[Frank Saunders, MS-MVP]

" > wrote in message

> When I updated my MacAfee antivirus last week and scanned allover the
> computer, the mentioned virus was detected in this folder
> ...D:\WINDOWS\system32\windialup\2443.exe( I have my XP installed on
> D:\).... My antivirus suggested me to clear it ,and ...well... I did
> it.
>
> Three days later I updated my antivirus again with the latest virus
> signatures ,then ran the program.....This time a Trojan was detected
> in C:\VolumeInformation\A0142026.exe.... It was PornDail-177.dldr
> again.....subsequently I deleted the infected files...
>
> And today, I updated my MacAfee again, then ran it and scanned all
> drives,all
> folders and every where... , the same damn thing was detected in:
> D:\WINDOWS\system32\windialup .....again.
>
> What can I do now?.... the antivirus is not able to clear this jerk
> completely from my computer and I am worrying of more future
> troubles...... (Also, from the previous week that I have installed my
> CD RW, the computer's
> Memory Frequency has decreased from 400 MHZ to 256 MHz...but there is
> no problem with the computer's performance.)
>
> Can anybody help me?
>
> (PS: I have zoneAlarm Pro installed and its security is set to high
> both for "Internet" and "Trusted zone". Also,to be honest, I am not
> a visitor of porn
> sites...)

Get and run these programs (if you test after each one you can stop when
the problem is gone):
Ad-Aware:
http://www.lavasoftusa.com
and
Spybot - Search & Destroy -
http://security.kolla.de/
http://security.kolla.de/index.php?lang=en&page=download
http://spybot.eon.net.au/
http://www.tomcoyote.org/SPYBOT/
and
BHO Demon: http://www.spywareinfo.com/downloads/bhod/

Until the problem is solved.

Further advice available here:

If the problem site is your home page:
http://www.mvps.org/inetexplorer/answers.htm#home_page

If the problem is a pop-up window, your computer may have been hijacked.
For information about pop-up windows, how to get rid of them, and prevent
them in the future have a look at the link below:
http://www.mvps.org/inetexplorer/Darnit.htm#pop_up

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com

[TOMMY@hotmail.com]

Many thanks for all suggestions
"Frank Saunders, MS-MVP" > wrote in message
...
> " > wrote in message
>
> > When I updated my MacAfee antivirus last week and scanned allover the
> > computer, the mentioned virus was detected in this folder
> > ...D:\WINDOWS\system32\windialup\2443.exe( I have my XP installed on
> > D:\).... My antivirus suggested me to clear it ,and ...well... I did
> > it.
> >
> > Three days later I updated my antivirus again with the latest virus
> > signatures ,then ran the program.....This time a Trojan was detected
> > in C:\VolumeInformation\A0142026.exe.... It was PornDail-177.dldr
> > again.....subsequently I deleted the infected files...
> >
> > And today, I updated my MacAfee again, then ran it and scanned all
> > drives,all
> > folders and every where... , the same damn thing was detected in:
> > D:\WINDOWS\system32\windialup .....again.
> >
> > What can I do now?.... the antivirus is not able to clear this jerk
> > completely from my computer and I am worrying of more future
> > troubles...... (Also, from the previous week that I have installed my
> > CD RW, the computer's
> > Memory Frequency has decreased from 400 MHZ to 256 MHz...but there is
> > no problem with the computer's performance.)
> >
> > Can anybody help me?
> >
> > (PS: I have zoneAlarm Pro installed and its security is set to high
> > both for "Internet" and "Trusted zone". Also,to be honest, I am not
> > a visitor of porn
> > sites...)
>
> Get and run these programs (if you test after each one you can stop when
> the problem is gone):
> Ad-Aware:
> http://www.lavasoftusa.com
> and
> Spybot - Search & Destroy -
> http://security.kolla.de/
> http://security.kolla.de/index.php?lang=en&page=download
> http://spybot.eon.net.au/
> http://www.tomcoyote.org/SPYBOT/
> and
> BHO Demon: http://www.spywareinfo.com/downloads/bhod/
>
> Until the problem is solved.
>
> Further advice available here:
>
> If the problem site is your home page:
> http://www.mvps.org/inetexplorer/answers.htm#home_page
>
> If the problem is a pop-up window, your computer may have been hijacked.
> For information about pop-up windows, how to get rid of them, and prevent
> them in the future have a look at the link below:
> http://www.mvps.org/inetexplorer/Darnit.htm#pop_up
>
> --
> Frank Saunders, MS-MVP, IE/OE
> Please respond in Newsgroup. Do not send email
> http://www.fjsmjs.com
>

[TOMMY@hotmail.com]

What about sexplorer? do you know any thing of this jerk too ?
It was in the same folder as PornDail was.....
Regards

"Frank Saunders, MS-MVP" > wrote in message
...
> " > wrote in message
>
> > When I updated my MacAfee antivirus last week and scanned allover the
> > computer, the mentioned virus was detected in this folder
> > ...D:\WINDOWS\system32\windialup\2443.exe( I have my XP installed on
> > D:\).... My antivirus suggested me to clear it ,and ...well... I did
> > it.
> >
> > Three days later I updated my antivirus again with the latest virus
> > signatures ,then ran the program.....This time a Trojan was detected
> > in C:\VolumeInformation\A0142026.exe.... It was PornDail-177.dldr
> > again.....subsequently I deleted the infected files...
> >
> > And today, I updated my MacAfee again, then ran it and scanned all
> > drives,all
> > folders and every where... , the same damn thing was detected in:
> > D:\WINDOWS\system32\windialup .....again.
> >
> > What can I do now?.... the antivirus is not able to clear this jerk
> > completely from my computer and I am worrying of more future
> > troubles...... (Also, from the previous week that I have installed my
> > CD RW, the computer's
> > Memory Frequency has decreased from 400 MHZ to 256 MHz...but there is
> > no problem with the computer's performance.)
> >
> > Can anybody help me?
> >
> > (PS: I have zoneAlarm Pro installed and its security is set to high
> > both for "Internet" and "Trusted zone". Also,to be honest, I am not
> > a visitor of porn
> > sites...)
>
> Get and run these programs (if you test after each one you can stop when
> the problem is gone):
> Ad-Aware:
> http://www.lavasoftusa.com
> and
> Spybot - Search & Destroy -
> http://security.kolla.de/
> http://security.kolla.de/index.php?lang=en&page=download
> http://spybot.eon.net.au/
> http://www.tomcoyote.org/SPYBOT/
> and
> BHO Demon: http://www.spywareinfo.com/downloads/bhod/
>
> Until the problem is solved.
>
> Further advice available here:
>
> If the problem site is your home page:
> http://www.mvps.org/inetexplorer/answers.htm#home_page
>
> If the problem is a pop-up window, your computer may have been hijacked.
> For information about pop-up windows, how to get rid of them, and prevent
> them in the future have a look at the link below:
> http://www.mvps.org/inetexplorer/Darnit.htm#pop_up
>
> --
> Frank Saunders, MS-MVP, IE/OE
> Please respond in Newsgroup. Do not send email
> http://www.fjsmjs.com
>

[Frank Saunders, MS-MVP]

" > wrote in message

> What about sexplorer? do you know any thing of this jerk too ?
> It was in the same folder as PornDail was.....
> Regards
>

Did you make sure to use the online update for AdAware and Spybot?

I'm surprised they didn't catch it.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com

[Star]

" > wrote in message
...
> When I updated my MacAfee antivirus last week and scanned allover the
> computer, the mentioned virus was detected in this folder
> ...D:\WINDOWS\system32\windialup\2443.exe( I have my XP installed on
> D:\).... My antivirus suggested me to clear it ,and ...well... I did it.
>
> Three days later I updated my antivirus again with the latest virus
> signatures ,then ran the program.....This time a Trojan was detected in
> C:\VolumeInformation\A0142026.exe.... It was PornDail-177.dldr
> again.....subsequently I deleted the infected files...
>
> And today, I updated my MacAfee again, then ran it and scanned all
> drives,all
> folders and every where... , the same damn thing was detected in:
> D:\WINDOWS\system32\windialup .....again.
>
> What can I do now?.... the antivirus is not able to clear this jerk
> completely from my computer and I am worrying of more future
troubles......
> (Also, from the previous week that I have installed my CD RW, the
> computer's
> Memory Frequency has decreased from 400 MHZ to 256 MHz...but there is no
> problem with the computer's performance.)
>
> Can anybody help me?
>
> (PS: I have zoneAlarm Pro installed and its security is set to high both
for
> "Internet" and "Trusted zone". Also,to be honest, I am not a visitor of
> porn
> sites...)
>
>
If you have system restore enabled, you will need to disable it, reboot,
then reenable it be rid of the files.

Star

[Jim Macklin]

McAfee detects viruses and on their instruction pages it
says that XP users should disable system restore to delete
viruses that are stored in those files.

To expect an anti-virus program to prevent all infections is
probably not a perfect solution.
You probably need to run a firewall, an anti-virus and a
spyware/dialer program and check daily for updates. You
also need to run background scanning.
I run Zone Alarm, AdAware, SpyBot, and McAfee. On dial-up.
I also up-date Windows daily (check).

That seems a lot easier than having to clean/disinfect a
computer... safe sex/safe computing.




"Star" > wrote in message
...
|
| " > wrote in message
| ...
| > When I updated my MacAfee antivirus last week and
scanned allover the
| > computer, the mentioned virus was detected in this
folder
| > ...D:\WINDOWS\system32\windialup\2443.exe( I have my XP
installed on
| > D:\).... My antivirus suggested me to clear it ,and
....well... I did it.
| >
| > Three days later I updated my antivirus again with the
latest virus
| > signatures ,then ran the program.....This time a Trojan
was detected in
| > C:\VolumeInformation\A0142026.exe.... It was
PornDail-177.dldr
| > again.....subsequently I deleted the infected files...
| >
| > And today, I updated my MacAfee again, then ran it and
scanned all
| > drives,all
| > folders and every where... , the same damn thing was
detected in:
| > D:\WINDOWS\system32\windialup .....again.
| >
| > What can I do now?.... the antivirus is not able to
clear this jerk
| > completely from my computer and I am worrying of more
future
| troubles......
| > (Also, from the previous week that I have installed my
CD RW, the
| > computer's
| > Memory Frequency has decreased from 400 MHZ to 256
MHz...but there is no
| > problem with the computer's performance.)
| >
| > Can anybody help me?
| >
| > (PS: I have zoneAlarm Pro installed and its security is
set to high both
| for
| > "Internet" and "Trusted zone". Also,to be honest, I am
not a visitor of
| > porn
| > sites...)
| >
| >
| If you have system restore enabled, you will need to
disable it, reboot,
| then reenable it be rid of the files.
|
| Star
|
|

[Mark Test]

Well, my one and only experience with a trojan horse virus resulted in my
re-formatting the HD. It was the only way I could "kill" the *******.
Like you it was continually "popping" up in various directories and BTW
deleting key system files.

Mark

--
"A liberal is a person who sees a fourteen-year-old girl performing live sex
acts onstage and wonders if she's being paid the minimum wage."
Irving Kristol