I run McAfee Corporate Virus scanner and Security suite on my Windows 7 Ultimate computer. In the last few weeks the system has had an issue with all search engines being hijacked. You type in a search, which works fine, but then you click on a link and the bloody thing goes to a spam site or advertisement page.

I’ve tried scanning my system with McAfee, tells me there is nothing. I have tried HijackThis, I’ve tried Spybot Search and Destroy, I’ve tried a bunch of other crap. All of them say no problems found.

I download Microsoft Security Essentials, remove Mcafee and install the Microsoft suite, do a quick scan and here are the initial results.

Recommendation:Virus

Microsoft Security Essentials detected programs that may compromise your privacy or damage your computer. You can still access the files that these programs use without removing them (not recommended). To access these files, select the ‘Allow’ action and click ‘Apply actions’. If this option is not available, log on as administrator or ask the local administrator for help.

rootkit:Alureon->RDPCDD

Items:file:C:\Users\Amo\AppData\Local\Temp\wsdkrlxp.exeWorm 

regkey:HKCU@S-1-5-21-605634050-2449622611-1713154280-1012\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\wsdkrlxp.exe

runkey:HKCU@S-1-5-21-605634050-2449622611-1713154280-1012\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\wsdkrlxp.exe

 WTF??? Why couldn’t ANY of the others find these???

 
Update Tomorrow after a FULL system scan of all 1/2 Terabytes of used disk space

Advertisements