Bah, tricked again...

D

DeadlyAura

Supreme [H]ardness
Joined
Jun 6, 2005
Messages
4,859
Well, I was browsing around the net, watching random vids. As I am about ot watch a vid, it appears to be loading the in-browser WMP. A little message come up that says "Windows Media Player cannot display the media. Updated codec pack required" I click ok and it does a little loading bar thing, and a firefox download box pops up letting me know my dl is ready.

At this point, I am figuring that since I just got WMP 11, it needs to update codecs. So, I say ok. It dls and looks legit. I install and here we go. Its a scam. Something called "Virus Burst" and "iCodecPack".

Infests the registry, runs all kinds of exe's that startup immediately after you end them.

I was able to get rid of the exe's by editing the scripts before they could startup again. I took back the registry manually. Now there is one thing left.

In the taskbar, there is a little blip that keeps saying something about virus infections. I click it right or left and it brings me to the virus burst website.

I can't figure out where it is or how to get rid of it. SpyBot won't pick it up, and neither did the free trial of registry booster.

Any suggestions?
 
Try running ad-aware, spybot and ewido while in safe mode, other than that, restore your ghost backup...you have a ghost backup right? :D

oldmx
 
I read something on this just last week. They even have a website: http://www.icodecpack.com/?id=438 It's a 55KB file that is supposed to contain codecs....

This may help you get rid of VirusBurst:

http://www.bleepingcomputer.com/forums/topic63896.html

Ok, the first link seems a little shady with that program that has to download crap off the internet to get it to work.

Here is another
http://www.spywareremove.com/removeVirusBurst.html

and another:
http://www.2-spyware.com/remove-virusburst.html
 
http://safety.live.com or download windows defender. It removes this spyware if I'm correctly identifying it based on symptoms.

This posting is provided "AS IS" with no warranties, and confers no rights.
 
You must log in or register to reply here.
Back
Top