NEW virus, no scanner recognizes it !

[gypsyman]

This is odd. I just noticed that on my Google toolbar, in the search area, "msthost.exe" is there. I cleared it several times and it kept coming back. It is gone now. Did a file search and it can't find it. Nothing on the Norton site about it. My NAV expires on 6/10 and I was just about to renew it online thru Norton. Do I have this virus? Can it see my CC# if I renew online? Also did a search on Symantec, and nothing there...

 

[Skyclad1uhm1]

BOClean

 

[Shelly21]

Is there something going on? Our local office just got hit.

 

[lithium726]

Originally posted by: OS
I think I got something similar last week. I couldn't fix it so I had to reformat. It was some kind of uber trojan horse. It even killed NAV when I tried to update it. Anyways mine was called "cool web search" or something like that. It really sucked.

i had that yesterday! it sucked! i could delete the temp file even from recovery console, it killed NAV, and it infected all of my hundereds of exe files on my storage drive! had an uber fun time getting rid of that little ah heck

 

[Shelly21]

Just had a couple of servers that rebooted.... something is amiss.

 

[Mr N8]

Netscreen IDP + Firewall owns virus scanners. Although, we still have NAV running as a fall-back.

 

[yukichigai]

Originally posted by: OS
I think I got something similar last week. I couldn't fix it so I had to reformat. It was some kind of uber trojan horse. It even killed NAV when I tried to update it. Anyways mine was called "cool web search" or something like that. It really sucked.

I sincerely hope that's sarcasm. Pretty please?

For those of you who don't know, Spywareinfo.com and Merijn.org have covered this in detail.

Anybody in Russia wanna stab the owners of Cool Web Search?

 

[Shelly21]

Looks like it's the Sasser again.

 

[gypsyman]

Originally posted by: yukichigai

Originally posted by: OS
I think I got something similar last week. I couldn't fix it so I had to reformat. It was some kind of uber trojan horse. It even killed NAV when I tried to update it. Anyways mine was called "cool web search" or something like that. It really sucked.

I sincerely hope that's sarcasm. Pretty please?

For those of you who don't know, Spywareinfo.com and Merijn.org have covered this in detail.

Anybody in Russia wanna stab the owners of Cool Web Search?

I can't find anything about msthost.exe on Spywareinfo.com and your link for merijn is no good. Can you please be more specific. Thanks.

 

[BurnItDwn]

I had a virus once. Back in 1996, the computer lab at the school was infected with the Stoned.Spirit virus (and I had no idea at the time. However, after doing some of my Pascal programming at home ... and then bringng a floppy back and forth, eventually, they told us that the lab was infected, and that they had cleaned it out. (I cleaned my home PC, a 486 DX 33, once I was able to secure a copy of fprot.)

 

[gypsyman]

bump for more info from yukichigai.