Possu81
06-11-2006, 01:58 AM
Symantec online scanner founded a virus on my computer: here it's detailed:
http://securityresponse.symantec.com/avcenter/venc/data/spyware.ardakey.b.html
Also, I am getting warnings by my Avast antivirus and symantec personal firewall that kinda virus is trying to do something. I have blocked that connection (wwp.greenwichmeantime.com, sounds not good to me) and removed infected file immediately but still scanner is founding new viruses. It looks like the virus is trying to get downloaded to my computer. I haven't installed any suspisious programs lately and blocked all suspicious things running.
But what is trying to harass my computer? How to get rid of it?
I made a scan with Avast antivirus and it found in WinSecure.003 and .004 files win32:Ardamax-X and Ardamax.gen called "tools" which it deleted. I still think there is something else behind this because why does viruscanner find new viruses like once a day and why firewall must block that connection at the same time. Is there a infected program in my computer or do just tried to get hacked?
How bad is that virus and how can I get rid of it? I have tried to look add/remove programs but there is no ardamax. If I look files on my computer, I don't find those files that symantec says to be in system-folder if the virus is in computer. That is somewhat relieving but those new foundings distress me. I have ADSL and foundings seems to be random, not linked with any page or so.
Help me! Please :)
Edit: finally Ewido helped me and found:
C:\WINDOWS\system32\WinSecure.007 -> Not-A-Virus.Monitor.Win32.Ardamax.24 : Cleaned with backup
C:\WINDOWS\system32\WinSecure.exe -> Not-A-Virus.Monitor.Win32.Ardamax.24 : Cleaned with backup
hopefully problems will be over
http://securityresponse.symantec.com/avcenter/venc/data/spyware.ardakey.b.html
Also, I am getting warnings by my Avast antivirus and symantec personal firewall that kinda virus is trying to do something. I have blocked that connection (wwp.greenwichmeantime.com, sounds not good to me) and removed infected file immediately but still scanner is founding new viruses. It looks like the virus is trying to get downloaded to my computer. I haven't installed any suspisious programs lately and blocked all suspicious things running.
But what is trying to harass my computer? How to get rid of it?
I made a scan with Avast antivirus and it found in WinSecure.003 and .004 files win32:Ardamax-X and Ardamax.gen called "tools" which it deleted. I still think there is something else behind this because why does viruscanner find new viruses like once a day and why firewall must block that connection at the same time. Is there a infected program in my computer or do just tried to get hacked?
How bad is that virus and how can I get rid of it? I have tried to look add/remove programs but there is no ardamax. If I look files on my computer, I don't find those files that symantec says to be in system-folder if the virus is in computer. That is somewhat relieving but those new foundings distress me. I have ADSL and foundings seems to be random, not linked with any page or so.
Help me! Please :)
Edit: finally Ewido helped me and found:
C:\WINDOWS\system32\WinSecure.007 -> Not-A-Virus.Monitor.Win32.Ardamax.24 : Cleaned with backup
C:\WINDOWS\system32\WinSecure.exe -> Not-A-Virus.Monitor.Win32.Ardamax.24 : Cleaned with backup
hopefully problems will be over