Virus or not?

[bagelred]

Just used BitDefender to do a full virusscan and it found a virus, but it said "disinfection failed" and "moved failed". Is it a false positive?

Here is the virus:


C:\Program Files\Logitech\Resource Center\installers\wildtangent\blastrb2.exe=>(NSIS o)=>zlib_nsis0018 Infected Trojan.Exploit.Html.Codebaseexec.CC


Apparently, something in my Logitech Keyboard info.

Can anybody fill me in what to do? (Or not do?). Thanks.

 

[Osiris]

Its no bigge but it acts as spyware:

What is Wild Tangent?

Wild Tangent is a video game software company specializing in online games. It has even made a partnership with AOL to include itself as part of the AOL Instant Messenger for their AIM games section. The WildTangent Web Driver is their technology that allows you to play 3D games over the Internet. Although its not technically considered spyware it does have built in components to update itself and gather information about the computer system including


Perform this below:

Follow these instructions carefully

Download ALL 10 programs and update if needed.

Ad Aware SE Personal Free

Ad-aware Messenger Service Plugin

Ad-Aware VX2 Cleaner Plugin

Spybot Search and Destroy Free

Windows Defender 2 Beta

HijackThis

Ewido

CCleaner

Cleanup!

Follow these steps

Delete the prefetch folder C:\WINDOWS\Prefetch, this folder will come back on next reboot.

Go to Add/Remove programs and remove any offending programs such was weatherbug, search assistants, etc.

Delete all cookies and temporary internet files in the control panel, Internet Options.

Go to Start, run, type msconfig, go to startup, disable everything except your antivirus, Firewall, click apply, don¡¦t reboot yet.

Download Msconfig Cleanup below

Msconfig Cleanup

Run Msconfig Cleanup after you unchecked the items you were told to uncheck and recheck, click "Select All", then click "Clean up Selected", then click "Quit". Make sure your antivirus and firewall are not checked. If you delete your antivirus and firewall entries, you will need to reinstall them so be sure to check them.

Now run each Spy ware program 1 by 1. Running all 3 at the same time will slow most systems down.

When each program has finished scanning, remove everything.

Now go to the recycle bin and delete everything that is in it.

Then run CCleaner. Make sure you run the Cleaner section of Windows and Applications and then the Registry Cleaner. Make a backup if you wish while running the Registry cleaner when it asks you.

When finished with the scans, reboot, and go into Safe Mode and run these scans again, remove everything they find, and then reboot back into Windows in normal mode.

Then run HiJackthis!

Save the log, copy and paste the log on www.techist.com
Do not attach the log, copy and paste always. This will make things go much faster.

 

[bagelred]

Thanks for all the info.

That Msconfig utility is a nice little program. I always wondered why XP doesn't let you erase items from the Startup menu. They must have had a reason. But some things I'm not sure if I should take out or not.....

Well, it seems that the virus/spyware Wildtangent might be associated with my Logitech keyboard or mouse? I don't know.

Problem is I can't delete everything out of msconfig, because I need Logitech keyboard and mouse to begin during Windows startup.

So i'll try all the steps and see what happens. But I guess if I can't get Wildtangent, it sounds like not that big a deal.....

 

[bagelred]

Well, I did all the steps. But Wildtangent is still there. I'll guess I'll just leave it already. Seems like doesn't wanna leave:

C:\Program Files\Logitech\Resource Center\installers\wildtangent\blastrb2.exe=>(NSIS o)=>zlib_nsis0018 Infected Trojan.Exploit.Html.Codebaseexec.CC

 

[Osiris]

http://www.pchell.com/support/wildtangent.shtml