Results 1 to 6 of 6

Thread: ftpacc! GRRRR!

  1. #1
    Junior Member
    Join Date
    Nov 2005
    Posts
    3

    Default ftpacc! GRRRR!

    Im having a problem removing this one! ftpacc.exe? Yesterday it was harddisk.exe and before that it was odbcdos.exe.?????? It changes its name daily! Hides in folders like fonts and prefetch. What is it and how can u get rid of it? Thanks!

    SOME LOG EXAMPLES!
    WinXP
    11/7/2005 10:57:45 AM Denied value "*ftpacc" (new data: "C:\WINDOWS\system\ftpacc.exe rerun") added in System Startup global entry!
    11/7/2005 10:37:56 AM Denied value "*harddisk" (new data: "") deleted in System Startup global entry!

    11/7/2005 10:38:05 AM Allowed value "*sysdvd" (new data: "C:\WINDOWS\Tasks\sysdvd.exe rerun") added in System Startup global entry!

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,961

    Default

    Hi there and welcome to the forum.

    1) Please make sure you have Spybot-S&D version 1.4
    Uninstalling Previous Spybot-S&D
    Spybot-S&D Version 1.4 Download
    Tutorial

    2) Then run three on-line scans. (one at a time)

    Bit Defender Virus Scan

    Trend Micro Online Scan

    Mcafee Virus Scan

    Save any logs produced and report back here with details of what was found/removed please.

  3. #3
    Junior Member
    Join Date
    Nov 2005
    Posts
    3

    Default

    This is what it is!

    Spyware:Spyware/Virtumonde No disinfected C:\WINDOWS\SYSTEM\FTPACC.EXE
    Spyware:Spyware/Virtumonde No disinfected C:\WINDOWS\system\ftpacc.exe

    Thats from the bit defender scan. The file is identified as Trojan Vundo.381952.A

    I have been to every forum known to man trying to rid myself of it. While Im not to computer savy I do know that it is ruining my online gaming experience. AVG does not recognize it as a virus because they say its spyware????????? PFFFT! Anyway how can I get rid of it?

    Thanks again!

  4. #4
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,961

    Default

    Hello.
    Please go here and follow instructions to post a hjt log.
    http://forums.spybot.info/forumdisplay.php?f=22

    If you have already sought assistance at another site please give a link to the topic.

    Cheers.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  5. #5
    Junior Member
    Join Date
    Nov 2005
    Posts
    3

    Default

    Here is a link to a log for you !

    http://forum.aumha.org/viewtopic.php...aa9d8a8e0d3621

    All the bad stuff has been removed with the exception of the ftpacc!!!!

    Thanks!

  6. #6
    Security Expert-Emeritus
    Join Date
    Oct 2005
    Posts
    5,025

    Default

    Hi

    Continue there until cleaned up with PA Bear
    Take the suggestion to disable tea timer

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •