Results 1 to 3 of 3

Thread: System Tray Popup I cannot Kill! Virusbursters

  1. #1
    Junior Member
    Join Date
    Nov 2006
    Posts
    5

    Default System Tray Popup I cannot Kill! Virusbursters

    It alternately flashes a yellow exclamation triangle and a minesweeper bomb. Context click does not present a menu to disable. Either mouseclick brings up this URL:

    xxx:virusbursters.com/?aff=330

    So some enthusiastic, or broke, affiliate wrote what seems to be a trojan horse to pimp this product! It regenerates registry entries after every boot, maybe during shutdown. It takes forever to shutdown. Some example strings in the registry are "baloon", and "virusbursters". It also seems to append strings to: SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters, without them being visible to regedit! I'm using RegSeeker to find these strings. Oh, and the strings are offshore havens, such as Trinidad and Tobago.

    Please help!
    Last edited by tashi; 2006-11-26 at 19:17. Reason: Disabled malicious url

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,955

    Default

    Hello kcisobderf.

    There are two options, a self help topic for those experienced and comfortable with such:

    VirusBurst, SpywareStrike and other desktop type hijacks

    For those who prefer to be guided by a trained malware remover:

    "BEFORE you POST" -Preliminary Steps and scanning with SPYBOT-S&D

    Then start your own thread in the malware forum:

    Malware Removal Forum

    Once you have posted, a helper will take a look at the logs as soon as available and give any further instructions necessary.

    Regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  3. #3
    Junior Member
    Join Date
    Dec 2006
    Location
    DFW, Texas
    Posts
    1

    Arrow Its nasty but it can be removed

    I wound up using one of the tools here:
    Removed

    be warned that this bit-o-evil downloads more malware, including viruses.
    Last edited by tashi; 2006-12-05 at 18:56. Reason: Url removed. Members please refer to our malware forum procedure posted above. :)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •