swp2009 demo - malware story

[Guest Kenneth Head]

Here is another malware hit. Read story! Ken

 

 

 

Just killed this bastard swp2009 with a cocktail of MS Malicious software

removal tool and then Malwarebytes. Phew. SAS, a favorite did not work

for me

this time around. I think the MST was the one that did the trick.

 

 

"John Doe" wrote:

<span style="color:blue"><span style="color:green">

> > Just cleaned a machine with that; SuperAntiSpyware was the only one </span></span>

that<span style="color:blue"><span style="color:green">

> > removed it; for this one Malwarebytes nor Spybot caught it </span></span>

correctly. Run<span style="color:blue"><span style="color:green">

> > those after SAS tho' . . .

> >

> > "FurPaw" <furrealpawdog@gmail.com> wrote in message

> > news:gmm1dg$2ms$1@reader.motzarella.org...<span style="color:darkred">

>> > > My computer was hit by swp 2009 tonight. The first indication </span></span></span>

was a<span style="color:blue"><span style="color:green"><span style="color:darkred">

>> > > message that my firewall was not on. (??) I restarted it.

>> > >

>> > > I updated virus defs and ran a deep scan with BitDefender, and </span></span></span>

it did not<span style="color:blue"><span style="color:green"><span style="color:darkred">

>> > > detect anything. Sometime while it was running, a big black square

>> > > appeared in the middle of the screen.

>> > >

>> > > I checked Task manager and saw swp2009 demo.exe running, and </span></span></span>

killed it,<span style="color:blue"><span style="color:green"><span style="color:darkred">

>> > > which removed the big black square.

>> > >

>> > > Windows popped up a message saying

>> > > DLL C:WINDOWSsystem32digeste.dll is not a valid Windows image.

>> > >

>> > > Sure enough, it appeared on the computer at 6:33 PM tonight, </span></span></span>

about the<span style="color:blue"><span style="color:green"><span style="color:darkred">

>> > > time I got the firewall message.

>> > >

>> > > I can't find out much about this - googling turns up a few </span></span></span>

instances of<span style="color:blue"><span style="color:green"><span style="color:darkred">

>> > > people who have been affected, but not much help. I can't find it

>> > > mentioned on McAfee or Symantec sites.

>> > >

>> > > I run Windows Firewall, a BitDefender scan daily, and the system </span></span></span>

sits<span style="color:blue"><span style="color:green"><span style="color:darkred">

>> > > behind a router. I suspect I inadvertently clicked on the a </span></span></span>

hidden link<span style="color:blue"><span style="color:green"><span style="color:darkred">

>> > > around 6:33 tonight.

>> > >

>> > > How do I get rid of this, or am I going to have to reformat and </span></span></span>

reinstall<span style="color:blue"><span style="color:green"><span style="color:darkred">

>> > > windows? (I have a complete backup from last night.)

>> > >

>> > > Thanks for your help!

>> > >

>> > > Carol

>> > > --

>> > > Don't believe everything that you think.

>> > >

>> > > To reply, unleash the dog.</span></span></span>