PDA

View Full Version : DOWNLOADER VIRUS


Tammi Branch
June 8th 04, 04:18 AM
I'm not sure where to post this, but I have 2 Tojan
viruses in my system. I have the Downloader.Agent.AS in
my WINDOWS\SYSTEM\DMKDWC.EXE. I have the
Downloader.1stbar.3.BE in my
C\ProgramFiles\InternetOptimizer\OPTIMIZE.EXE.
My computer will not allow me to delete these files
because they are being used by windows. Any fixes that I
may be able to use??
Thanks,
Tammi

Bert Kinney
June 8th 04, 04:50 AM
Hi Tammi,

I would suggest you start by doing a virus scan with up to date virus
software, then scan for and removing any installed spyware.
If you are in need of virus software, here are a couple to choose from, for
free.
Download the software, and in Update Manager run Update
then do a complete virus scan.
Free Offer: eTrust EZ Armor Security Suite from Computer Associates
http://www.my-etrust.com/microsoft/index.cfm

Search and destroy any installed SpyWare/malware/adware:
Ad-aware is a free multi spyware removal utility that scans
your memory, registry and hard drives for known spyware
components and lets you remove them safely. After installing
Ad-Aware make sure to run the update feature before scanning.
http://www.lavasoftusa.com/ For large amounts of installed
spyware and such, it may be necessary to run Ad-Aware several
times to clear them all.

Here are a couple more removal tools.
CWShredder:
http://www.spywareinfo.com/~merijn/cwschronicles.html
Download Link:
http://www.spywareinfo.com/~merijn/files/CWShredder.exe
Spybot:
http://www.safer-networking.org/

SpywareBlaster:
http://www.wilderssecurity.net/spywareblaster.html
SpywareBlaster doesn't scan and clean for spyware - it
prevents it from ever being installed. SpywareBlaster is
a non memory resident utility. It works by setting a "kill bit"
for the CLSIDs of spyware ActiveX controls, it prevents the
installation of any of them from a webpage.

For more information:
The Parasite Fight:
http://aumha.org/a/parasite.htm

Darnit:
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot

Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm

Unexplained computer behavior may be caused by deceptive software:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;827315

--
Regards,
Bert Kinney [MS-MVP DTS]
http://dts-l.org/
How to Configure Outlook Express for Internet News:
http://support.microsoft.com/default.aspx?kbid=171164

"Tammi Branch" wrote
> I'm not sure where to post this, but I have 2 Tojan
> viruses in my system. I have the Downloader.Agent.AS in
> my WINDOWS\SYSTEM\DMKDWC.EXE. I have the
> Downloader.1stbar.3.BE in my
> C\ProgramFiles\InternetOptimizer\OPTIMIZE.EXE.
> My computer will not allow me to delete these files
> because they are being used by windows. Any fixes that I
> may be able to use??
> Thanks,
> Tammi

H Leboeuf
June 8th 04, 01:53 PM
As Bert Kinney suggests look into virus/trojan. It may even be this one.

http://www.sophos.com/virusinfo/analyses/dialdyfucaa.html
optimize.exe
--

Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===
"Tammi Branch" > wrote in message
...
> I'm not sure where to post this, but I have 2 Tojan
> viruses in my system. I have the Downloader.Agent.AS in
> my WINDOWS\SYSTEM\DMKDWC.EXE. I have the
> Downloader.1stbar.3.BE in my
> C\ProgramFiles\InternetOptimizer\OPTIMIZE.EXE.
> My computer will not allow me to delete these files
> because they are being used by windows. Any fixes that I
> may be able to use??
> Thanks,
> Tammi

Tammi Branch
June 10th 04, 04:02 AM
Just wanted to thank both of you for responding. I did
the fixes, and no virus shows now. Best of all, I didn't
have to take it in to the shop!! Thanks again, Tammi
>-----Original Message-----
>I'm not sure where to post this, but I have 2 Tojan
>viruses in my system. I have the Downloader.Agent.AS in
>my WINDOWS\SYSTEM\DMKDWC.EXE. I have the
>Downloader.1stbar.3.BE in my
>C\ProgramFiles\InternetOptimizer\OPTIMIZE.EXE.
>My computer will not allow me to delete these files
>because they are being used by windows. Any fixes that I
>may be able to use??
>Thanks,
>Tammi
>.
>