PDA

View Full Version : Bloodhound.Exploit.6


Extremely Unhappy
January 24th, 2005, 11:35 PM
I just downloaded your SpyBlaster freeware, and when I selected update, I was immediately infected with the Bloodhound.Exploit.6 virus! My virus protection attempted to stop it, and delete it, but couldn't. I was not doing anything but updating your software when this took place.

I found the virus at: C:\WINNT\Temp\~428A016C.tmp, but I couldn't delete it. I went to the MS site and d/l the patch, but by the time I did that, my Outlook was already corrupted, and I started receiving errors from IE. I had to reinstall IE and run the patch immediately after. I also deleted the Temp folder (which I hope wasn't a bad thing). Then I logged off and back on, and the file was gone.

This is a heads up to the software owners as well as the consumers. It took me 3 hours to clean this horrendous thing off my computer (due to all the errors received, the slowness of the system once it was infected, the IE locking up, etc. etc.). I did not expect a "recommended" software that prevents spyware to contain a virus, and it rather p'd me off.

bigc73542
January 25th, 2005, 12:05 AM
you might check out the info at the link (http://www.wilderssecurity.com/showthread.php?p=353647#post353647)

divedog
January 25th, 2005, 12:16 AM
NORTON??

bigc73542
January 25th, 2005, 12:19 AM
It is detected by norton, the link is their info and cleaning page.

divedog
January 25th, 2005, 12:21 AM
Sorry I should have been more clear I was asking if he was running Norton.

bigc73542
January 25th, 2005, 12:22 AM
yes he was ;)

divedog
January 25th, 2005, 12:26 AM
Take a look at this.
http://www.sophos.com/virusinfo/hoaxes/bloodhound.html

bigc73542
January 25th, 2005, 12:28 AM
That is why the recomended action is to get the microsoft patch to prevent this

divedog
January 25th, 2005, 12:41 AM
-{ Quote: "That is why the recomended action is to get the microsoft patch to prevent this" }-

I agree. It just seems a bit dubious. I have used Spyware Blaster for quite some time and have never had a problem with updates. It would seem that Norton thought the update was a virus. I would try one of the on line scanners for a second opinion and to make sure all is well.

bigc73542
January 25th, 2005, 12:45 AM
Norton was detecting an adware trojan. but with the patch you don't get that particular trojan at all. Bloodhound is just the name that norton gives it

javacool
January 25th, 2005, 06:17 AM
-{ Quote: "I did not expect a "recommended" software that prevents spyware to contain a virus, and it rather p'd me off." }-

Hi,

SpywareBlaster doesn't contain a virus.

What you may have seen is your anti-virus program's "auto-protect" option picking up on a pre-existing file because access of your temporary directory was initiated for some reason or another. (I've also seen this happen seemingly randomly.)

It could have also been a false positive.

I hope this helps clear things up a bit. :)

Best regards,

-Javacool

Detox
January 25th, 2005, 01:43 PM
Sometimes a little investigation goes a long way 8)

bigc73542
January 25th, 2005, 01:48 PM
I figured that everyone knew that spywareblaster would not have a virus, I was trying to show that it was a symantec problem. They admit that without the MS patch their av will detect this. Not just in spywareblaster but just about anything

bigc