Win Antivirus and count.exitexchange.com

Discussion in 'ewido anti-spyware forum' started by brainstem, Sep 13, 2006.

Thread Status:
Not open for further replies.
  1. brainstem

    brainstem Registered Member

    Joined:
    Sep 13, 2006
    Posts:
    2
    I have removed about 15 or 20 nasties so far in the past couple days but I have a couple (or possible one undetectable trojan) that I can't get ahold of.
    System: WinXP Sp2
    Browser: Firefox
    MSMessenger: Removed

    AV/AS Software: Norton, AVG, Spysweeper, Ewido
    Steps taken thus far:
    Restarted;Safe mode.
    Started; Ewido.
    Task Manager; killed 'explorer.exe' process.
    Scanned; Ewido: 0 found
    Started; Spysweeper.
    Task Manager; killed 'explorer.exe' process.
    Scanned; Spysweeper: 0 found
    Started; AVG.
    Task Manager; killed 'explorer.exe' process.
    Scanned; AVG: 0 found

    Tried in safe mode; explorer: off, safe mode; explorer: on, normal mode; explorer: off, normal mode; explorer: off.

    Regardless. I get popups to winantivirus.com and count.exitexchange.com that after a few times start dropping nasties like zlob and adware.virtumionde (only detected by ewido. Nearly NO information on this malware variant of virtumond/mundo is available.).

    Someone please help. And for the love of god, don't tell me to buy Xoftscan.
    (I just had this pop up as I was loading explorer window to get the hijackthis log: http://www.amaena.com/securityworm6...0&mpt=1158169168&aid=nm_bs_wav_kw&lid=windows)

    HijackThis log is as follows:

    ~Log removed. Please see this post. https://www.wilderssecurity.com/showthread.php?t=42148 - Ron

    The only thing that looks like a nasty to me is:
    O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /installquiet /keeploaded /nodetect

    Please let me know. I am wasting valuable, profitable time on this bull.

    Brainstem-
     
    Last edited by a moderator: Sep 13, 2006
  2. Joliet Jake

    Joliet Jake Registered Member

    Joined:
    Mar 1, 2005
    Posts:
    911
    Location:
    Scotland
    Googled it and got this...

    Description:
    nwiz.exe is a part of NVidia's Nview features installable alongside it's graphics hardware products. This application will give the user access to additional features which allow the configuration of up to 32 monitors on a host, or to expand the desktop across many monitors. This is a non-essential process. Disabling or enabling it is down to user preference.


    No worries there then.
     
  3. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    7,309
    Location:
    England
  4. brainstem

    brainstem Registered Member

    Joined:
    Sep 13, 2006
    Posts:
    2
    Win Antivirus and count.exitexchange.com (2)

    ouch, threadlocked on my first post. Lets try again.

    I have something that is not detected by Spysweeper, Ewido, XoftScan, PCCillin, AVG, Norton and various web scans and I was hoping someone could point me in the right direction.

    Symptoms: pop-ups to winantivirus.com and count.exitexchange.com among others.
    Suspected but not sure: Qoologic

    Anyone have any ideas?

    b-
     
  5. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,802
    Location:
    Texas
    Re: Win Antivirus and count.exitexchange.com (2)

    Hello brainstem,

    As noted in your locked post, you should post your log at one of the forums listed in this link. They will assist you in cleaning your computer.
     
Thread Status:
Not open for further replies.