02-26-2010 11:32 AM
We have a new wave of infection, but, under coime.exe we have another exe debug file now, the name is wmxperb.exe
The virus propagate for the network, very fast.
Do you know if norton are building some protection?
02-26-2010 07:01 PM
The worm has Autorun ability to spread.
The nearest I have matched for this is the Malware named "Twittworm.A" there could be a B, C, D.........................
and there could always be faulty variants out there, where though it is suppose to do something, it doesn't.
I only ran the file that the thread creator posted (that was removed).
02-27-2010 12:48 AM
I managed to install the worm so it creates a HOSTS file of 4.85mb in size, yep
It Causes the F4 restart with programs like Hijackthis to become worse. If that is the case switch the steps
The Safeboot repair file is allowed to run without impedance with the infection running, Then I restarted the PC into Safe Mode, Now run Hijackthis to remove the O4 Conime entry
Restart the PC...................
To restore the HOSTS file that large use a program like HostsXpert to replace with a fresh copy.