New Virus?

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

I'm not sure I could have zipped and sent it to Norton, but in any event, I had already deleted it as explained in my post...

 

PR

curious about whether your desktop went "active" and you saw a hazard image appear on your desktop. i personally suspect that it is a zlob variant - perhaps too new to have a def yet. if it happens again, and for anyone else that may be browsing, when in doubt about a file, use this link to submit it:

 

https://submit.symantec.com/websubmit/retail.cgi

 

mel 

 

 

Yesterday, April 22, as I was doing a seach on Yahoo, there was a funny flicker on my screen. Immediately, I began to receive what looked like a "System Error" message, indicating that my laptop had been infected and that I needed to download anti-virus software.

 

This was very strange, as I have Norton protecting the system (I am running Vista on a Dell laptop).

 

Without downloading anything, I was able to determine that the site from which the file was supposed to be downloaded was:

 

[EDIT: URL removed]

 

and the file that it wanted me to download was:

 

mb.exe

 

I did not download anything, but I did continue to receive that System Error message, and quite frequently, as often as every time or every other time that I changed a page in my browser. To say that it was annoying is quite an understatement!

 

I updated Norton, conducted a full scan, but nothing changed. I also did the same with SpyBot and Ad-Aware. Still nothing.

 

I cleared out the cache. Nothing. A co-worker then had a suggestion - With the IE browser open, I went to Tools-Manage AddOns-Enable or Disable AddOns. Then setting the screen to display Add-ons that may have been used with Internet Explorer, I identified a file that was the culprit. In the Name column, it simply said Video. The Publisher field for this file was blank, and under Type it said Browser Helper Object.

 

The file shown to this "Video" was tonsakre.dll

 

I first disabled the file and then deleted it and everything went back to normal.

 

This may be a new virus as neither Norton nor SpyBot nor Ad-Aware could identify it as problem.

 

Just thought I would share that with readers.

 

Parker R.

Message Edited by Tony_Weiss on 04-23-2008 08:44 PM

Is it possible for you to safe a sample , zip it and send it to Symantec?