When is NIS going to detect/remove WhiteSmoke virus

 

 

WhiteSmoke.com is language software, BUT there is some kind of trojan that is downloaded with this thing. There were a few posts about this by users on the symantec site in January, 2011. But to date, NIS does not detect or fix this. If you Google "WhiteSmoke Virus", hundreds of complaints about this thing come up. Kabersky, claims to be able to remove it with the TDSS tool, so why is Symantec taking so long to even recognize that this is a real and PERVASIVE threat.

 

Here are the symptoms I observed on the affected machine:

1) Slow performance

2) Blocked access to internet sites from the Administrator account.

3) Cannot uninstall the WhiteSmoke software

4) Pop-up ads on the Windows desktop upon restart

 

Others have reported a variety of other symptoms.

I have similar WhiteSmoke issues. I understand from your reply that NIS will not get rid of the offending rootkit and that it needs to be done "manually". Is this something I, relatively ignorant about such things (rootkit?), can do myself? If so, where & how do I find out how to do it?

 

Any and all help would be appreciated.

 

BTW,  what is the risk associated with this type of problem?

 

Thanks,

Steve Colburn

Did you download it from www.whitesmoke.com?

 

 

WhiteSmoke.com is language software, BUT there is some kind of trojan that is downloaded with this thing. There were a few posts about this by users on the symantec site in January, 2011. But to date, NIS does not detect or fix this. If you Google "WhiteSmoke Virus", hundreds of complaints about this thing come up. Kabersky, claims to be able to remove it with the TDSS tool, so why is Symantec taking so long to even recognize that this is a real and PERVASIVE threat.

 

Here are the symptoms I observed on the affected machine:

1) Slow performance

2) Blocked access to internet sites from the Administrator account.

3) Cannot uninstall the WhiteSmoke software

4) Pop-up ads on the Windows desktop upon restart

 

Others have reported a variety of other symptoms.

No I stupidly opened it from a pop-up at another site.

Check out this web posting: http://forums.malwarebytes.org/index.php?showtopic=69183

 

Best to go to one of these sites for removal help. Running ComboFix without specific direction can be dangerous and can potentially trash your PC.

 

www.bleepingcomputer.com

http://www.geekstogo.com/forum/

http://www.cybertechhelp.com/forums/

http://forums.whatthetech.com/