This is unbelivable

[stewartbmw2000]

This has really gone too far..

A program called instantpleasure.exe has some how installed its self and added its self to zonealarm with full access!!

The uninstaller wouldnt work and it would not let me delete the files

I had to go into safe mode delete all the files and manually delete all the registry values.

It's sorted now but where did this come from and how the hell did it install its self while i was out and add its self to ZAP ???

Any insight to this much appreciated...

Also there was a internet explorer window open that i couldnt close with an IP of http://204.177.92.198 so I added it to the HOSTS file and did a visual route of it and the results are attached.

 

[2z]

Did you use this ? Keygen_ZONE_ALARM_ALL_VERSIONS
it contains a virus BKDR_SDBOT.A

 

[stewartbmw2000]

no nothing like that for ages, I've got norton antivirus running as well...

 

[xsk8zerox]

oh is it one of those dialers? If it is download spybot and search for dialers and it will remove it

 

[Reg]

Yep, definately a dialer. I believe it dials to Australia. You probably got it from a hole in Internet Explorer which allows websites to install files without your consent. SP1 fixed that, but I don't know if you are running the beta.

 

[xsk8zerox]

spy bot should take care of it then

 

[stewartbmw2000]

I've got ad-aware 5.83 and the latest refupdate, ill get this spybot when I get home from work aswell, is it the same thing as as-adware?

 

[xsk8zerox]

Its similar yes but it will also look for other thing like bad ap paths in the registry and dialers and keyloggers

 

[stewartbmw2000]

nice 1 cheers