[bcllibrary]

Has anybody come across such a virus
A message appears once the machine boots to a blank notepad file that opens and the below starts automatically being typed inside
Pentacle - 666 - Pentacle - 666 - Pentacle

follwed by a message in french.

I did see the post on Kaspersky but I am leary of using combfix.

thx

lib

[tek101]

Would you like to remove it.........?

Or you just want to know if anybody else sees it ......?!http://forums.pcworld.com/legacyimages/
1!

Run these "Full scan" first ...: www.computorcompanion.com/LPMArticle.asp?ID=235

[http://www.superantispyware.com/download.html]

[coastie65]

Hi, Yeah, that is definately malware alright. As tek101 suggested download, update and run www.SUPERantispyware.com as well as www.malwarebytes.org . letus know how that goes. coastie

[SpiritWind]

Hi :
Best to START the "removal process" by using programs such as Malwarebytes

Anti-Malware and 'SUPERAntiSpyware" . And Combofix is Best used under the guidance

of a certified "Malware Removal Specialist" ( in case something goes "wrong" ) ; however,

you may want to look through the Combofix "Tutorial" at

www.bleepingcomputer.com/combofix/how-to-use-combofix to see IF you feel

"adequate" to use it based on the Info there .

Info on the Kaspersky site says it comes from usb drives; do you use these ? IF Yes,

then I recommend you also seriously consider using the FREE "Flash Disinfector" &

start with the Info at [http://experi3nc3.wordpress.com/2007/05/10/flash-disinfector-by-subs/] .

[coastie65]

Hey SpiritWind, I was doing some research on that thing. Interestingly, I got an orange pop up alert from Avast! about hijacked sites afterwards and I am reasonably sure that is what happened in this case. I have run into it in the past myself when doing some research on XP MCE. That turned out to be a pain ( I had a lot of stuff). It wasn't deeply installed in the system, but was all over the place. That stuff was more of a nuisance to remove, than any real problem, as there was so much of it. I remember one was the Downloader ZLOB and that was the worst of the lot. The rest was several variations of Vundo. Did take a bit of work though.