dslreports logo
 
    All Forums Hot Topics Gallery
spc
uniqs
51

althecat
@telstraclear.net

althecat to norwegian

Anon

to norwegian

Re: Jetstar phish

I have been infected by this. It is a pretty well presented phish. ESET did not detect the cause and is unable to delete. Whatever I have been infected by is polling....

163.143.90.190:80
mapcake.ru/image.php
173.237.185.166.80
orgnet.pl/image.php

and being blocked.

Any assistance would be greatly appreciated.

norwegian
Premium Member
join:2005-02-15
Outback

1 edit

norwegian

Premium Member

That it is.

I have uploaded the .exe and you can see what it affects in this link under the additional information.
»www.virustotal.com/file/ ··· 4190577/

A zbot variant is best to be sorted at the »Security Cleanup

Zbot is a known malware, most Anti Virus companies has a link to a zbot removal tool - but still it is worth a visit to the cleanup forum.
This is the Kaspersky utilities page - zbotkiller
»support.kaspersky.com/vi ··· /utility

Microsoft's specific link to this type of malware
»www.microsoft.com/securi ··· amarue.I
norwegian

norwegian to althecat

Premium Member

to althecat
said by :

Any assistance would be greatly appreciated.

I might add, it is quite a nasty and immediately back up your personal data to another drive or external drive and have it scanned off a clean computer and keep it aside before attempting to clean malware such as this if you value data you have on this infected computer.