Wednesday, March 28, 2012

ODG.Trojan virus removal

Just a few notes about a virus called the ODG Trojan.


 


As of July 9th, 2009   The following programs do NOT detect it.  Malwarebytes, SuperAntispyware and AVG.


NOD32 does detect aspects of it, but will not remove it.


 


The virus is a rootkit infection and the visible result is slow performance in Firefox (even 3.5) and the search results are greatly affected and bogus. 


 


GMER detects it attached to a variety of services.


 


Removal was done by Kurt using ComboFix.  Chip has knowledge of certain .sys files that it uses and creates and he removed it manually using ERD


 


Side note: somehow, and I don’t know how, but the infected user actually received a PHONE call related to this infection from someone in India.


 


Kurt Rein
Mobile Computer Wizard
858 345-0382 Cel
619 255-1215 Office
kurt@mobilecomputerwizard.com
www.mobilecomputerwizard.com

No comments:

Post a Comment