Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Z-Connect Virus Trouble

Posted on 2009-05-19
6
Medium Priority
?
11,564 Views
Last Modified: 2013-11-22
I seem to have a virus or something like it, a trojan perhaps? That is making my life a living hell basically. My Internet connection is a 3G wireless broadband connection which dials up to make a connection, etc. Lately for no reason at all I seem to have acquired some nasty virus that keeps disconnecting my Internet, creating a connection called z-connect and then trying to dial it.

The strange thing is, the z-connect connection tries to dial 000 which is the emergency number for Australia (instead of 911 like the U.S).

I've scanned with Malwarebytes, AVG and Spybot Search & Destroy in safe mode to no avail. I don't wan to have to format my PC for such a trivial issue that plain bugs me.

In my c:\ directory files with weird names like this b6h8e7i9h3v2.exe keep showing up even after deleting them, same with the connection. The connection recreates itself even after I've deleted it.
0
Comment
Question by:dwaynecharrington
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 16

Expert Comment

by:warturtle
ID: 24422320
I would suggest either downloading ComboFix from : http://www.bleepingcomputer.com/combofix/how-to-use-combofix and save it as jabba.exe or with another name. Then disable your existing antivirus and run it. After ComboFix has created a log, please send that log to us and reenable your antivirus protection. Now, scan with MalwareBytes again.
0
 
LVL 16

Expert Comment

by:warturtle
ID: 24422357
Or the other option is Dr Web CureIt Live CD: http://www.freedrweb.com/livecd/ . Download the ISO file and burn it as an image on a blank CD. Boot your PC using this disk and scan for viruses. If Dr Web finds viruses, then select all and click on cure. After its done, reboot your PC in safe mode and scan with MalwareBytes again.
0
 
LVL 27

Accepted Solution

by:
David-Howard earned 2000 total points
ID: 24436018
There's some good information on this virus here.
http://www.ca.com/us/securityadvisor/virusinfo/virus.aspx?id=77600
It is also known as:  W32.Waledac (Symantec), Trojan:Win32/Waledac.D (MS OneCare).
You might try scanning with either of those virus suites in Safe Mode. If you don't have either of those suites AVG may be able to remove it.
It's free and available from:
http://free.avg.com/
Symantec's removal instructions can be located here.
http://www.symantec.com/security_response/writeup.jsp?docid=2008-122308-1429-99&tabid=3


0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 6

Author Closing Comment

by:dwaynecharrington
ID: 31582977
Thank you for the information. AVG did not remove it, and neither did Avast! either. The only software that detected it was Privx for some reason, it was worth the investment.

Thank you for your help though.
0
 
LVL 6

Expert Comment

by:collins23
ID: 25342426
HI I had a problem with the zconnect virus. I took your advice, downloaded and run combofix. Please take a look at my log and advise accordingly.
ComboFix.txt
0
 
LVL 6

Author Comment

by:dwaynecharrington
ID: 25342443
I got rid of the z-connect virus by using Privx. It removed it when nothing else would.
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

An introduction to the wonderful sport of Scam Baiting.  Learn how to help fight scammers by beating them at their own game. This great pass time helps the world, while providing an endless source of entertainment. Enjoy!
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
In this video, viewers will be given step by step instructions on adjusting mouse, pointer and cursor visibility in Microsoft Windows 10. The video seeks to educate those who are struggling with the new Windows 10 Graphical User Interface. Change Cu…

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question