Solved

Z-Connect Virus Trouble

Posted on 2009-05-19
6
11,556 Views
Last Modified: 2013-11-22
I seem to have a virus or something like it, a trojan perhaps? That is making my life a living hell basically. My Internet connection is a 3G wireless broadband connection which dials up to make a connection, etc. Lately for no reason at all I seem to have acquired some nasty virus that keeps disconnecting my Internet, creating a connection called z-connect and then trying to dial it.

The strange thing is, the z-connect connection tries to dial 000 which is the emergency number for Australia (instead of 911 like the U.S).

I've scanned with Malwarebytes, AVG and Spybot Search & Destroy in safe mode to no avail. I don't wan to have to format my PC for such a trivial issue that plain bugs me.

In my c:\ directory files with weird names like this b6h8e7i9h3v2.exe keep showing up even after deleting them, same with the connection. The connection recreates itself even after I've deleted it.
0
Comment
Question by:dwaynecharrington
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 16

Expert Comment

by:warturtle
ID: 24422320
I would suggest either downloading ComboFix from : http://www.bleepingcomputer.com/combofix/how-to-use-combofix and save it as jabba.exe or with another name. Then disable your existing antivirus and run it. After ComboFix has created a log, please send that log to us and reenable your antivirus protection. Now, scan with MalwareBytes again.
0
 
LVL 16

Expert Comment

by:warturtle
ID: 24422357
Or the other option is Dr Web CureIt Live CD: http://www.freedrweb.com/livecd/ . Download the ISO file and burn it as an image on a blank CD. Boot your PC using this disk and scan for viruses. If Dr Web finds viruses, then select all and click on cure. After its done, reboot your PC in safe mode and scan with MalwareBytes again.
0
 
LVL 27

Accepted Solution

by:
David-Howard earned 500 total points
ID: 24436018
There's some good information on this virus here.
http://www.ca.com/us/securityadvisor/virusinfo/virus.aspx?id=77600
It is also known as:  W32.Waledac (Symantec), Trojan:Win32/Waledac.D (MS OneCare).
You might try scanning with either of those virus suites in Safe Mode. If you don't have either of those suites AVG may be able to remove it.
It's free and available from:
http://free.avg.com/
Symantec's removal instructions can be located here.
http://www.symantec.com/security_response/writeup.jsp?docid=2008-122308-1429-99&tabid=3


0
What Is Transaction Monitoring and who needs it?

Synthetic Transaction Monitoring that you need for the day to day, which ensures your business website keeps running optimally, and that there is no downtime to impact your customer experience.

 
LVL 6

Author Closing Comment

by:dwaynecharrington
ID: 31582977
Thank you for the information. AVG did not remove it, and neither did Avast! either. The only software that detected it was Privx for some reason, it was worth the investment.

Thank you for your help though.
0
 
LVL 6

Expert Comment

by:collins23
ID: 25342426
HI I had a problem with the zconnect virus. I took your advice, downloaded and run combofix. Please take a look at my log and advise accordingly.
ComboFix.txt
0
 
LVL 6

Author Comment

by:dwaynecharrington
ID: 25342443
I got rid of the z-connect virus by using Privx. It removed it when nothing else would.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article summaries thoughts and ideas from two years of sustained use. It provides good reasoning to make the jump to Windows 10.
An introduction to the wonderful sport of Scam Baiting.  Learn how to help fight scammers by beating them at their own game. This great pass time helps the world, while providing an endless source of entertainment. Enjoy!
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question