http ://security-updater.com

Viruses and worms
1

Hallo,
I have a virus, spyware, script … ? that try to open a web page on http ://security-updater.com. It create .htm file in c:\windows\temp. The web page contain a white “Textbox” with unreadable text.
Avast 4 home edition is runing on my PC and up-to-date but show nothing. Sometimes Avast bock the acces to the website.

Have you an idee about what infect my computer?

Thank you

2

It is malware possibly a smitfraud or CWS type but I will need a tad more data on this. Mayhap a HJT log. And could you please break the hyperlink by adding an extra space after the http

3

Think you for your ansewer. What is a HJT log ?
I have install SpyDoctor. It finded a hidden prosses “fkozaqitmu.exe”. I have to reboot my PC for SpyDoctor delete the file. I test this and say you more after.

Thanks

4

Check this Polonus’ guide: http://forum.avast.com/index.php?topic=22069.msg183507#msg183507

Download: http://www.spywareinfo.com/~merijn/files/hijackthis.zip
Tutorial: http://www.tomcoyote.org/hjt/#introduction
Online analysis of your Hijackthis log: http://hijackthis.de/index.php

Ignore any references to 023 entries for avast, this is a bug in the HJT 1.99.1, this has been mentioned many times in previous threads.

5

Thanks to all,
It seems that SpyDoctor has finded the infected file and deleted it. I don’t have had new web page this afternoon. If the problem came one more time I write it hier.

Thanks