I am new to the forum, however, I would appreciate any help anybody can give me. While connected to the internet, my Avast On-Access scanner notified me that “a virus was found”. The name of the virus is SDFE-ZhugeLiang-4784. It is a virus/worm. The VPS version is 0515-0, 11/04/2005. No matter what website I visited i was getting the same alarming notices
I have since scanned the machine using Avast. (Avast is completely up to date on my machine.) But nothing was found. I have also scanned the machine using Ad-aware but i found nothing there either.
I have searched for every permutation of the virus name using Google but i cannot find much useful information here either. Can anybody please advise me - is my machine infected with a virus and if so how do I remove it. If it is not infected was this a false positive or simply a case that my PC was being attacked by a worm, but Avast prevented infection. Thanks for any help you can give me.
This virus is a very old DOS virus… Dated from 1998…
Unfortunatly no antivirus web site have a description for it… It appears on each antivirus vendor website (with different names) but without description… jut the name…
Did you still receive warnings about this virus in your machine or they sttoped?
Please, tell us what is your windows version and also the path where the file is being detected (if it stills being detected)…
I use Windows XP Home (SP2 fully patched). It is up to date - it downloads updates automatically. I use Avast for anti-virus, Sygate Personal firewall, I also have a hardware firewall as well. I used the new MS Antispyware program as well. I keep all definitions up to date.
I have conducted both “Thorough” and boot-time scans using Avast - and found nothing. I have scanned using Avast, MS Antispyware, and Ewido and found nothing. I have Spybot S&D - I will scan using this as well.
The warning message only occurred when I connected to the internet - it actually occurred immediately upon connecting to a specific website. And then for the duration of the connection/session, I kept getting the same warning message each time I connected to any website. However, when I shut the PC down and came back later in the day, the warning message did not re-occur.
I would be grateful if anybody could give me an explanation as to what might have been happening. Is it still worth posting my HijackThis log?
If you are not experiencing any more problem with this virus comming up, and all the teste results show that you are clean, then problaby you dont have to worry anymore…You should be clean.
But to be sure, I believe that is better if you post your Log of hijack this, so we can see if theres any hiding malware running on your machine.
Please find below my HijackThis log. I would appreciate if somebody would have look at it and comment. Thanks in advance
Logfile of HijackThis v1.99.1
Scan saved at 20:06:53, on 14/04/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
I didnt found anything wrong with your log, I only reccomend you to fix the following itens that are auto starting with your computer, they are not needed to autostart:
Thank you Elminster for your time. I really appreciate your help.
I am only running Avast. The PC came pre-loaded with another anti-virus package, which I uninstalled. However, it appears I was not able to remove it completely.
If I could impose upon you one further time, but could you tell me how I would fix the items you have identified. Should I just use HijackThis?
