Avast WEBforum

Other => Viruses and worms => Topic started by: Yabollek on December 27, 2012, 10:17:47 PM

Title: New Weelsof??
Post by: Yabollek on December 27, 2012, 10:17:47 PM
Avast  v. 7.0.1714 virus def. 121227-1 not found Weelsof virus.
Why??

My computer was blocked in this virus, and I remove it ComboFix 12-12-27.03
From 2 days was noting to be installed, only use webbrowser (firefox) with flash, and avast was on autoupdate virus definitions.


CombiFix log as attachment.
Title: Re: New Weelsof??
Post by: Pondus on December 27, 2012, 10:21:57 PM
Quote
Avast  v. 7.0.1714 virus def. 121227-1 not found Weelsof virus.
Why??
No security program have 100% detection.....

how did you find it....what detected it?



detected here
https://www.virustotal.com/file/838f622b259c7432fddaefb892d3ae7829a0904dc54c5f3da706722336e373b1/analysis/
https://www.virustotal.com/file/1e9dbe482c8e9f98d589f52afed03d41e4dde11d483fdf5408f1d7c5d434a9cf/analysis/
https://www.virustotal.com/file/0ce59c20ebc2289e32b3f11d587f67a65c9038288b94e9d7d3988800422ee1cf/analysis/
https://www.virustotal.com/file/135db93b63cf028d0ec408ea47bd4fe8f4cab25130dd3e42494a6c15d99b1bee/analysis/



Title: Re: New Weelsof??
Post by: Yabollek on December 27, 2012, 10:32:14 PM
how did you find it....what detected it?

After turning on my computer is locked (only display window with data for ukash transfer)
Screen like this: http://img62.imageshack.us/img62/3091/screendrz.png (http://img62.imageshack.us/img62/3091/screendrz.png)

Quick search on google and found the program to remove the malware / virus.

This program is: ComboFix 12-12-27.03 (surprisingly a new version by looking at the version)
Title: Re: New Weelsof??
Post by: Pondus on December 27, 2012, 10:37:40 PM
if you need help removing it, follow this guide and attach the logs

http://forum.avast.com/index.php?topic=53253.0

AdwCleaner
Malwarebytes
OTL
aswMBR


when done a removal specialist will be notified and help you