ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
wdmdaud.sys new virus/spyware
frank


Joined: 12 Jan 2009
Posts: 1
Reply with quote
I had today a virus/spyware that kept connecting my browsers (internet explorer, firefox, opera) to 7.7.7.0 before opening google.com
I pinged 7.7.7.0, it came with no reply.
Other than that it also gave me strange search results in google.com on top such as -find.com
Solution was very easy:

Delete:
Code:

 C:\\Windows\\System32\\wdmaud.sys
 C:\\Windows\\System32\\_000267_.TMP.DLL
 C:\\Windows\\System32\\29841579.SYS


I'm not sure everything is removed now, but this problem is gone.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4376
Location: USA
Reply with quote
Sounds like you got some adware (at least)! You might want to use a dedicated spyware program with Clamwin. There are several decent free ones around, and the Windows Defender program from Microsoft scans in real-time.

If ClamWin doesn't detect an infected file, you should send it to them so they can get a signature for it. The location of the Clam submission page is shown on the ClamWin Anti-Malware page.

Regards,
View user's profileSend private message
wdmdaud.sys new virus/spyware
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic