WDO.EXE Firefox crash, had to re-install
was on Ebay, and my antivirus programme (AVG-Free) reported a "backdoor trojan" with the name of WDO.EXE, asked if I wanted to allow or quarentine, so I chose Quarentine, but everything locked up. I waited for a while but the message about the trojan was still onscreen, everything had locked. I then Cntrl_alt_del and restarted the machine. Downloaded SAV32cli. followed those instructions, and it found nothing. Neither did Malwarebytes, or Spybot, however Microsoft Update would not work, nor would Firefox (8.01) FF brought up a Crash report, which would not send. I performed a system restore, and that sorted MS update, but not FF. I uninstalled FF, and have just Reinstalled it (9.xx). There did not appear to be anything about WDO.EXE from google, so I really dont know if this was a Trojan attack or a FF glitch, but I will no longer use this machine for Banking etc, until SOMETHING reports WDO.EXE removed (apart from me within Regedit). Wanted to contact Mozilla, to find out if anyone had heard or dealt with WDO.exe. I found a WDC.EXE, and followed instructions for that, but the lines in the registry to delete were not there, so I am happy that I wrote down the correct thing when it appeared.
被采纳的解决方案
Do a malware check with some malware scan programs. You need to scan with all programs because each program detects different malware. Make sure that you update each program to get the latest version of the database before doing a scan.
- http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
- http://www.superantispyware.com/ - SuperAntispyware
- http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page
- http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
- http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free
See also "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked and Searches are redirected to another site
定位到答案原位置 👍 0所有回复 (2)
选择的解决方案
Do a malware check with some malware scan programs. You need to scan with all programs because each program detects different malware. Make sure that you update each program to get the latest version of the database before doing a scan.
- http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
- http://www.superantispyware.com/ - SuperAntispyware
- http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page
- http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
- http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free
See also "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked and Searches are redirected to another site
Hi Thanks for reply. I downloaded the extra malware scanners, as I have already scanned with both Malwarebytes, and Spybot Search and destroy. I did not bother with Microsoft Defender, because I am sure that this only works with a Win7 system, and mine is XP-Pro. Superanitispyware, came up with tracking cookies and quarentined something called PaypalXXX.net, but have no idea what that is, and it didnt report anything as being malicious. Ad Aware....left running over night, takes AGES, however came up with 1 malicious trojan which was named Trojan_BT...Again no idea what that is, and cannot find where the quarentine area is within the programme to see excactly where it was, although, I am sure that both programmes found the malicious whatever in each others signiture bases. Nothing has come up with WDO.EXE yet, and as I am in a slow broadband country type area, all these spyware programmes "live protection" slows everything down to a grind. Will continue NOT to do banking with this machine until something is found. Incidently Apple quicktime player, did not work correctly when tried last night, with various "unable to find this that or the other" type of messages. As I have done a System restore to get things working again, I believe that I have left a virus "dormant" somewhere, but until someone knows what and where wdo.exe is and does, it is in a vulnerable position. Thanks again