bloodhound.pdf.13
Updated: 23 May 2010 | 6 comments
following the removal instructions (to the letter) on the symantec website has no effect. all day long i get popups from endpoint indicating bloodhound.pdf.13 and that it quarantines. i've resorted to safe booting and deleting everything in the user/appdata/local/temp folder, but i need to do that at least daily. this is a vista machine and i use firefox almost exclusively. i can't find a lot of information about this particular bug - does anyone have any insight?
Discussion Filed Under:
Comments
The following Link may help
The following Link may help you-
http://www.symantec.com/security_response/writeup.jsp?docid=2009-060801-0433-99&tabid=1
@jmadiwale: he's already
@jmadiwale: he's already saying that following the instructions is not helping him. Please read the post carefully before commenting !
@enginekeg: I recommend that you try to run HijackThis and remove this threat since it's so persistent. If you have to end up cleaning it everyday, it means that it's resident in the system someplace else, or maybe in a BHO (Browser Helper Object) / Addon.
Abhishek Pradhan, PMP, MCT
Consultant | Microsoft Corp.
Blog: http://blog.abhishekpradhan.net | SIG Lead - Pune IT Pro (Microsoft Pune User Group) | http://www.puneusergroup.org
On the Client Go to
On the Client Go to http://www.symantec.com/avcenter/rapidrelease.download.html and download symrapidreleasedefsv5i32.exe
Now run a full scan on the machine in safe mode.
If it cleans the file its OK
Else run Load Point Diagnostic and submitt the suspected file to Symantec Security Response
Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)
Common loading points for
Common loading points for viruses, worms, and Trojan horse programs on Windows NT/2000/XP/2003 -
http://service1.symantec.com/SUPPORT/ent-security....
@enginegek: are you connected
@enginegek: are you connected to a private network?
did you check also in safe mode your list of startup programs??
can you provide the screenshots of your startup programs?
you can view these programs by using msconfig, going to the startup list tab...
will try your suggestions
thanks you all for your suggestions. I will start with the symrappidrelease file and take it from there. I'll post back. again, thank you.
Would you like to reply?
Login or Register to post your comment.