Warning: been hit hard by a new VX2 trojan

[GeorgeTH]

Originally posted by Linkster
Do you have the VX2 removal tool from AdAware? its a little plugin that you can run or you can go and get a separate program called VX2Cleaner from lavasoft.

That was among the dozen (or so) programs recommended on one board, I installed it, but it didn't clean my thing very well - at least I still had many symptons afterwards...
Other programs: stinger.exe, evido, spysubtract, and 2 little tools I found useful: dsostop (my Spybot finds dso exploits on an almost daily basis) and htastop (to prevent outgoing leak).

This piece of shit was absolutely malicious: Zonealarm blocked the mshta (and came up with a warning), so soon after I had this "official looking warning" pop-up in the middle of the screen with an alert along the lines of
"Microsoft Alert: your Microsoft Firewall is detecting suspicious activities. Click here to upgrade your firewall" -
bad luck that in my case I have MS firewall disabled so I knew this message was bogus. No 2 minutes later I get one of these grey bubbles pop-up at the taskbar, saying something like
"Microsoft Warning: your virus protection is not up to date (or was it: not working properly?) - Click here to upgrade" -
I'm sure that virus was really trying hard to open my ports, and the upgrades wouldn't have been anything but some script to crack the firewall...