Software

Ask something
Question Locked

Adware.Badaz

0 helpful
4 replies

by mahoney.david

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I need to know anything that anyone has on:
Adware.badaz
adbaaz[1].html
badaz[1].html

The software seems to affect WDAP files under the Local Service Account in XP. I am having intermittent success with removing these.

4 replies

by desktop veteran

I too have been fighting this "Adware". Searches on Symantec, Trend Micro and Avast have yeilded nothing. It does not seem to be malicious, but rather just an annouance....for now. We now have some 200 machines reporting this infection.

An interesting note is that machines that have not been affected do NOT have a folder called C:\Documents and Settings\LocalService , in fact until now I have never seen this folder on XP before.

Symantec detects it, but says Access Denied when it tries to quarantine or delete.

by dumphrey

and include sysinternals autoruns as an oem program. Scan an delete from the live cd thus created. Also may want to do a dir and compare (i output dir to text on each and use fc and output this to text to make it easier to read)against a known good system of the system32 folder and check any differences reported. Autoruns is used to "sleep" infected files befor a mass delete to prevent child spawning from watchguard processes.

This discussion is closed to new replies.