I was visiting another forum and someone posted about a new virus that's going around called XPA, here is the tibit from the forum I visit.
XPA IS NOT on McAffee's list! Beware of this.
Basically what this program does is it normally associates itself with high traffic sites where there are video or audio downloads. It then appears as a pop-up that resembles an error warning such as: "You need to download (insert activex control here) to view or listen to this file"
DO NOT under any circumstances, click on the download button! If perchance you do, it will then download a self extracting executable file into your REGISTRY. It will then sneak it's way into your networking configuration files and your email clients, replicates itself as an attachment, and then starts sending encrypted packets of information back to the source page that it originated from.
How to know if you are infected: A warning message will pop up from your task bar every 45 seconds saying that you need to download a new uppdate to security software. It will also self install two icons on your desktop that resemble the Microsoft Security shield. DO NOT CLICK THESE ICONS! They are direct links to a server that will begin uploading information from your computer (Identity theft issue!).
This trojan will also self install a "Security toolbar" That will appear as a bargraph that will ALWYAS show your security level as 40% or lower. *The current appearance on the toolbar will say Version 7.1* This new toolbar will also have the same links as the desktop icon.
How to remove: McAffee and Norton DO NOT PICK THIS UP AT THIS TIME, no matter how many times you scan or update them... Reports have been filed with them recently so they should be updating their watch lists soon.
Spyware doctor was the only service that found this program for me, and even THAT took 4 hours to find it. You MUST scan ALL Files including hidden and secure Registry files, because this program changes the location in which it embeds itself each time it infects another machine.
So just be aware of this for future reference, this sounds like an evil son of a bitch.
