a problem: /log2.soft.cn.yahoo.com/cnsmin/_coop/cn

in some posts i see this text
"< ="http://log2.soft.cn.yahoo.com/cnsmin/_coop/cnsminex_empty.htm?sc=ystat" style="display: none;" height="0" width="0">"

i searched it on google and i saw some sites have this problem
when i push the Tab key this text appears in post

Hi,
 
I got the same problem although it's a little more complicated.
When I try to connect to a random site it starts downloading content from log2.soft.cn.yahoo.com/csmin/_coop as well.
Virusscanner reported it as VBS.Psyme and tells me it removed it every 10 secondes.
The bigger problem is that the virus is spreading in an alarming rate.
It spread through our network (10-20 computers) in about 15 minutes and I'm getting reports of people someone else who seem to have the same problem.
Every virusscanner reports it as some sort of Trojan downloader (with different names) but all fail to remove it. Could anyone give me some advice here before the virus spreads too far?
I removed all temporary files with the help of a program called DSS.exe but it failed. The virus appears to be a jscript trojan or something.
 
Thanks
 




Edited by WebWiz-Bruce - 21 July 2008 at 8:52am

Since I aint got Symatec antivirus solutions I only tried the 4th step.. but I failed to locate the registry key since it isnt there.

Edited by WebWiz-Bruce - 21 July 2008 at 8:53am

It does appear that your computer is infected with a virus Zwaf.

Each time you post it attempts to inject code into your forum posts to try and spread the virus to other computers through their web browser when they read your post.

Luckily Web Wiz Forums is very well protected against malicious code injections, so all, the harmful stuff is stripped out just leaving a plain text link.