Re: Trojans Galore
- From: "David H. Lipman" <DLipman~nospam~@Verizon.Net>
- Date: Mon, 30 May 2005 15:13:53 -0400
From: "nesredep egrob" <Long. -31,48.21 Lat. 115,47.40>
| In the last few days I am getting messages from my AVG virus checker that a
| trojan has arrived. I have The AVG running and a host files which is updated
| every week in addition to running Spybot weekly and finally I am also connected
| via a D-Link Router.
|
| The amazing thing is that I can deal with something internal which has nothing
| to do with the internet and yet the trojans keep coming. The vault was emptied
| this morning and in 3 hours I have recieved 3 trojans.
|
| They arrive in Documents/Borge/Local Settings/temp and there seems to be no
| stopping them. The names are today 28537.exe, 15805.exe and 21702.exe.
|
| Fortunately they can just be emptied out of the vault and that is the finish of
| them but soon enough new ones arrive.
|
| B.Pedersen Latitude -31,48.21 Longitude115,47.40 Time=GMT+8.00
| If you are curious look here http://www.mapquest.com/maps/latlong.adp
Dump the contents of the IE Temporary Internet Folder cache (TIF)
Start --> Settings --> Control Panel --> Internet Options --> Delete Files
Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
Tools --> Options --> Privacy --> Cache --> Clear
Download CLEAN.EXE from the URL --
http://www.ik-cs.com/programs/virtools/clean.exe
It is a self-extracting ZIP file that contains the Kixtart Script Interpreter
{ http://kixtart.org Kixtart is CareWare } three batch files, two Kixtart scripts, two Link
(.lnk) files and a PDF instruction file.
GETFILES.BAT -- For downloading (FTP) the files needed to run the McAfee Command Line
Scanner. You may have to disable your FireWall or allow FTP.EXE to go through your FireWall
to allow the FTP utility to download the needed files
CLEAN.BAT -- For running within Windows after running c:\mcafee\GetFiles.BAT. If you choose
to scan again at a future date, run this batch file. It will automatically check the date
of the McAfee DAT files and if it is a couple of days old, it will download (FTP) the latest
signature files and install them before performing the scan.
DOSCLEAN.BAT -- For use on a Win9x/ME PC or on a Win2K/WinXP PC that is using FAT32 after
you have booted from an Emergency Boot Disk or DOS disk and have already executed;
c:\mcafee\GetFiles.BAT from within Windows. DOS disk boot images can be obtained from;
http://www.bootdisk.com/bootdisk.htm
I need you to perform the following...
Execute; CLEAN.EXE
Choose; Unzip
Choose; Close
Execute; c:\mcafee\GetFiles.BAT
{ or Double-click on 'GetFiles Link' in c:\mcafee }
Reboot the PC into Safe Mode [F8 key during boot]
Shutdown as many applications as possible !
It would also help for you to read - "How to perform a clean boot in Windows XP"
http://support.microsoft.com/kb/310353
Execute; c:\mcafee\CLEAN.BAT
{ or Double-click on 'Clean Link' in c:\mcafee }
A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.
It would be a good idea to scan in Safe Mode and in Normal Mode and save a copy of the HTML
report for each session.
* * * Please report back your results * * *
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
.
- Follow-Ups:
- Re: Trojans Galore
- From: Crouchie1998
- Re: Trojans Galore
- References:
- Trojans Galore
- From: nesredep egrob
- Trojans Galore
- Prev by Date: Re: Can password for folder shared be hacked
- Next by Date: folder bar not showing in explorer
- Previous by thread: Re: Trojans Galore
- Next by thread: Re: Trojans Galore
- Index(es):
Relevant Pages
|
