Re: info on vrvagld*.*
- From: "David H. Lipman" <DLipman~nospam~@Verizon.Net>
- Date: Sun, 10 Feb 2008 13:00:45 -0500
From: "V Green" <vanceg@xxxxxxxxxxx>
< snip >
|
| Oh, my. More nit picking.
|
| Have you ever actually experienced this miserable SOB?
Since it first cane out. I even wrote a utility for it but Atri's utility is better.
I have wathing this tRojan ant morphed version for quite some time.
|
| I have, and I can tell you that is is FAR more invasive and
| difficult to remove than any virus I have encountered. A/V packages
| all SAW it, but did little to stop it, simply informing me that it
| was there. Even VundoFix didn't get it all, but the forum board
| there contained enough info for me to remove it manually.
You got a newer variant. It now can use RootKit and other techniques to hide as well as
peer utilities to keep itself on the OS as aself preservation technique.
| It came in via a Java applet that's used by almost everybody on
| eBay to do a "slide show" of images of the stuff they're selling.
| Sun has since patched the JVM to fix this but the sheer numbers
| of folk who use eBay would cause this "insignificant" (in your opinion)
| thing to spread in such a manner that it likely wound up on as many machines
| (or more) as any self-respecting "significant" virus.
|
Yeah. I know all about the infection vector using Java exploitation.
--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
.
- References:
- info on vrvagld*.*
- From: rookieatit@xxxxxxxxxxx
- Re: info on vrvagld*.*
- From: V Green
- Re: info on vrvagld*.*
- From: David H. Lipman
- Re: info on vrvagld*.*
- From: V Green
- Re: info on vrvagld*.*
- From: David H. Lipman
- Re: info on vrvagld*.*
- From: V Green
- info on vrvagld*.*
- Prev by Date: Re: DEFRAG paused for Volume Shadow Copy
- Next by Date: Re: move to new pc
- Previous by thread: Re: info on vrvagld*.*
- Next by thread: JAVA programs ... How many do I need?
- Index(es):
Relevant Pages
|