[Badger Bob]

I'm currently dealing with a nasty Trojan on my daughter's laptop

Get all kind of pop-ups from Advanced Virus Remover. I get all kinds of pop-ups like the one below:





It disables Task Manager and Symantec Anti-Virus. Gets into the Registry files. I used Malwarebytes and was able to get into Task Manager after deleting some infected files. But Malawarebytes told me to restart and when I did, it came back. I'm in the process of trying to run Malwarebytes again, but this time, I'm going to try and find the executable files and get rid of it.


This thing is ticking me off.

[robitaille]

Badger Bob, on Jan 26 2010, 04:41 PM, said:

I'm currently dealing with a nasty Trojan on my daughter's laptop

I put that Trojan on your daughter.

Uhhh... I mean...

Sorry, was that not "PC"?

[Badger Bob]

robitaille, on Jan 26 2010, 07:54 PM, said:

I put that Trojan on your daughter.

Uhhh... I mean...

Sorry, was that not "PC"?

I should have known better.

[robitaille]

Badger Bob, on Jan 26 2010, 05:07 PM, said:

I should have known better.

[FanSince74]

Badger Bob, on Jan 26 2010, 08:07 PM, said:

I should have known better.

Yes you should have.

Virii info

Looks like someone opened up attachments on their email. shame shame. Plus there are other wormies on there that are attacking the registry. You can try the info on the site, or worst case scenerio, get out the restore discs and start from stratch. You may have to do that, a lot of these worms dig into the dll files and just fubar everything.

Once you get it up and running, trash all of your antivirus stuff, yes the big name ones, and get thee AVG. It is free, grab it online and better that all the high priced bloated software out there.

HTH BB

[Badger Bob]

I think I cleaned it off, including the Registry. Doing a virus scan now. Hopefully this works.

[FanSince74]

Badger Bob, on Jan 26 2010, 09:44 PM, said:

I think I cleaned it off, including the Registry. Doing a virus scan now. Hopefully this works.

I consulted my guru at work and he said one of those trojans snag your credit card numbers off of the hard drive. He also said WTF did she do to the computer??

BTW, what program was that image from?

Edit:

Did my own research looks like that Advanced Virus Remover is another trojan

Trojan you got

[Badger Bob]

FanSince74, on Jan 26 2010, 10:09 PM, said:

I consulted my guru at work and he said one of those trojans snag your credit card numbers off of the hard drive. He also said WTF did she do to the computer??

BTW, what program was that image from?

It goes by two names, Internet Security 2010 and Advanced Virus Remover. Same source. She had the first one.

Here's some info:

http://ezinearticles.com/?Internet-Securit...&id=3446301

[Robert Goulet]

ATTN: Badger Bob

[Badger Bob]

ATTN: Goulet
































I luv you man!

And you know what that means!!!

[Astro_Mikey]

I use ESET Smart Security 4. Before that, I used ESET's NOD32 Antivirus (various versions since 2000).
Smart Security 4 is a firewall and antivirus built in together. Jim Rome's show is now "pimping" ESET, so you get a discount with the promo code "ROME".

Great virus/malware removal tools:
SpyBot - Search and Destroy
MalwareBytes
HijackThis - WARNING - use this at your own risk as it does alter your registry keys. I am not responsible if you screw up your registry.




As for computer builds:


Personal Computer
Name = "Starfire"
Born = Early 2007

Processor, motherboard, and fan:
AMD Athlon 64 X2 4800+ Toledo 2.4GHz Socket 939 Processor
ASUS A8N32-SLI Deluxe Socket 939 NVIDIA nForce4 SLI X16 ATX AMD Motherboard
ZALMAN CNPS7700-CU 120mm 2 Ball Cooling Fan

RAM:
2 x CORSAIR XMS 2GB (2 x 1GB) 184-Pin DDR SDRAM DDR 400 (PC 3200) ECC Registered Dual Channel Kit Server Memory
- Total of 4 GB of RAM -

Video Card:
1 x ATI x1900XTX (512 MB)

Hard drives:
2 x Western Digital Raptor WD740ADFD 74GB 10,000 RPM Serial ATA150 Hard Drive
2 x Seagate Barracuda 7200.10 ST3320620AS (Perpendicular Recording Technology) 320GB 7200 RPM SATA 3.0Gb/s Hard Drive
- The Barracuda drives are in a RAID setup -

Audio:
Sound Blaster 7.1 Audigy 2 ZS Gamer edition

Optical drives:
2 x LITE-ON 16X DVD±R DVD Burner With LightScribe and 5X DVD-RAM Write Black ATAPI/E-IDE Model SHM-165H6S

Floppy Drives:
1 x Generic floppy
- I've had this floppy drive since my first computer -

Case:
APEVIA X-Superalien ATXA6SW-BL/500 Blue Aluminum Server Computer Case
1,000W power supply


----

Laptop
Sony Vaio VGN-AR630E
Name = "Shadow"
Born = Early 2009

Hardware

* Camera : Built-in 1.3 megapixel MOTION EYE® camera and microphone
* Keyboard : QWERTY, 86 keys with 2.5mm stroke and 19.05mm pitch
* Pointing Device : Electro-Static touch pad

Expansion Slots

* Multimedia Card Reader : Supports Memory Stick® and Memory Stick DUO™ media5 with MagicGate® functionality and Secure Digital Media (SD) One PCMCIA - Type II/Type I card slot with CardBus support One ExpressCard® /54 Slot

Graphics

* Processor : NVIDIA® GeForce® 8400M GT Graphics Processing Unit
* Video RAM : 256MB Dedicated Video Memory

Software

* Internet Services : AOL® 90-Day Risk Free Trial - New Users Only
* Operating System : Windows Vista® Home Premium
* Security and Anti-Virus Software : Norton 360™ All-In-One Security 60-day Trial
* Sony® Software : Click to DVD® - DVD Creation, LocationFree® Player *Please access VAIO® Help and Support from your PC for a complete list of software applications and trials.
* Supplied Software : Microsoft® Works SE 9.0 w/ 60-Day Trial Version of Microsoft® Office Home and Student 200713

Memory

* Installed : 2GB (1GBx2) PC2-5300
* Maximum : 4GB10
* Speed : 667MHZ
* Type : DDR2 SDRAM

Weights and Measurements

* Dimensions (Approx.) : 16.4"(W) x 1.32"(H) x 11.8"(D)16
* Weight (Approx.) : 8.1 lbs. with standard battery16

Networking/Modem

* Ethernet Protocol : Fast Ethernet (RJ-45)
* Ethernet Speed : 10Base-T/100Base-TX/1000Base-T
* Modem Type : Integrated V.92/V.90 Modem with (RJ-11)
* Wireless LAN : Intel® PRO/Wireless 4965AGN Network Connection (802.11a/b/g/n)3

Display

* Resolution : 1440x900
* Screen Size : 17"8
* Screen or Display Technology : WXGA+
* XBRITE-ECO™ Technology : Yes

Optical Drive

* BD-R DL Read : 1.6x max
* BD-R Read : 2x max
* BD-RE DL Read : 1.6x max
* BD-RE Read : 2x max
* Blu-ray Disc™ Support : Yes15 (BD-ROM)
* CD Read : 24x max.
* CD-R Write : 24x max.
* CD-RW Write : 16x max.
* DVD Read : 8x max.
* DVD+R DL Write : 4x max.
* DVD+R Write : 8x max.
* DVD+RW Write : 8x max.
* DVD-R DL Write : 4x max.
* DVD-R Write : 8x max.
* DVD-RAM Read : 5x max.
* DVD-RAM Write : 5x max.
* DVD-RW Write : 6x max.
* DVD±RW : Yes4

Hard Drive

* Capacity : 320GB (160GB x2) Capacity : 1TB (500GB x2)
* Interface : Serial ATA
* Speed : 5400rpm Speed : 7400rpm

Power

* Battery Type : Standard Capacity Battery (VGP-BPS9/
* Estimated Battery Life : 1.5 to 3.5 hours7 with standard battery
* Power Requirements : 150W=10%

Audio

* Sound System : Sony® Sound Reality™ - Audio Enhancer

Processor

* Front Side Bus Speed : 800MHz
* L2 Cache : 2MB Advanced Smart Cache
* Speed : 2GHz1
* Technology : Intel® Centrino® Duo processor technology
* Type : Intel® Core™2 Duo Processor T7250

Inputs and Outputs

* DC-In : 1
* Ethernet Connection(s) : 1
* HDMI™ Connection Output(s) : 1
* Headphone Jack : 1
* Microphone Input : 1
* Modem Jack : 1
* S-Video Output(s) : 1
* S/PDIF Output(s) : 1
* USB Port(s) : 3 (2.0 compliant)
* VGA Output(s) : 1
* i.LINK® Interface : 1 (4pin) i.LINK® connector (IEEE 1394)6

---


I need to get around to upgrading the PC. She's getting a little long in the tooth. She NEEDS water cooling, an SLI setup on the video card (looking for 2x1GB), and some more fans. Other than that, she's running strong as always. The lappy is my mobile power house.

I love my technology.

[FanSince74]

66dvlbrd68, on Jan 27 2010, 01:36 AM, said:

1 x Generic floppy
- I've had this floppy drive since my first computer -

Don't tell me, an old "B" drive floppy??

[billvill]

FanSince74, on Jan 27 2010, 09:26 AM, said:

Don't tell me, an old "B" drive floppy??

When 'floppy' really meant floppy!

[Badger Bob]

66dvlbrd68, on Jan 27 2010, 01:36 AM, said:

I use ESET Smart Security 4. Before that, I used ESET's NOD32 Antivirus (various versions since 2000).
Smart Security 4 is a firewall and antivirus built in together. Jim Rome's show is now "pimping" ESET, so you get a discount with the promo code "ROME".

Great virus/malware removal tools:
SpyBot - Search and Destroy
MalwareBytes
HijackThis - WARNING - use this at your own risk as it does alter your registry keys. I am not responsible if you screw up your registry.

Ad-Aware is good to have too. You gotta run all this stuff weekly or more often the way the damn Net is these days.


And now I know who to talk to when I build my own machine.



BTW, that stupid thing is still not cleaned off of my daughter's machine. Gotta work on it again tonight. Dang thing replicates when you reboot. It's a real bear. I'm going to try to search with MalwareBytes again, but I think I've got to get an update downloaded to that machine with the latest detection info and quarantine steps.

[billvill]

Badger Bob, on Jan 27 2010, 09:38 AM, said:

Ad-Aware is good to have too. You gotta run all this stuff weekly or more often the way the damn Net is these days.


And now I know who to talke to when I build my own machine.



BTW, that stupid thing is still not cleaned off of my daughter's machine. Gotta work on it again tonight. Dang thing replicates when you reboot. It's a real bear. I'm going to try to search with MalwareBytes again, but I think I've got to get an update downloaded to that machine with the latest detection info and quarantine steps.

Bite the bullet, spend the $75 and take it to a pro. Your time's gotta be worth more than fooling with that thing. BTW, I would have done what you did, until I got frustrated enough to take it to somebody.

[Badger Bob]

billvill, on Jan 27 2010, 09:41 AM, said:

Bite the bullet, spend the $75 and take it to a pro. Your time's gotta be worth more than fooling with that thing. BTW, I would have done what you did, until I got frustrated enough to take it to somebody.

I like the challenge bv. I've had pretty good luck fixing this kind of stuff myself, although this is a nasty one.

[billvill]

Badger Bob, on Jan 27 2010, 09:45 AM, said:

I like the challenge bv. I've had pretty good luck fixing this kind of stuff myself, although this is a nasty one.

My experience is that I used to have very good success fixing that kind of stuff, up until Win2000. XP and later gave me fits. Not sure what went on with the architecture, but something changed drastically.

[Hankey]

My work beast...





And my home machine...

[billvill]

Hankey, on Jan 27 2010, 10:27 AM, said:

My work beast...

I don't know if that's a computer or some sort of odd art deco furniture.

[21st Century Schizoid Man]

It looks like the sort of computer Hank would have. The people at work know him well.