Attack of the Trojans.
Moderator: Zulus Thousand of em
- TANGODANCER
- Immortal
- Posts: 44175
- Joined: Fri Sep 02, 2005 9:35 pm
- Location: Between the Bible, Regency and the Rubaiyat and forever trying to light penny candles from stars.
Attack of the Trojans.
Managed to get myself two Trojan virusus installed in my relatively new pc. Almost sure it came in on a corrupted "Limewire" link. I'm being bombarded with pop-up crap despite instaling Ad-Aware, Spybot, AOL spyware, McCafee Personal and a downloaded McCafee firewall. Looks like I'm going to have to re-format the whole damn thing. I'm also hearing other people claiming virus problems all over the place. The aliens are getting cleverer by the day. Beware.
Si Deus pro nobis, quis contra nos?
-
- Reliable
- Posts: 515
- Joined: Mon Oct 25, 2004 6:24 pm
- Location: Cleckheaton
-
- Legend
- Posts: 7192
- Joined: Fri Jun 03, 2005 12:31 pm
- Location: London
I've had my Mac for a year and half now, and the bastards haven't found their way in once.
Prufrock wrote: Like money hasn't always talked. You might not like it, or disagree, but it's the truth. It's a basic incentive, people always have, and always will want what's best for themselves and their families
-
- Henrik
- Posts: 805
- Joined: Fri Jun 30, 2006 12:16 pm
- Location: Wiggin (help!)
- TANGODANCER
- Immortal
- Posts: 44175
- Joined: Fri Sep 02, 2005 9:35 pm
- Location: Between the Bible, Regency and the Rubaiyat and forever trying to light penny candles from stars.
They are both of the Trojan variety, classed as critical by McCafee and seem to hide themselves in program files. McCaffe has got them both to date but I still get pop-ups.CAPSLOCK wrote:DO YOU USE FIREFOX?
I'D DUMP MCAFEE TOO AND USE THE FREE AVG
ALSO, WHAT ARE THESE BEASTIES THAT YOU HAVE?
Si Deus pro nobis, quis contra nos?
-
- Legend
- Posts: 7404
- Joined: Wed Sep 28, 2005 9:08 pm
- Location: in your wife's dreams
- Contact:
- TANGODANCER
- Immortal
- Posts: 44175
- Joined: Fri Sep 02, 2005 9:35 pm
- Location: Between the Bible, Regency and the Rubaiyat and forever trying to light penny candles from stars.
I did try blocking the beasties but the damage is done with something in hiding. My son knows computers and reckons formating is the only answer.communistworkethic wrote:do you have a pop-up blocker TD? I use Norton Security and that's proved pretty darned effective
Si Deus pro nobis, quis contra nos?
-
- Legend
- Posts: 7192
- Joined: Fri Jun 03, 2005 12:31 pm
- Location: London
Yeah, I use it when I'm not at uni. As I say, I don't think anything has found its way in so far.keveh wrote:Limewire?
Oh jesus, do people still trust this?!
Prufrock wrote: Like money hasn't always talked. You might not like it, or disagree, but it's the truth. It's a basic incentive, people always have, and always will want what's best for themselves and their families
- Montreal Wanderer
- Immortal
- Posts: 12948
- Joined: Thu May 26, 2005 12:45 am
- Location: Montreal, Canada
So save your data disks and reformat. If you still have problems blame your son!TANGODANCER wrote:I did try blocking the beasties but the damage is done with something in hiding. My son knows computers and reckons formating is the only answer.communistworkethic wrote:do you have a pop-up blocker TD? I use Norton Security and that's proved pretty darned effective

"If you cannot answer a man's argument, all it not lost; you can still call him vile names. " Elbert Hubbard.
- TANGODANCER
- Immortal
- Posts: 44175
- Joined: Fri Sep 02, 2005 9:35 pm
- Location: Between the Bible, Regency and the Rubaiyat and forever trying to light penny candles from stars.
Effectively, it's a good site for free music downloads. I think also it's pot luck when you install it. It even recognises its own corrupt version which, by then, is too late. A lot depends on you firewalls and I only had the version of McCafee you get with Windows XP. I now have the bought vesion but, as I said, the damage is done.keveh wrote:Limewire?
Oh jesus, do people still trust this?!
Si Deus pro nobis, quis contra nos?
-
- Promising
- Posts: 253
- Joined: Wed Jul 12, 2006 11:51 am
- Location: in a queue
This sounds like something that happened to me, I located the file, then ran the ad-aware software and another virus checker it found the file deleted it. Then within 30 seconds the virus had re-installed. I used the AVG in the end which Caps suggested. But the best protection i ever got was a Microsoft ripped (whatever that means) CD which haas protected against everything. I'l get back to you tomorrow with the proper name.TANGODANCER wrote:I did try blocking the beasties but the damage is done with something in hiding. My son knows computers and reckons formating is the only answer.communistworkethic wrote:do you have a pop-up blocker TD? I use Norton Security and that's proved pretty darned effective
Stay up
this is a good program- spybot search and destroy
http://en.wikipedia.org/wiki/Spybot
might sort it , watch searching for it on google though , as theres also a group of viruses by that name ..
i think the (proper) url is www.spybot.info , but theres even some hijacked/cybersqatted/typosquatted spoiler urls ..
the wikipedia page is usually 'right' though ..
it'll need updating (the virus defs etc) straight away though coz its about 18 month since the last program update ... the new defs are released/updated every week or so...
its got a IE start page 'lock'-er , an immuniser , Host file list of bad sites it blocks and other good stuff ..
if youve tried this prog already update it (update them all) these virus protection sites symantec etc usually have 'step by step' removal instructions ,
reformatting is a bit 'last resort' ...
dump IE ..
http://en.wikipedia.org/wiki/Spybot
might sort it , watch searching for it on google though , as theres also a group of viruses by that name ..
i think the (proper) url is www.spybot.info , but theres even some hijacked/cybersqatted/typosquatted spoiler urls ..
the wikipedia page is usually 'right' though ..
it'll need updating (the virus defs etc) straight away though coz its about 18 month since the last program update ... the new defs are released/updated every week or so...
its got a IE start page 'lock'-er , an immuniser , Host file list of bad sites it blocks and other good stuff ..
if youve tried this prog already update it (update them all) these virus protection sites symantec etc usually have 'step by step' removal instructions ,
reformatting is a bit 'last resort' ...
dump IE ..
- TANGODANCER
- Immortal
- Posts: 44175
- Joined: Fri Sep 02, 2005 9:35 pm
- Location: Between the Bible, Regency and the Rubaiyat and forever trying to light penny candles from stars.
Already have Spybot a1, and now Macafee and Ad-Aware and Macafee Personal, and AOL Spyware and AOL Computer check up.
"The chances of anything coming from Mars, are a million to one, he said.
The cances of anything coming from Mars, are a million to one.......... but still, they come!"
Jeff Wayne, War of the Worlds.
But I will get the little b------s. I will be as relentless as gopher-hunter Bill Murray in Caddyshack.
"The chances of anything coming from Mars, are a million to one, he said.
The cances of anything coming from Mars, are a million to one.......... but still, they come!"
Jeff Wayne, War of the Worlds.
But I will get the little b------s. I will be as relentless as gopher-hunter Bill Murray in Caddyshack.

Si Deus pro nobis, quis contra nos?
cool ..TANGODANCER wrote:Already have Spybot a1, and now Macafee and Ad-Aware and Macafee Personal, and AOL Spyware and AOL Computer check up.
"The chances of anything coming from Mars, are a million to one, he said.
The cances of anything coming from Mars, are a million to one.......... but still, they come!"
Jeff Wayne, War of the Worlds.
But I will get the little b------s. I will be as relentless as gopher-hunter Bill Murray in Caddyshack.
i assume youve took limewire off?
look thru the 'host' file in the c:\windows\system32\drivers\etc it should only have 1 line .
http://en.wikipedia.org/wiki/Hosts_file
oh, and if youre using spybot sd , check the avanced tick , and a load more menus'll show up , click the 'tools' tab , and the 'system startup' lists all the programs started when it first boots , it might be listed and 'deleteable' or 'uncheckable' , to stop the redirecting and shit that its making IE do , giving you time to sort it... its heavy shit though that page...
if i remember rightly you can now use AOL without AOL9 etc and use it with a normal *.dun dialup file , firefox and a proper email client .. i cant remember how but you can (or could) do ...
Last edited by a1 on Tue Sep 05, 2006 8:59 pm, edited 1 time in total.
- TANGODANCER
- Immortal
- Posts: 44175
- Joined: Fri Sep 02, 2005 9:35 pm
- Location: Between the Bible, Regency and the Rubaiyat and forever trying to light penny candles from stars.
Thanls a1, I'll pass all that onto my IT department.a1 wrote:cool ..TANGODANCER wrote:Already have Spybot a1, and now Macafee and Ad-Aware and Macafee Personal, and AOL Spyware and AOL Computer check up.
"The chances of anything coming from Mars, are a million to one, he said.
The cances of anything coming from Mars, are a million to one.......... but still, they come!"
Jeff Wayne, War of the Worlds.
But I will get the little b------s. I will be as relentless as gopher-hunter Bill Murray in Caddyshack.
i assume youve took limewire off?
check the 'host' file in the c:\windows\system32\drivers\etc it should only have 1 line .
http://en.wikipedia.org/wiki/Hosts_file
oh, and if youre using spybot sd , check the avanced tick , and a load more menus'll show up , click the 'tools' tab , and the 'system startup' lists all the programs started when it first boots , it might be listed and 'deleteable' or 'uncheckable' , to stop the redirecting and shit that its making IE do , giving you time to sort it... its heavy shit though that page...
if i remember rightly you can now use AOL without AOL9 etc and use it with a normal *.dun dialup file , firefox and a proper email client .. i cant remember how but you can (or could) do ...
Si Deus pro nobis, quis contra nos?
Who is online
Users browsing this forum: Bing [Bot], Google [Bot] and 16 guests