Problems with a trojan.

Help and Discussion

Moderator: The Mod Squad

Problems with a trojan.

Postby Siyico » Mon Feb 22, 2010 8:13 am

Hey guys.

My main pc (the one in my room) is unaccessible. One day i was just watching a film and i got a loads of windows opened, so my first reaction was to unplug my internet.

As soon as i did that i got thousands of errors saying 'Avira anti virus has encountered an error' I don't use avira and have never downloaded avira. They keep opening and opening. I then opened task manager and went into processes and it keeps opening Explorer.exe LOADS of times, like 209 times.

This makes my pc unaccessible in normal mode. I tried scanning in safe mode with avast! but nothing happened when the virus was found. cannot delete or move to chest.

The virus is called VBS:AGENT-CM[TRJ] If anyone could help i'd very much appreciate it.

Thanks a bunch.
Siyico
Initiate
Initiate
 
Posts: 79
Joined: Sat Mar 28, 2009 5:13 am

Postby Karlsweldt » Mon Feb 22, 2010 1:07 pm

Looks like you are in the stew pot!
About the only way to sanitize the drive is to wipe it, by deleting any partitions, shut down and start over. But you will loose all data.
You could slave the drive in another system that has a good anti-virus program, to clean it up. But you still may loose a lot of data. Virus strains love executable files.. and infest them!
McAfee has a "Stinger" program that works well on infected systems, and you may have some luck with it.. http://vil.nai.com/vil/stinger/

Be very wary of any pop-up ads that want you to try or DL programs. Even clicking on the "X" to close the window will bring the grunge into your system! Use the task bar tab for the window, close it from there. But there still are those programs that load into your system without your knowledge.. in the form of tattle cookies that bring in bits frequently, then when all the bits are in, the battle starts! Not all sites are safe. Use Firefox as your default browser, which blocks most pop-up windows by default.
F@H.. to solve mankind's maladies.. in our lifetimes!
Karlsweldt
Mobo-fu Master
Mobo-fu Master
 
Posts: 20660
Joined: Wed Nov 12, 2003 11:57 am
Location: 07438

Postby evasive » Mon Feb 22, 2010 1:23 pm

http://download.bleepingcomputer.com/ma ... -setup.exe

use that to get rid of it. This thing consists of a vbs script that is run on startup and a .com file somewhere on your system.
We hate rut, but we fear change.
********************************
System error, strike any user to continue...
evasive
Mobo-fu Master
Mobo-fu Master
 
Posts: 37389
Joined: Sun May 06, 2001 12:01 am
Location: Netherlands

Postby angelabrookss » Mon Sep 06, 2010 12:39 pm

Use Firefox as your default browser, which blocks most pop-up windows by default.
angelabrookss
Pilgrim
Pilgrim
 
Posts: 2
Joined: Wed Sep 01, 2010 12:54 pm

Postby fussnfeathers » Mon Sep 06, 2010 3:49 pm

That wouldn't have done a dang thing for this problem. He had scareware installed that needed to be removed. It'd do it on any browser you could think of, and if he did manage to block the popups, he'd have a nice trojan sitting there being ignored.
Faster than the speed of snot

Two wrongs don't make it right, but I sleep pretty good at night
fussnfeathers
Mobo-fu Master
Mobo-fu Master
 
Posts: 3147
Joined: Thu Dec 04, 2008 8:25 pm
Location: Right behind you

Postby pbailey » Tue Sep 07, 2010 10:10 am

Malwarebytes will fix this in safe mode.

I use this on a daily bases.

Use safemode with networking and update it first befor you do a FULL SCAN.
The day you stop learning, is the day you die!

Paul
pbailey
Black Belt 1st Degree
Black Belt 1st Degree
 
Posts: 1174
Joined: Tue Mar 26, 2002 12:00 am
Location: KC MO

Malwarebytes and Avg are a good team

Postby braydenalex » Sat May 14, 2011 11:45 am

I use bought Malwarebytes and AVG free and bought of them are very good , I recommend and install bought applications to all my clients and they are allot more protected now.
braydenalex
Pilgrim
Pilgrim
 
Posts: 7
Joined: Sat May 14, 2011 11:16 am


Return to Virus/Spyware/Security

Who is online

Users browsing this forum: No registered users and 0 guests