Virus Help Needed!!

Literally. Unless it Should Go Elsewhere
User avatar
Markgway
Bruce Lee's Fist
Posts: 20195
Joined: 18 Feb 2005, 02:04

Virus Help Needed!!

Post by Markgway »

EDIT: Please see bottom post, thanks.



If you go to the ADVDG you're system will be prey to Trojans.


Read this thread...
http://p081.ezboard.com/fkungfufandomfr ... 1121.topic
Last edited by Markgway on 22 Mar 2006, 02:22, edited 3 times in total.
Image
User avatar
Markgway
Bruce Lee's Fist
Posts: 20195
Joined: 18 Feb 2005, 02:04

Post by Markgway »

***Original version posted in Desktop Thread.

My Norton Anit-Virus found a Trojan... but can't repait or delete it (bloody useless).

I tried removing all my cookies and IE5 temp files; I turned off system restore and rebooted.

It hasn't come back yet... but I bet the little bastard is still lurking.

It's called XPL13.WMF (and is apparently spreading like wildfire, including via e-mail)

It was apparently triggered by the ASIAN DVD GUIDE as others have suffered too and it's upon entering that site mine flashed up.

I hope it is gone because I'm useless with this tech stuff and hate the thought of arseing about with registries and the like.

In the meantime anyone got any info/ or had similar problems?
Image
tom2681
Bruce Lee's Fist
Posts: 5577
Joined: 25 Oct 2004, 15:18
Location: Where you'll never find me

Post by tom2681 »

Weird. I just came back from there.
Did a full system scan, looked in the registry... nothing. :|

Trojans usually hide in there:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

Remember to check for unusual programs inside:
-The task manager (Ctrl+Alt+Del)
-Msconfig.
-The Services panel.
I used to be "the man who loves the movies you hate".
Now I'm just "that weird french guy with a cat avatar who comes to BnB once a year for no reason and then disappears again".
User avatar
Markgway
Bruce Lee's Fist
Posts: 20195
Joined: 18 Feb 2005, 02:04

Post by Markgway »

Looks like you've been lucky Tom.

Maybe it's been fixed -- but at least three of us regulars have been infected.

I'm gonna wait a while until the all clear is given.
Image
romerojpg
Bruce Lee's Fist
Posts: 8520
Joined: 26 Oct 2004, 13:12
Location: CLOSE TO YOUR MAMMA

Post by romerojpg »

I never visit the place so I am fine :) but its shitty anyway, childish is more like it.
EvaUnit02
Bruce Lee's Fist
Posts: 9150
Joined: 08 Feb 2005, 14:39
Location: Wellywood, Kiwiland

Post by EvaUnit02 »

Install firewall software so that you avoid shit like this in future. Having just a virus scanner ain't enough these days.
romerojpg
Bruce Lee's Fist
Posts: 8520
Joined: 26 Oct 2004, 13:12
Location: CLOSE TO YOUR MAMMA

Post by romerojpg »

Free firewalls and Virus checkers are the best anyway :D I didnt pay for mine and both my Firewall and VC are the best on the market in comparisons.
User avatar
Markgway
Bruce Lee's Fist
Posts: 20195
Joined: 18 Feb 2005, 02:04

Post by Markgway »

I have a Windows Firewall that I had to turn off ages ago because it was interfering with Norton -- I turned it back on for now see how it goes.
Image
EvaUnit02
Bruce Lee's Fist
Posts: 9150
Joined: 08 Feb 2005, 14:39
Location: Wellywood, Kiwiland

Post by EvaUnit02 »

Markgway wrote:I have a Windows Firewall that I had to turn off ages ago because it was interfering with Norton -- I turned it back on for now see how it goes.
The firewall built into XP is garbage. 3rd party is the way to go.
tom2681
Bruce Lee's Fist
Posts: 5577
Joined: 25 Oct 2004, 15:18
Location: Where you'll never find me

Post by tom2681 »

Got the fucking Trojan.
t'was hiding in the index page of the ADVDG forum.

Fighting the little bastard as I type this...

*Come here, you sonofa.....*
I used to be "the man who loves the movies you hate".
Now I'm just "that weird french guy with a cat avatar who comes to BnB once a year for no reason and then disappears again".
tom2681
Bruce Lee's Fist
Posts: 5577
Joined: 25 Oct 2004, 15:18
Location: Where you'll never find me

Post by tom2681 »

Pitiful little trojan... :(
Didn't even put up a fight. :evil:

If you're gonna be evil, do it right. :D
I used to be "the man who loves the movies you hate".
Now I'm just "that weird french guy with a cat avatar who comes to BnB once a year for no reason and then disappears again".
User avatar
thelostdragon
Bruce Lee's Fist
Posts: 7059
Joined: 29 Oct 2004, 22:36
Location: Basin City

Post by thelostdragon »

Man, I didn't even get a message from my AV program and I also don't have the Trojan. I guess it didn't hit me.
Image
User avatar
Markgway
Bruce Lee's Fist
Posts: 20195
Joined: 18 Feb 2005, 02:04

Post by Markgway »

EvaUnit02 wrote:The firewall built into XP is garbage.
How so?
Pitiful little trojan... Didn't even put up a fight.
Well it kicked my Norton's ass.... :(
Man, I didn't even get a message from my AV program and I also don't have the Trojan. I guess it didn't hit me.
That's what Tom thought at first... Be careful.
Image
bradavon
Bruce Lee's Fist
Posts: 24430
Joined: 27 Oct 2004, 19:30

Post by bradavon »

Shit happens. Do you guys remember when Bullets was attacked.
romerojpg wrote:I didnt pay for mine and both my Firewall and VC are the best on the market in comparisons.
There's no such thing. All AntiVirus, AntiSpyware and Firewalls (hardware and software) have their pros and cons.

As long as you realise that. Personally I think ZoneAlarm Internet Security is the best:

* Very powerful Firewall - Much better than Norton Personal Firewall
* Very good AntiSpyware - The AntiSpyware built into Norton AntiVirus was an after thought and is basic to say the least
* Decent AntiVirus - Norton AntiVirus was always the strongest part of Norton Internet Security. They both about the same.

It's all in one program which I much prefer and is lean unlike NIS (20Mb compared with 120Mb) which eats your system resources up. I ran it up until recently.

ZAISS is only £20 a year and for what you get I think it's a bargain.

Why would the likes of AVG and even ZoneAlarm give you the same product for free when they also provide a superior version you have to buy? Answer it's cut down and that's not good IMO when it comes to security.

But in reality most are decent.
tom2681
Bruce Lee's Fist
Posts: 5577
Joined: 25 Oct 2004, 15:18
Location: Where you'll never find me

Post by tom2681 »

I think the coast is clear now...
I used to be "the man who loves the movies you hate".
Now I'm just "that weird french guy with a cat avatar who comes to BnB once a year for no reason and then disappears again".
EvaUnit02
Bruce Lee's Fist
Posts: 9150
Joined: 08 Feb 2005, 14:39
Location: Wellywood, Kiwiland

Post by EvaUnit02 »

I use Zone Alarm Pro 6 (which includes the Anti-spyware feature) + Norton AntiVirus. Great combination IMO.
gojensen
King of Beggars
Posts: 603
Joined: 01 Nov 2004, 10:44
Location: Norway

Post by gojensen »

erm... -WMF?! Wasn't that patched months ago by Microsoft?? Oh please tell me you run Windows Update several times a week!!
So long, and thanks for all the fish!
Mordib
King of Beggars
Posts: 673
Joined: 26 Oct 2004, 12:25
Location: Irn Bru

Post by Mordib »

shhh, don't you know, its the websites fault, not the users ;)
gojensen wrote:erm... -WMF?! Wasn't that patched months ago by Microsoft?? Oh please tell me you run Windows Update several times a week!!
Image
User avatar
Markgway
Bruce Lee's Fist
Posts: 20195
Joined: 18 Feb 2005, 02:04

Post by Markgway »

Grrr.... the ADVDG site seems fine now, thankfully.

But I think I've got one spyware bugger leftover (either that or it came from someplace else...?)

Whenever I click on Blueyonder Broadband a warning from SPYBOT pops up saying that a bad URL (http://view.atdmt.com...) is trying to access my machine and download something called AVENUE A, inc.

Sorry if that doesn't make too much sense...

I've cleaned my machine and searched for shit but this pop-up keeps happening.

Any ideas how to get rid?
Image