Anyone else have these viruses

[1PW]

Hi
I just got nLite but I cannot find that Trend CD anywhere on there site,
do you have a link? thanks.

Pretend you are again ordering your own product on-line. As you check
out, you will be offered the opportunity to add a CD backup to your
order. I don't pretend to know how to make the web site believe I'm
in Australia though.

I chose Trend as we have it at work and nothing seems to get through it
(except this).

The logic of your statement above makes my brain to hurt! An inferior
Trend Micro product has failed you. But you are giving it another
opportunity to let it fail you again. I'm at a loss for words Gaz.

I didn't know any other way of doing the install and was
worried about being on the net unprotected, but now I know if I have to do
it again.
Gaz

I wonder if this whole experience will give you an opportunity to
rethink the quality of the product that you hope will protect
everything you do on the Internet? I wonder if you've thought about
the security of your computer systems at work? What would happen to
your job if all of your work's most sensitive information were to fall
into the wrong hands?

Trend Micro doesn't sell an enterprise product that even appears in
the major commercial testing arenas.

Safer solutions are available. Are you concerned now?

 

[Dustin Cook]

Hi Again
I haven't connected any pen or external drives and got a
friend to disable autorun. This virus does sit anywhere on it's own,
it infects exe files, which when cleaned, do not work anymore.

Either Trend has a bad FP issue, or you have infected media someplace which
is re-introducing virut into the system. It wouldn't be such a royal pita
if the damn thing infected files properly; but sadly it doesn't preserve
everything due to bugs in the code, and winds up damaging it's host file.

It does not live in your modem, nor your mbr. It's an exe infector that
spreads fast and causes harm to the files it infects ie: irreversible
damage as you have noticed. No cleaning option. Delete/replace is your only
choice.

Have you tried updating to the latest trend micro definitions and scanning
your system again? Try uploading some of the "infected" files to
www.virustotal.com or jotti. This will provide you with opinions from other
antivirus scanners. If the majority of them say it's virut, then again, you
have infected media someplace which is being reintroduced into the system.

 

[tommy]

Hi
I just got nLite but I cannot find that Trend CD anywhere on
there site, do you have a link? thanks.
I chose Trend as we have it at work and nothing seems to get through
it (except this). I didn't know any other way of doing the instal and
was worried about being on the net unprotected, but now I know if I
have to do it again.
Gaz

Trend CD is going to be much more out of date than a freshly downloaded
AVAST or AVG 8 on a thumbdrive. This could spell the difference since the
newest install file will have an up-to-date or more up-to-date set of
definitions.

 

[1PW]

Trend CD is going to be much more out of date than a freshly downloaded
AVAST or AVG 8 on a thumbdrive. This could spell the difference since the
newest install file will have an up-to-date or more up-to-date set of
definitions.

Hello Tommy:

What is better?

A) An inferior security suite downloaded with a possible honey pot and
subsequently updated to current?

or

B) An inferior security suite installed from trusted media on a
possible honey pot and subsequently updated to current?

The choices are: a bad one and a worse one IMO. A better answer is to
flatten & rebuild your system in a controlled environment where the
connection to the Internet is /never/ part of the equation. ...and
where nothing but trusted media is used to build the system. ...and
when choices are made as to security components, one choses "best in
breed" antimalware separates.

Your point is not lost on me Tommy. A secured system, used to
download a much more superior product /is/ much wiser. However, at
this moment, I'm very partial to Avira's AntiVir Personal.

A very recent clone of a stable & recent safe system is also a better
choice. There - updates could be made, with trusted media, to make
the reborn system safe again before re-connection to the Internet.

 

[Gaz]

Avira counts, I just haven't used it enough to be sure that it downloads
updated.

Hi All
I installed Avira with update and ran it and it found this file "Is
the TR/Agent.1153024 Trojan" in two locations, System Vol and ABF Outlook
Express Restore program which I have licence for and downloaded it directly
from their site.
I have searched but cannot find specific info on this supposed trojan, can
someone maybe help with some more info.
Thanks Gaz

 

[1PW]

Hi All
I installed Avira with update and ran it and it found this file "Is
the TR/Agent.1153024 Trojan" in two locations, System Vol and ABF Outlook
Express Restore program which I have license for and downloaded it directly
from their site.
I have searched but cannot find specific info on this supposed trojan, can
someone maybe help with some more info.
Thanks Gaz

<http://virscan.org/report/cfc6613800b93bdb45975ffee86d0b22.html>

If you haven't already deleted the files, you could crosscheck by
uploading the files individually to:

<http://www.virustotal.com/>

Please preserve, in good notes, the full pathname to the files in
question.

 

[Gaz]

<http://virscan.org/report/cfc6613800b93bdb45975ffee86d0b22.html>

If you haven't already deleted the files, you could crosscheck by
uploading the files individually to:

<http://www.virustotal.com/>

Please preserve, in good notes, the full pathname to the files in
question.

They are sitting in Quarantine and I'm a bit concerned where to export them
to on the computer safely so I can upload them to virustool.
Gaz

 

[Iron Man]

OK so if you have done a wipe and reinstall, the virus is gone. If
you are getting something again, it is from something like a external
hard disk you are connecting or a USB.

If you do the reinstall, then something you are doing is reintroducing the
virus.