How to Delete Trojan Dialer dra.exe?

[Leythos]

Who the hell is LMCO?

Lockheed Martin Corporation

and why would they care?

That would be the company that owns the network you post from when
you're making disparaging remarks and pointing to your license page - on
their time and their network resources.

Since you work for LMC Chris, I'm really surprised that you didn't
recognize the initials.

 

[pcbutts1]

You dumb **** I don't work for Lockheed My name is not Chris. You stupid
****s really think you tracked down who I am and been blabbering it all over
Usenet. WRONG!!! Tell LMCO I said **** them their sorry ass company, NASA,
JPL and everybody in the government. Tell them I said that, lets see what
happens. You are so sure I work there they are going to fire me right on the
spot.

--


The best live web video on the internet http://www.seedsv.com/webdemo.htm
NEW Embedded system W/Linux. We now sell DVR cards.
See it all at http://www.seedsv.com/products.htm
Sharpvision simply the best http://www.seedsv.com

 

[Peter Seiler]

pcbutts1 - 04.01.2006 04:02 :

Watch how many times he tags along his BS repetitive post reply to mine. The
guy is obsessed with me so I made this website just for him
http://www.pcbutts1.com/downloads/license.htm

1. it's no good idea suddenly changing the subject in between.

2. It's no good idea posting all these huge Hijack this lists here. If
everyone would do this, this NG would shortly become absulutely
"tsunamied" [TM], unreadble and bandwidth wasted. Better for Hijack this
lists are special forums and/or emails direct to you with Hijack this
lists so you can help this way.

3. it's no good idea and usenet-/NG behavior tricky reposting with
unnecessary fullquoting (~180! lines) within your SIG. Usually SIGs
normally should NOT exceed ~4/5 lines.

4. indeed, downloading/using software (if possible) from welknown
(original vendor) sites is a better idea and more secure especially in
times of viruses, WMF-orms etc..

5. it's no good idea xposting all this over 3 NGs.

If you are willing to learn, please think a little about these
arguments. THX.

 

[optikl]

You dumb **** I don't work for Lockheed My name is not Chris. You stupid
****s really think you tracked down who I am and been blabbering it all over
Usenet. WRONG!!! Tell LMCO I said **** them their sorry ass company, NASA,
JPL and everybody in the government. Tell them I said that, lets see what
happens. You are so sure I work there they are going to fire me right on the
spot.

Aren't you the guy who said you make a six-figure salary and work for
the government? Oh, you were probably joking. Anyway, my friends at LMCO
wouldn't like you're site. I was just joking, too.

 

[Heather]

Aren't you the guy who said you make a six-figure salary and work for the
government? Oh, you were probably joking. Anyway, my friends at LMCO
wouldn't like you're site. I was just joking, too.<<<

Methinks you struck a nerve here.....lol. Yes, he did say he worked for the
Government....doesn't say much about who the US Gov't. hires, does it?? I
wonder if they might be interested in how he behaves on company time on
these news groups?? Hmmm. Interesting thought.

HF

 

[optikl]

Methinks you struck a nerve here.....lol. Yes, he did say he worked for the
Government....doesn't say much about who the US Gov't. hires, does it?? I
wonder if they might be interested in how he behaves on company time on
these news groups?? Hmmm. Interesting thought.

Even with the the most scrupulous screenings, you can't weed out all of
the undesirables. Hell, if that were practical, I wouldn't be a
highly-paid XX YYYYYYYYYY ZZZZZZZZZZ myself .

 

[pcbutts1]

Why don't you tell them. (e-mail address removed) , (e-mail address removed), (e-mail address removed)
they would just love to hear from you.

--


The best live web video on the internet http://www.seedsv.com/webdemo.htm
NEW Embedded system W/Linux. We now sell DVR cards.
See it all at http://www.seedsv.com/products.htm
Sharpvision simply the best http://www.seedsv.com

 

[Plato]

Try in safe mode.

My kids computer has had this Trojan Dialer dra.exe for 2 days now and I
have run the following virus scans to no avail:

1. AVG Free 7.1 - Quarantines it but does not delete it

2. Trend Micro online virus scanner - Seemed to work ...but now the AVG
Virus Warning for dra.exe keeps coming up. When I click delete file, it does
not get rid of it. =(

3. Running BitDefender online scan as we speak. Says it picked up the virus.
Waiting to see if it cleans it.

Any help or suggestions would be greatly appreciated.
The kids pc gets access to the internet thru a (DSL)Netgear router. Both our
pc's running XP Pro with all the updates.

Many Thanks,

Dad called Jack

 

[Dustin Cook]

Thanx for the feedback.

Hi Dave,

I finally got a sample of the dra.exe file from an infected machine at
work today; BugHunter is now able to scan for and remove it as well.
I've been working overtime it would seem on my spyware samples. As of
yesterday, BugHunter now detects 409 of the little buggers. Look2me
varients are also detected now. As well as that pesky remon.sys
netshare worm. (Thanks to a co-worker for infecting one of my test
machines yesterday morning... fun fun)..

Anyhow...

Regards,
Dustin Cook
http://bughunter.atspace.org

 

[Terry Martin]

From: "junkmail" <[email protected]>

| jack, if you are using XP, disable system restore before trying to
remove
| this virus. otherwise, it will keep comming back. once you have done
this,
| try the method again.
|
| after it states it is cleaned, then reboot re run to ensure it is truely
| clean then you may turn system restore back on.

No, it will only come back *if* he restores the system to a point where
the Trojan is
present.

I have learned that it is *BEST* to leave the system Restore cache as is
until the PC is
thoroughly cleaned of malware. Then once that is deemed to be clean,
disable the System
Restore cache and reboot the PC. Then re-enable the System Restore cache
and then create a
new restore point.

The reason you don't want to dump the System Restore cache PRIOR to
cleaning the PC is if
the cleaning process kills the PC and it no longer works correctly. Then
you can restore
the PC to a state prior to cleaning process and then you can proceeed the
cleaning process
again but differently. It is better to have a PC that has malware that
works then a PC that
doesn't work at all.

that is a very good lesson tolearn. beforeit happensto you