IdnMail.Exe Capp.exe Trojan?

[Michael Fullerton]

I got infested with these nasty programs just an hour ago

I had to restart in safe mode to delete them from WinNt/System32 and
from the Run sections of the registry.

I have the files on my machine and the web site I think I got it from
for any AV companies that want them.

_______
Free 32 bit Windows Clipboard Utility
http://www.cyber-matrix.com/

 

[Torti Schlumpf]

Check the file here, please:

http://www.kaspersky.com/remoteviruschk.html

 

[Michael Fullerton]

Check the file here, please:

http://www.kaspersky.com/remoteviruschk.html

Says they're OK but they definately aren't.

_______
Free 32 bit Windows Clipboard Utility
http://www.cyber-matrix.com/

 

[Nick FitzGerald]

I got infested with these nasty programs just an hour ago

What's nasty about them??

Are they really Trojans or viruses, or more "spyware" (often in the form of "IE
Toolbars" and the like)??

I had to restart in safe mode to delete them from WinNt/System32 and
from the Run sections of the registry.

I have the files on my machine and the web site I think I got it from
for any AV companies that want them.

Few AV companies probably actively monitor such low S/N ratio fora anymore.
You'd probably be best to forward the suspect files to your choice of:

Command Software <[email protected]>
Computer Associates (US) <[email protected]>
Computer Associates (Vet/EZ) <[email protected]>
DialogueScience (Dr. Web) <[email protected]>
Eset (NOD32) <[email protected]>
F-Secure Corp. <[email protected]>
Frisk Software (F-PROT) <[email protected]>
Grisoft (AVG) <[email protected]>
H+BEDV (AntiVir): <[email protected]>
Kaspersky Labs <[email protected]>
Network Associates (McAfee) <[email protected]>
Norman (NVC) <[email protected]>
Sophos Plc. <[email protected]>
Symantec (Norton) <[email protected]>
Trend Micro (PC-cillin) <[email protected]>
(Trend may only accept files from users of its products)

 

[F Del Villar]

Hi, I think I got this one too.

I may have dowloaded it from a chinese website...at least I remember
clicking in a chinese popup that I couldnt understand.

capp.exe keeps asking for acces to the internet. Thats what ZA tells
me.

and also outlook detected a program that tried to access my email
addresses in outlook.