numbered .exe files virus's

F

fornewsgroups

Numbered .exe files keep appearing as "Trojan horse Dialer"* (see
below. form the AVG "virus encyclopedia") in the following folder:
C:\Documents and Settings\user\Local Settings\Temp folder

My virus check keeps picking them up (as different numbered .exe files
(quite small, a few Kb) and I keep deleting them, but I'm curious why
they keep showing up? I recently re-formatted so it is not like I have
a tonnne of stuff on here. I've run a couple of spy-ware programs and
nothing being displayed.

OS: WindowsXP
virus check :AVG Free addition

Am I in danger?
Please help




*Trojan horse Dialer is a group of Trojan horse viruses which is known
by dialing different international telephone numbers via PC modem.
These telephone numbers are usually connected to warez and porno sites,
or sites with cracks for commercial software.
To prevent this, it is recommended to set High security level in your
Internet browser, which means to deny automatic installing of ActiveX
components and different plugins, or completely disable scripting
function. Also it is possible to deny international calls from the
internet connection line and calls with non-standard rate.

Following marks may show Dialer presence on the computer:
- new, unknown icon appears in systray
- differently looking internet connection window
- strange windows that ask if you want to connect to internet or dial a
number

All Dialers in common dial different number that a default one for the
Internet connection, the change is visible in the dialog for internet
connection dialup, or the original number is dialed, then Dialer hangs
up this connection and dials another (its own) number. This can e
recognized on an external modem by the LED diods. Connection indicator
in Systray is not reliable in this case.
 
M

Malke

Numbered .exe files keep appearing as "Trojan horse Dialer"* (see
below. form the AVG "virus encyclopedia") in the following folder:
C:\Documents and Settings\user\Local Settings\Temp folder

My virus check keeps picking them up (as different numbered .exe files
(quite small, a few Kb) and I keep deleting them, but I'm curious why
they keep showing up? I recently re-formatted so it is not like I
have
a tonnne of stuff on here. I've run a couple of spy-ware programs and
nothing being displayed.

OS: WindowsXP
virus check :AVG Free addition
Click to expand...

The malware keeps showing up because your computer is not clean. Go
through the malware removal steps in the link below systematically,
doing everything with updated tools in Safe Mode:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Malke
 
A

Alceryes

Am I in danger?


Maybe.
Download and run 'ccleaner' (check marking all entries before being run).
http://www.ccleaner.com/
This program is like an enema for Windows (thus the name). After you run the
program reboot and see if the 'Trojan' is still coming back. If it does then
you have an 'active' virus on your system. Go to www.trendmicro.com and
download their sysclean package and the latest definitions. Reboot in safe
mode and run the sysclean to remove the virus.
 
F

fornewsgroups

Thank you. I'm going to follow your suggestions and of course get back
to you on this.

Shouldn't have AVG or the online Trend Micro virus's scans picked it up?
 
F

fornewsgroups

I just thought of something. I was helping a friend with his computer
the other day and it turned out he had over 240 virus's on his
computer. IN order to run a AVG virus check on his computer, we had to
use his mp3 player (which has obviously used on his computer) to
transfer the AVG original installation file (which was on mine) to his.
So after I copied the file to his player, we reattached it back to his
computer to copy to his desktop.

Now I am displaying similar symptoms. Could his mp3 player transfered
the virus to my computer?
 
M

Malke

I just thought of something. I was helping a friend with his computer
the other day and it turned out he had over 240 virus's on his
computer. IN order to run a AVG virus check on his computer, we had
to use his mp3 player (which has obviously used on his computer) to
transfer the AVG original installation file (which was on mine) to
his. So after I copied the file to his player, we reattached it back
to his computer to copy to his desktop.

Now I am displaying similar symptoms. Could his mp3 player transfered
the virus to my computer?
Click to expand...

Of course. Viruses certainly can infect normal files. There isn't any
way for me to know what happened in your case, naturally. However,
standard operating procedure when working on an infected pc is to only
transfer files (like the removal tools) from either a cd-r or a usb
thumbdrive that has a read/write switch. Floppies (if anyone still uses
them) should also be set to read-only.

Malke
 
F

fornewsgroups

Alceryes said:
Maybe.
Download and run 'ccleaner' (check marking all entries before being run).
http://www.ccleaner.com/
This program is like an enema for Windows (thus the name). After you run the
program reboot and see if the 'Trojan' is still coming back. If it does then
you have an 'active' virus on your system. Go to www.trendmicro.com and
download their sysclean package and the latest definitions. Reboot in safe
mode and run the sysclean to remove the virus.
Click to expand...

I ran ccleaner and yup, it showed up again (I hope me external HD isn't
infected)

I'm sorry, but I am having trouble finding the "sysclean" package.
Would you mind guiding me?
 
F

fornewsgroups

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Computer Infected: 20
Internet connection activity 4
Viruses? 10
Phone Dialer 4
For MVP: Trojan-horse associated with C:\WINDOWS\system32\wdmaud.s 1
No dial tone using Network (Dial-up) Connection 2
Problem?Virus? 2
Five specific threats 17

Top