H
Hanna Lillico
Yeah, know it sounds funny misspelled like that, but that's what it's
called - it's the Germanic (cent. europ.) way of spelling "pepper" I guess.
Anyway, I just apparently had it on one of my LAN stations, and it took me
all of last night and most of today to find out anything about it, so after
the fact, I wondered if anybody else had any experience with it.
The bad files show up in the Task Manager Processes window, and the giveaway
is they change CPU usage from 0 up to 6%, once every second, on the clock.
The files, with names like rbii.exe, WofE5.exe and UrghOY.exe, change in
size with each blink, running around 4 megs.
Since the names are random, and often change with each boot, it's hard to do
a Google on the files, but I got lucky and found a long list on Wilders
Security Forum with a couple of familiar names, which gave me the Trojan's
name, which eventually led me to www.mjc1.com/files/peperpage/ which had the
removal process steps. They worked and my CPU usage is stable again. A
search of the SARC site for anything related to this trojan or its files
turned up nothing - apparently unknown to them.
Now, after the dust has settled, I'm starting to think - since my entire
Internet search produced only 1 site with a remedy, perhaps the writers were
in fact the authors of the Trojan...? Did I in fact trade a pesky popup
spawner for a more pernicious program that installed something heavy while
it was (helpfully) ferreting out the last of the Peper files? The page
above gives exact advice on deleting the infected Registry keys, but the
actual infected .exe apparently needs the Uninstaller provided at the bottom
of the page.
Am I being paranoid here, simply because I saw "Enemy Of The State" last
night on TV, or is that site legit? Again, has anyone else had to deal with
this particular Trojan?
~RL
called - it's the Germanic (cent. europ.) way of spelling "pepper" I guess.
Anyway, I just apparently had it on one of my LAN stations, and it took me
all of last night and most of today to find out anything about it, so after
the fact, I wondered if anybody else had any experience with it.
The bad files show up in the Task Manager Processes window, and the giveaway
is they change CPU usage from 0 up to 6%, once every second, on the clock.
The files, with names like rbii.exe, WofE5.exe and UrghOY.exe, change in
size with each blink, running around 4 megs.
Since the names are random, and often change with each boot, it's hard to do
a Google on the files, but I got lucky and found a long list on Wilders
Security Forum with a couple of familiar names, which gave me the Trojan's
name, which eventually led me to www.mjc1.com/files/peperpage/ which had the
removal process steps. They worked and my CPU usage is stable again. A
search of the SARC site for anything related to this trojan or its files
turned up nothing - apparently unknown to them.
Now, after the dust has settled, I'm starting to think - since my entire
Internet search produced only 1 site with a remedy, perhaps the writers were
in fact the authors of the Trojan...? Did I in fact trade a pesky popup
spawner for a more pernicious program that installed something heavy while
it was (helpfully) ferreting out the last of the Peper files? The page
above gives exact advice on deleting the infected Registry keys, but the
actual infected .exe apparently needs the Uninstaller provided at the bottom
of the page.
Am I being paranoid here, simply because I saw "Enemy Of The State" last
night on TV, or is that site legit? Again, has anyone else had to deal with
this particular Trojan?
~RL
