"YOUR COMPUTER WAS INFECTED BY UNKNOWN TROJAN IT'S DANGE..."

[Tristan]

I need help, when I use windows explorer or internet explorer. I know it's a
fake because i've done my research, "Your computer was infected by unkown
trojan. It's dangerious or you system (critical files can be lost)." I tryed
downloading a programe called spyware doctor. I downloaded it and tryed to
install it. It keeps "not working". So i'm stranded. I know you can manualy
uninstall it but I can't. Please help me. It's so annoying.

Thanks.

 

[Kerry Brown]

You should post this question in a forum dedicated to removing malware. I
like this one.

http://www.aumha.net/

This can take several days. The people there are volunteers. They may have
you perform several procedures and post back with the results before the
computer is clean.

 

[David H. Lipman]

From: "Tristan" <[email protected]>

| I need help, when I use windows explorer or internet explorer. I know it's a
| fake because i've done my research, "Your computer was infected by unkown
| trojan. It's dangerious or you system (critical files can be lost)." I tryed
| downloading a programe called spyware doctor. I downloaded it and tryed to
| install it. It keeps "not working". So i'm stranded. I know you can manualy
| uninstall it but I can't. Please help me. It's so annoying.
|
| Thanks.


Download MULTI_AV.EXE from the URL --
http://www.pctipp.ch/ds/28400/28470/Multi_AV.exe

http://www.pctipp.ch/downloads/dl/35905.asp

English:
http://www.raymond.cc/blog/archives/2008/01/09/scan-your-computer-with-multiple-anti-virus-for-free/

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file.

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *

 

[philo]

I need help, when I use windows explorer or internet explorer. I know it's a
fake because i've done my research, "Your computer was infected by unkown
trojan. It's dangerious or you system (critical files can be lost)." I tryed
downloading a programe called spyware doctor. I downloaded it and tryed to
install it. It keeps "not working". So i'm stranded. I know you can manualy
uninstall it but I can't. Please help me. It's so annoying.

Thanks.

Your virus checker should be able to remove it...
just run a scan and let it do it's thing...
it may require a reboot to allow the malware to be deleted prior to it being
loaded

 

[AlexB]

Run Spybot Search and Destroy in safe mode and it will remove it in no time.

http://www.spybot.info/en/index.html

My policy is not to use any 3-rd party anti-malware except Spybot S&D.
Windows Vista offers sufficient protection against malicious software
writers some of them I am sure watch this forum very carefully.

Download Microsoft Windows Baseline Security Analyzer. It is Beta 2.1 for
Vista and I think it is safe to download. Run it.

<http://www.microsoft.com/downloads/...AF-9DBE-4DCE-889E-ECF997EB18E9&displaylang=en>

It will give you all your vulnerabilities, especially in your firewall
settings. You should read the report and if it suggests any changes, you
should consider them.
Your Windows firewall setting will be analyzed.

Download Microsoft® Windows® Malicious Software Removal Tool (KB890830). It
will want to run upon install. Choose the FULL scan although it may give you
a threatening message that it might take a few hours. It will scan your
entire computer in about half an hour or less if you do not have a lot of
stuff in it.

<http://www.microsoft.com/downloads/...e0-e72d-4f54-9ab3-75b8eb148356&displaylang=en>

Some reassuring information: Malicious Software Removal Tool
<http://www.microsoft.com/security/malwareremove/default.mspx>
The Microsoft Windows Malicious Software Removal Tool helps remove specific,
prevalent malicious software from computers that are running Windows Vista,
Windows Server 2003, Windows XP, or Windows 2000
http://support.microsoft.com/?kbid=890830

You can also go to Protection Center (Microsoft)
<http://onecare.live.com/site/en-US/center/howsafe.htm?s_cid=mscom_msrt>
and click "Protection Scan." There will be a dropdown menu and a button:
"Launch Full Scan or Vista." You can do it if you wish.

Download and install Spybot Search & Destroy, a marvelous piece of software
which is free for individuals but corporations pay fees. You may be asked
for donations but it is up to you. It is very up to date and every week you
will have to download new updates, sometimes even more often. You should
check for updates every time you run it. It will give you all su*kers
leached into your registry and ask you if you wanted to remove them. Many of
them have masqueraded themselves under MS Windows names like
Windows.something. Do not hesitate to kill them all. You can trust SB S&D.

http://www.spybot.info/en/index.html

It also allows you to IMMUNIZE your system. It means that when you go to a
website and they try to download some kind of a Trojan to you SB S&D will
either kill it silently, or ask you if you want to do it or will kill it and
give you a notice. It is better to let it kill them all in silence.

Listen to Mark Russinovich's (MS) webcast: Advanced Malware Cleaning

<http://www.microsoft.com/emea/spotlight/sessionh.aspx?videoid=359>

 

[Kerry Brown]

Once this is on your computer most AV solutions will not be able to remove
it.

 

[Malke]

Run Spybot Search and Destroy in safe mode and it will remove it in no
time.

http://www.spybot.info/en/index.html

My policy is not to use any 3-rd party anti-malware except Spybot S&D.
Windows Vista offers sufficient protection against malicious software
writers some of them I am sure watch this forum very carefully.

(snip rest of incorrect advice)

I'm sorry, but much as I like Spybot S&D as part of my toolbox of
malware removal tools, it alone will not remove the OP's malware. The OP
should follow the advice given by David Lipman and Kerry Brown instead.


Malke

 

[philo]

Once this is on your computer most AV solutions will not be able to remove
it.

Thank you for the correction...
I missed the part where it was mentined that it was a fake

 

[AlexB]

I am sorry, but I am speaking from my own experience. I had an identical
case with a piece of malware implanted into one of my Vista machines back in
November, I believe. It was my secretary's machine who goes to all her crazy
sites.

The only thing I did was to run SB S&D and it was already up to the task
after I updated it. That malware was in its database.

I think it was a Chinese contraption as I read in the papers or on the web a
week later.

He has absolutely no risk in running it. But he has to update it properly
before he did. And as DanS pointed out it is much better to run it in safe
mode.

 

[the wharf rat]

Windows Vista offers sufficient protection against malicious software
writers some of them I am sure watch this forum very carefully.

Lol.

"Microsoft's Live OneCare placed last in a test on the effectiveness
of anti-virus security packages by Austrian researchers."

http://www.theregister.co.uk/2007/03/05/onecare_fails_av_test/

Original data on this page: http://www.av-comparatives.org/

 

[AlexB]

"The slow death of AV technology"
http://www.theregister.co.uk/2007/06/08/death_of_av/

That is as far as all 16 other "AV Comparatives" should be looking into
their future. This is precisely what my feeling was. Now it is officially
confirmed (for me at least). I think Vista actually did it.

My personal experience shows that with the advent of Vista overall malware
protection offered by the Windows + SB S&D is sufficient and solid. I have
no reason to change my opinion unless faced with facts.

See, as long as MS installs security updates on a timely basis and they
definitely do it, viruses have no place to stay.

 

[David H. Lipman]

From: "AlexB" <[email protected]>

| "The slow death of AV technology"
| http://www.theregister.co.uk/2007/06/08/death_of_av/
|
| That is as far as all 16 other "AV Comparatives" should be looking into
| their future. This is precisely what my feeling was. Now it is officially
| confirmed (for me at least). I think Vista actually did it.
|
| My personal experience shows that with the advent of Vista overall malware
| protection offered by the Windows + SB S&D is sufficient and solid. I have
| no reason to change my opinion unless faced with facts.
|
| See, as long as MS installs security updates on a timely basis and they
| definitely do it, viruses have no place to stay.
|

Then you have lessons to be learned.

 

[the wharf rat]

See, as long as MS installs security updates on a timely basis and they
definitely do it, viruses have no place to stay.

You're assuming your conclusion, which is an error of logic.

"Because MS installs patches regularly I am protected from malware"
is ONLY true if

the patches address the vulnerability or vector of infection and
do so properly
the protection engine itself is without major flaw

Niether of those is true. According to scientific analysis the
"malware" protection included in Vista by MS contains sufficient error so
as to fail to detect more than 17% of attacking agents. Compare that to
the .45% that a top rated third party program fails to detect.

 

[AlexB]

That is my PRIVATE opinion but I am not afraid to share it with everyone.
You don't have to attack my opinion because it won't change it for me unless
I run into a serious trouble with it. I have made up my mind and so far it
has worked for me quite well on my 4 Vista computers.

I've had more trouble with ZoneAlarm and CA on my computers than I have now
with Vista protection.

I do not trust so called "scientific" opinion. In the world of software it
is often created by people who troll this forum. Even in the best case
scenario it is hard to conduct such tests unless the tester, usually a
website, has financial support from small, obscure AV software makers. No
disclaimers are ever offered. Why shall I trust them?

Aside from software world I am dealing more in the line of my primary
business with real science, hard science. Even in those areas so called
scientific opinion frequently biased and unreliable. It is really hard to
compare things like what medication is more efficient for instance... Well I
do not want to go into it.

Your what I suspect naive respect for "scientific" opinion may occasionally
pay off but mostly you are looking up to garbage.

Again, it is my PRIVATE opinion.

 

[the wharf rat]

I do not trust so called "scientific" opinion.

Of course not. Why let observable reality get in the way of
a good opinion?

Aside from software world I am dealing more in the line of my primary
business with real science, hard science. Even in those areas so called
scientific opinion frequently biased and unreliable.

Oh, horseshit. A biased unreliable opinion is by definition not
science. Scientific evidence is repeatable, documentable, and observable.

 

[AlexB]

Oh, horseshit. A biased unreliable opinion is by definition not

science. Scientific evidence is repeatable, documentable, and observable

This is very true but more often than not it is passed around as very
reliable and scientific. They don't say "we are biased" when they publish
their results. Frequently they don't even know themselves believe it or not
that they are biased.

It's been said that people with IQ below 112 should not even go to college.
I am sure there are plenty even in scientific labs that are below this
level. It is this crazy drive to educate the masses that is killing
everything.