Help. trojaned

Day To Day Chat Area, So Forum Topic's Don't Get Spammed Up.

Moderator: phpBB2 - Administrators

ian.stewart
Forum Contributor
Forum Contributor
Posts: 2419
Joined: Sat Nov 18, 2006 1:59 pm
Location: Far Far south, any further south and my feet are wet

Help. trojaned

Post by ian.stewart »

Boff question, I have got a trojan in my PC at the moment :shock:

Runs under the name of "Windows Safety Alert" I have tried to remove the programme, but it will not let me, so I have gone down the usual Macafee, Spybot, and Smitfraudfix routes and they have failed to remove the fooker, last week I am pretty certain there was another trojan running "Asafetyproject" which appears to have been deleted, are they related??
How the thing was downloaded, I dont know, I assume it was one of the kids, but its being a real pain in the butt ro remove, HELP


THE SMOKING GNU
12.604 with an old boiler of a RV8 and no gas
WHY are there so many IANS on this site???????
katanaman
Site Admin
Site Admin
Posts: 3081
Joined: Fri Nov 17, 2006 7:29 pm
Location: Edinburgh
Contact:

Post by katanaman »

try this http://help.lockergnome.com/windows/win ... 61512.html if not let me know as I have more suggestions.
User avatar
HairbearTE
Guru
Guru
Posts: 870
Joined: Sat Nov 18, 2006 12:27 am
Location: Melton Mowbray

Post by HairbearTE »

Some of that crap hides in the registry, be careful if you're deleting files from there. I got "Spy Doctor" running on my PC for a couple of years now and its very good imo.
Image
IainB
Forum Contributor
Forum Contributor
Posts: 271
Joined: Sat Nov 18, 2006 12:32 pm
Location: WGC
Contact:

Post by IainB »

Ian,
Have you tried deleting this in safe mode?
If its XP, rolling back to a 'cleaner' version?
GreenV8S
Helpful or Confused
Helpful or Confused
Posts: 87
Joined: Mon Nov 20, 2006 9:13 pm
Contact:

Post by GreenV8S »

If your machine has been compromised then unless you believe you are smarter than the guy who wrote the virus, the only safe remedy is to reinstall everything from scratch. You'll often find that one infection is used to install others; even if you find one, there's no realistic way to be sure you've got them all.
Peter Humphries (and a green V8S)
JP.
Knows His Stuff
Knows His Stuff
Posts: 557
Joined: Sat Nov 18, 2006 11:27 am
Location: The Netherlands
Contact:

Post by JP. »

Aaaaaaaaaaaaaa got that one a month ago, came with an audio download and even Norton Internet Security 2007 did do nothing....
XP's system recovery didn't work anymore also.

Took me twelf hours to get rid of it.....................

By fckn FORMAT C

And again two days to get my system on line ( by luck I make backups all the time on a second harddisk)

Good luck
User avatar
HairbearTE
Guru
Guru
Posts: 870
Joined: Sat Nov 18, 2006 12:27 am
Location: Melton Mowbray

Post by HairbearTE »

Usually a quick search of the net will find you a solution. Often you will find detailed step by step procedures to follow that will enable you to delete viruses. The problem is that these procedures themselves often assume you are an all knowing PC boffin yourself! I had plenty of fun with the "about: blank" virus a while back. I tried for 3 days to remove it and couldn't, only my brother was able to remove it (he's an IT bod).
Image
kev_the_mole
Forum Contributor
Forum Contributor
Posts: 1022
Joined: Sat Nov 18, 2006 9:41 pm
Location: Las Islas Purbequias

Post by kev_the_mole »

Ian,

buy the kids a cheap PC and keep them off yours! It's the only way to stop this sort of thing happening again. When my kids PC last stopped we removed 326 seperate pieces of spyware and 70-odd viruses. I have a laptop and their PC is their own problem except of course when it goes wrong.

Ian
Image


It's an engine Jim.....but not as we know it ;)
katanaman
Site Admin
Site Admin
Posts: 3081
Joined: Fri Nov 17, 2006 7:29 pm
Location: Edinburgh
Contact:

Post by katanaman »

GreenV8S wrote:If your machine has been compromised then unless you believe you are smarter than the guy who wrote the virus, the only safe remedy is to reinstall everything from scratch. You'll often find that one infection is used to install others; even if you find one, there's no realistic way to be sure you've got them all.
Oh come on reinstall is only if its completely knackered lol. I know I do this for a living so this kind of thing just makes me role my sleeves up but there is no reason why nobody else could do it. There are many tools out there that get rid of this kind of stuff, hijackthis being one of the best although its more fun hunting them down manually.
GreenV8S
Helpful or Confused
Helpful or Confused
Posts: 87
Joined: Mon Nov 20, 2006 9:13 pm
Contact:

Post by GreenV8S »

katanaman wrote:Oh come on reinstall is only if its completely knackered lol. I know I do this for a living
I don't do it for a living, but I spend *far* too much time fixing systems including a great many that people have had a go at fixing themselves and got in a right mess. If you're willing and able to roll your sleeves up, get down into the bowels of the system and sort out boot cylinders, root kits, registry, infected files etc then you can spend your time doing that and if you're good enough you'll get there eventually. It will usually be quicker to reinstall though, and it will definitely cure it whereas repairing the existing installation may or may not.

A clean install also does the system good imo, it removes the debris left behind from adding and removing applications and patches, the system usually ime runs noticeably faster afterwards.
Peter Humphries (and a green V8S)
katanaman
Site Admin
Site Admin
Posts: 3081
Joined: Fri Nov 17, 2006 7:29 pm
Location: Edinburgh
Contact:

Post by katanaman »

In an ideal world yes reinstall is quick, I can do it at the work in around 15 mins because I have an image of every pc. However at home people seldom have their data separate from the OS so a reinstall is a no no unless they want to loose everything. Besides what we are on about here is a trojan so it wont have done major damage if any to the OS. I once spoke to a tech at Edinburgh university who reinstalled every pc they had because of MS blast where in reality once understood it took about 5 mins to sort it out. It was even possible to sort it out with a bit of VB script on the active directory. What should have taken him a day or two to sort out took three weeks.

Anyway how are you getting on with it Ian?
Coops
Site Admin
Site Admin
Posts: 6318
Joined: Fri Nov 17, 2006 7:43 pm
Location: Newbury, Berks
Contact:

Post by Coops »

I use to suffer from these sort of problems with my PC.
i had tried norton, etc with no luck,
went over to AVG and touch wood been ok for the past 2.5 yrs now
Regards Tony C (COOPS)
Image
MS2 V3.57 Ecu mapable efi and wasted spark ignition.
Procharger D1SC supercharger and Cossie RS500 Intercooler @ 14psi of Boost. 416 RWHP, (boost leak)
Forged 4.8 V8 kitted out with the dogs Cajones of parts. :D
Sponsored by: www.v8performanceparts.co.uk, www.interpart.biz, www.caprisport.com & www.baileyperformance.co.uk
ian.stewart
Forum Contributor
Forum Contributor
Posts: 2419
Joined: Sat Nov 18, 2006 1:59 pm
Location: Far Far south, any further south and my feet are wet

Post by ian.stewart »

katanaman wrote:In an ideal world yes reinstall is quick, I can do it at the work in around 15 mins because I have an image of every pc. However at home people seldom have their data separate from the OS so a reinstall is a no no unless they want to loose everything. Besides what we are on about here is a trojan so it wont have done major damage if any to the OS. I once spoke to a tech at Edinburgh university who reinstalled every pc they had because of MS blast where in reality once understood it took about 5 mins to sort it out. It was even possible to sort it out with a bit of VB script on the active directory. What should have taken him a day or two to sort out took three weeks.

Anyway how are you getting on with it Ian?
I was fortunate enough to have a mate round this afternoon who runs another web site, mentioned the problem to him, and off he went running a scan, took 2.5 hours to run the scan, but it appears to have worked, I was able to manually remove the trojan, in fact I had 2 trojans running, I cant beleive how fast the thing is now, thanks for the help chaps, BTW I dont have a clue what he set up to run, and I cant find it im the computer, so I will ask him tomorrow what it was he ran,----------- Just found it, Noadware.
THE SMOKING GNU
12.604 with an old boiler of a RV8 and no gas
WHY are there so many IANS on this site???????
Coops
Site Admin
Site Admin
Posts: 6318
Joined: Fri Nov 17, 2006 7:43 pm
Location: Newbury, Berks
Contact:

Post by Coops »

You got a link Ian?
i downloaded one from noadware.net and it scanned my machine said i got 34 and to remove i have to pay :(
Regards Tony C (COOPS)
Image
MS2 V3.57 Ecu mapable efi and wasted spark ignition.
Procharger D1SC supercharger and Cossie RS500 Intercooler @ 14psi of Boost. 416 RWHP, (boost leak)
Forged 4.8 V8 kitted out with the dogs Cajones of parts. :D
Sponsored by: www.v8performanceparts.co.uk, www.interpart.biz, www.caprisport.com & www.baileyperformance.co.uk
katanaman
Site Admin
Site Admin
Posts: 3081
Joined: Fri Nov 17, 2006 7:29 pm
Location: Edinburgh
Contact:

Post by katanaman »

:google is your friend :lol: http://www.2007noadware.net/

Glad you got it sorted out Ian
Post Reply

Return to “General Chat Area”