Guest David H. Lipman Posted November 1, 2008 Posted November 1, 2008 From: "Penang" <kalambong@gmail.com> | Okay, finally successfully copied it and renamed that file, and sent | it for analysis | Result is at http://www.virustotal.com/analisis/45568df...d562ba6948679d2 | It's a trojan, and unfortunately, the NAV that I am using never flag | it ! | I'm downloading that "autorun" and will try to disable the thing. | Thanks for all your help !! Not just a trojan, a trojan proxy. You PC has been a proxy agent of the malware's author. Start with the Sophos module of the following Multi AV Scanning Tool... Download MULTI_AV.EXE from the URL -- http://www.pctip.ch/ds/28400/28470/Multi_AV.exe or http://212.98.39.7/ds/28400/28470/Multi_AV.exe http://www.pctip.ch/downloads/dl/35905.asp or http://212.98.39.7/downloads/dl/35905.asp English: http://www.raymond.cc/blog/archives/2008/0...virus-for-free/ To use this utility, perform the following... Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS } Choose; Unzip Choose; Close Execute; C:\AV-CLS\StartMenu.BAT { or Double-click on 'Start Menu' in C:\AV-CLS } NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your FireWall to allow it to download the needed AV vendor related files. C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS} This will bring up the initial menu of choices and should be executed in Normal Mode. This way all the components can be downloaded from each AV vendor's web site. The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC. You can choose to go to each menu item and just download the needed files or you can download the files and perform a scan in Normal Mode. Once you have downloaded the files needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key during boot] and re-run the menu again and choose which scanner you want to run in Safe Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode. When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help file. Additional Instructions: http://pcdid.com/Multi_AV.htm Please report back your results -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp Quote
Guest Penang Posted November 2, 2008 Posted November 2, 2008 On Nov 1, 5:14 am, "David H. Lipman" <DLipman~nosp...@Verizon.Net> wrote:<span style="color:blue"> > From: "Penang" <kalamb...@gmail.com> > > | Okay, finally successfully copied it and renamed that file, and sent > | it for analysis > > | Result is athttp://www.virustotal.com/analisis/45568dff2bb5ef8fdd562ba6948679d2 > > | It's a trojan, and unfortunately, the NAV that I am using never flag > | it ! > > | I'm downloading that "autorun" and will try to disable the thing. > > | Thanks for all your help !! > > Not just a trojan, a trojan proxy. > > You PC has been a proxy agent of the malware's author. > > Start with the Sophos module of the following Multi AV Scanning Tool... > > Download MULTI_AV.EXE from the URL --http://www.pctip.ch/ds/28400/28470/Multi_AV.exe > orhttp://212.98.39.7/ds/28400/28470/Multi_AV.exe > > http://www.pctip.ch/downloads/dl/35905.asp > orhttp://212.98.39.7/downloads/dl/35905.asp > > English:http://www.raymond.cc/blog/archives/2008/0...ur-computer-wit... > > To use this utility, perform the following... > Execute; Multi_AV.exe { Note: You must use the default folder C:AV-CLS } > Choose; Unzip > Choose; Close > > Execute; C:AV-CLSStartMenu.BAT > { or Double-click on 'Start Menu' in C:AV-CLS } > > NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your > FireWall to allow it to download the needed AV vendor related files. > > C:AV-CLSStartMenu.BAT -- { or Double-click on 'Start Menu' in C:AV-CLS} > This will bring up the initial menu of choices and should be executed in Normal Mode. > This way all the components can be downloaded from each AV vendor's web site. > The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC. > > You can choose to go to each menu item and just download the needed files or you can > download the files and perform a scan in Normal Mode. Once you have downloaded the files > needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key > during boot] and re-run the menu again and choose which scanner you want to run in Safe > Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode. > > When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help > file. > > Additional Instructions:http://pcdid.com/Multi_AV.htm > > Please report back your results > > -- > Davehttp://www.claymania.com/removal-trojan-adware.html > Multi-AV -http://www.pctipp.ch/downloads/dl/35905.asp</span> Am downloading it the Sophos module, and will run it. Many thanks !!!!! Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.