Re: Backdoor.Lateda.C

From: shuckie69 (shuckie69_at_discussions.microsoft.com)
Date: 05/25/05 

Date: Wed, 25 May 2005 00:32:01 -0700

Hi David

As per my initial message; "...but the Trojan keeps the modem com port busy
preventing me from connecting to the Net most of the time, and even when I
can connect it stops me from downloading anything...". With this being an
XP machine, a message keep appearing approx every 10 seconds saying the a
program is trying to connect to the l33t.freeshellz.org domain. As a result
when I try to connect I get a message saying the modem COM port is busy. I
haven't been able to connect to the Net since I posted this message,
therefore I can't update Sysclean, Ad-Aware, AntiVir or anything else! If I
detach and reconnect the ADSL modem's USB cable, the trojan instantly tries
to connect.

Any ideas???

"David H. Lipman" wrote:

> From: "shuckie69" <shuckie69@discussions.microsoft.com>
>
> | Hi David
> |
> | Thanks forthe advice, unfortunately I wasn't successful. The TrendMicro
> | Sysclean Front End complained that it couldn't find the pattern file and
> | wanted to connect to the Net to download an update, which obviously it cannot
> | do. Ad-Aware only found a cookie, and Spybot Search & Destroy only found
> | spyware (not the trojan).
> |
> | I tried downloading other removal tools from the website which didn't find
> | anything although AntiVir did find ANOTHER worm! The only thing I can think
> | to do now is transfer my friend's hard drive into my PC and run scan using
> | AVG and two or three online anti-virus scans until I kill this trojan.
> |
> | Any other suggestions please?
> |
>
> Why can't you connect to the Internet ? Explian "...which obviously it cannot do."
> If you disconnect the Internet cable, reconnect it and then allow the process to get the
> files it needs to clean the system.
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

Relevant Pages

  • Re: File is not suitable for running MS-DOS and Microsoft Windows applications
    ... Upon visiting the first link in your message and downloading the files and ... > This can be caused by a trojan. ... > Troubleshooting MS-DOS-based programs in Windows XP ... >> program to install on her computer and is having to access it like I am. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: somewhat OT- trojans in filesharing programs?
    ... i really do believe this is some kind of trojan (especially because of the ... g-1-backdoor reference) AND spyware, or at least that's definitely what it ... much more leery about downloading things off the net now, ...
    (comp.security.firewalls)
  • Re: Davenport Lyons - Watchdog Report
    ... network that has been infected with a trojan that turns it into an IP ... forwarding machine, ... There have been very few cases in total involving private downloading ...
    (uk.legal)
  • Re: ZA Trojans & Hijackers
    ... A firewall and an anti-virus won't stop a trojan or a hijacker. ... user lets them in by downloading and visiting sites that deliver them ...
    (comp.security.firewalls)
  • Scvhost.exe
    ... It came from a screen saver. ... The size of the Trojan was 21.6 KB ... That was for windows 2000. ... >modem up and I have to reboot to get it to work again. ...
    (microsoft.public.win2000.general)