Re: Help I think my computer has been infected with a trojan

From: Doug Knox MS-MVP (dknox_at_mvps.org)
Date: 11/30/03 

Date: Sat, 29 Nov 2003 22:35:18 -0500

All you can really do, Holly is to check for the signs of infection that are
listed on the antivirus sites.

http://vil.nai.com/vil/content/v_98800.htm

is one such. 

-- 
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Associate Expert
ExpertZone - http://www.microsoft.com/windowsxp/expertzone
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
"Holly" <anonymous@discussions.microsoft.com> wrote in message
news:995601c3b6f1$b19ff690$a601280a@phx.gbl...
> Doug, I'm sorry, the program name was newstick.exe  I
> went to www.metacrawler.com and searched for "newstick
> program" and it came up on several sites as a backdoor
> access thing.
>
> We have symantec, norton antivirus software that we
> purchased when we got our computer last year, and we
> renewed our subscription in October.  That's all I really
> know about it.
>
> Holly
>
> >-----Original Message-----
> >Holly,
> >
> >Where did you do your search for "newsticker.exe"?  The
> only things I've
> >been able to find are in German, and one reference to
> www.iway.com (chain of
> >cyber cafes in India).
> >
> >The best defense against trojans and virus infections is
> to keep your
> >antivirus software updated and scan your system
> regularly.  Also become
> >familiar with the items listed in the Startup tab of
> MSCONFIG and the items
> >that are normally running in Task Manager.
> >
> >-- 
> >Doug Knox, MS-MVP Windows XP/ Windows Smart Display
> >Win 95/98/Me/XP Tweaks and Fixes
> >http://www.dougknox.com
> >--------------------------------
> >Associate Expert
> >ExpertZone -
> http://www.microsoft.com/windowsxp/expertzone
> >--------------------------------
> >Please reply only to the newsgroup so all may benefit.
> >Unsolicited e-mail is not answered.
> >
> >"Holly" <anonymous@discussions.microsoft.com> wrote in
> message
> >news:028701c3b6eb$d4896610$a401280a@phx.gbl...
> >> My father is a scumbag computer guy who has done
> several
> >> illegal and unethical acts with his own computer, and
> >> those belonging to others.  He was here at my home on
> >> Thanksgiving, and he kept trying to get access to my
> >> computer.
> >>
> >> Several times he told me about this "great new program
> >> that will help your system run faster."  Both my
> husband
> >> and I told my father SEVERAL times, no way.  Well,
> while
> >> I was setting the table and my husband was carving the
> >> turkey, we got wind that my dad was in our computer
> room.
> >>
> >> He jumped up immediately when my husband walked in.  I
> >> was suspicious, but didn't have time to check things
> out
> >> until now.  I went into our computer's Event Viewer and
> >> saw that he tried to load a program
> >> called "newsticker.exe"
> >>
> >> I entered this into a search engine and related pages
> say
> >> it is a remote trojan backdoor thing that will allow
> him
> >> to get onto our computer.  I am now terrified that he
> has
> >> done something, or will do something very soon.
> >>
> >> I am running Windows XP, and I immediately did a System
> >> Restore on it, back to the day before Thanksgiving.  I
> >> checked all my folders for this file "newsticker.exe",
> as
> >> well as the one the websites told me it would have
> >> created, "glonk.wnk".  Neither of these seem to be
> >> present, but I am still scared.  What else can I check?
> >>
> >> I am not all that computer savvy, thought I have
> learned
> >> some things due to my dad's activities.  Please help
> me!
> >> What else should I do to protect myself, and to make
> 100%
> >> sure that this newstick program is not in use on my
> >> computer?
> >>
> >> Holly
> >
> >
> >.
> >