RE: High threat trojan virus or spyware

From: zzmel (zzmel_at_discussions.microsoft.com)
Date: 01/29/05

  • Next message: MAP: "RE: antivirus"
    Date: Fri, 28 Jan 2005 21:05:03 -0800
    
    

    Thanks for the post Dave. I just want to clearify a few things. You said
    that I wasn't careful downloading. I thought that this DIVX site was for
    real. I do download lots of software, Never in almost 9 years have I ran
    into a problem that couldn't be solved with viruses or spyware. That is why
    I have these tools. All the references brought up no information on what you
    recommended. It keeps telling me that it cannot find the server. Your
    statement between the asteriks stating:
    ************************************************************
    I see you are posting from Earthlink via Level 3 Communications using the MS
    CDO web
    front-end so you have your work cut out for you.
    ************************************************************
    I do not understand exactly what you are referring to that I have my work
    cutout. I know that Earthlink is not my server but my connection is
    controlled by whoeverhas put this on my computer. I wish that you can tell
    me more what the MS-CDO web front-end is. I really could use quite a bit of
    help on this as I am really stuck. How do you erraticate something when it
    cannot be found with the exception of what my spyware detection indicates. I
    have other posts on other forums which I still seek a response. I do
    appreciate if you or someone else can give me a clearer understanding what I
    should do. Would it be easier to install my win xp from scratch? Will this
    remove all traces or should I zero the HD out? Should I purchase a software
    package to wipe my drive clean? I know there are a lot of "what ifs" but I
    am getting the feeling that more damage can be done if not taken care of this
    trojan. Don't get me wrong. I do appreciate you communicating with me. I
    hope others can see my messages as well and to hopefully send me any ideas.
    Thanks again.

    > Hi:
    > I was reading up on all the posts, hopefully to find a fix for my problem.
    > It seems that not only spyware is constantly getting on the computer but
    > backdoor trojans as well. According to the posts there are quite a number of
    > users who are experiencing various problems with different trojans. My
    > concern is with the Amitis 1.3 trojan which falls into the RAT catagory.
    > Several days back I downloaded a media player from a web site called DIVX.
    > After this download is when I started to have strange problems with erratic
    > behavior on my computer. I have several spyware checkers and the one that
    > picked it out was CounterSpy. The funny or not so funny part of it is that I
    > cannot delete it automatically, manually, or whatever else. I cannot even
    > find files related to it. It's purposely hidden somewhere, but where? I
    > scanned everything, searched out everything but was not able to find it. I
    > found some resources and I found an excellent descriotion of Amitis on the
    > eTrust Spyware Encyclopedia at this web address.
    > "http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453076220"
    > Not only is there a detailed description but screenshots of what the
    > interface looks like. You would not believe the activities that can have a
    > hacker plague your computer. For example, if you look at the 2nd screenshot,
    > middle column of buttons and take note a the 2 button from the bottom, you
    > will know what I am talking about. When searching for this program, I
    > momentarily found it and gives explicit warnings before entering the site. I
    > trided going back to it again so I could post that web address but unable to
    > find it. It is definitely a hackers download tool site. By the way the
    > author is named: "stacked_shit" who developed the program and is done in
    > Delphi. Also, my Norton antivirus checker did not pick this up. I even have
    > Pest Patrol, Spy Sweeper, Spybot Search and Destroy. Microsoft new spyware
    > checker which is the beta version and System Spyware Integrator which I found
    > a link in this forum. Like I said, the only one that found it was the
    > CounterSpy. Of course some of the others picked up different spyware and was
    > able to rid of it. Counterspy keeps indicating that I still has this very
    > serious threat and will not remove it. Please check out the encyclopedia on
    > eTrust so you can read the info in more detail and also if anyone has
    > experienced this on their computer and please let me know what you find. If
    > anyone has a sure fire way that I can find the trojan, I certainly will be
    > grateful. There are rotten apples in this World and determined to screw up
    > your computer. Before I go, I want to mention the tricks it plays on me.
    > 1. Has made my computer sluggish.
    > 2. When booting up to my desktop, it takes another two minutes before I can
    > do anything with or at least until my Norton Antivirus Monitor appears in my
    > sys tray and during this time, my drive sounds like a buzzer.
    > 3. I found a folder in my computer cabinet that was labeled "help", opening
    > it up showed nothing and being that it is oin my documents folder, it would
    > be safe to delete it. When I did, the computer immediately shut-down without
    > going through the shut-down protocol. After it rebooted, the folder was gone
    > but still took a long time before I could do anything.
    > 5. Believe this or not-it messed up my printer head alignment. I can under
    > something being a little out of align but this was bad. The printouts was
    > garbled. I realigned the heads and far it is aligned.
    >
    > Thats it and please respnd to this message and believe me anything that is
    > pertenent will help. Thank you for reading this.
    >
    > Regards
    >
    >
    >


  • Next message: MAP: "RE: antivirus"

    Relevant Pages

    • RE: High threat trojan virus or spyware
      ... The other security tool is from ... I don't know if these 2 security scan cleaned out the trojan automatically ... download programs from well known sites like Snap Files, ZDNET, CNET, Tucows, ... I have several spyware checkers and the one that ...
      (microsoft.public.windowsxp.security_admin)
    • Re: New Trojan directs links to Porn pages
      ... Download: "RepairDefaultPrefix.reg" ... Download "Hijack This!" ... go to the "Spyware and Hijackware Removal" section. ... >> Is there anyway of removing the trojan from my computer? ...
      (microsoft.public.security.virus)
    • Re: msconfig is missing
      ... the file is missing, it may have been deleted by a spyware or trojan.. ... system or google for a download and paste it in the Binaries folder. ...
      (microsoft.public.windowsxp.newusers)
    • RE: Explorer causing error in <unknown>
      ... be infected by either a spyware or trojan. ... http://spychecker.com/program/adaware.html (Click on the Download Now button) ... > open IE. I've tried re-installing but to no avail. ...
      (microsoft.public.windows.inetexplorer.ie6.browser)
    • AD AWARE
      ... ad aware free download ... lavasoft ad aware ... free ad aware spyware ...
      (sci.crypt)