Uh oh! Someone sent me a sub7 trojan virus...

[AlphaIVT]

How do I PROPERLY clean this trojan out? I've heard that it duplicates its name to +70 filenames. InocculateIT found the file in my WINDOWS directory.

I want to bust this guy, I'm installing Netowrk Ice Defender now, so I know whose trying to mess with my computer. It could be a person from this forum, so I might need the mod's help, but maybe not.

I notice that my computer restarted for no reason earlier today, so i just ran a scan check when I went to brush my teeth, then this virus comes up.

I will bump this thread tomorrow morning for more assistance, but doesn anyone know how to clean this trojan out without messing my computer up?

 

[DannyLove]

who are you accusing? how can they have sent you a virus from posting? scan it with everything you got

 

[AlphaIVT]

lol, i'm not stupid, i din't say that it was from posting, jeezus
I've been doing some file trading lately with some members of this board. NOT accussing

 

[yakko]

Just download the program connect to yourself and kill server.

 

[Plantanthera]

Just look for the virus signature iin system tray, and check the file size, then boot to Dos to search for all files with signature to Del. Then search for file size and look over to see if there are any funny looking files that shouldn't be there. (This method is way better than Virus Scan programs, because you don't have to look for virus update).

 

[AlphaIVT]

okay, bumped.

I'm planning on reformatting to Win2k FAT32 this week after I copy all my stuff, but first I want to know who this guy is, anyway that I can find his IP?

 

[konichiwa]

Yes, but only if you have his IP address.

 

[Entity]

lol@Koni.

If you uninstall all your firewall stuff, wait for him to strike, and do a netstat -a, that might help. Or you could just run an IP logging program that logs ALL IP access attempts to your computer.

It could also be from that speed hack program, possibly.

Rob

 

[urbantechie]

OMG, thats sucks...

 

[AlphaIVT]

sh!t, I'm not sure if I cached any of my passwords or not. man! i hate this, who ever this is, is someone that I've communicated with before.

 

[BigLance]

I have that program (no it was not me). I was only able to make it work on a friends machine Someone used it on me and I was trying to get revenge

Anyway, I beleive yakko is right, might save you a format ?

Anyway, sorry to hear, that program is REALLY harsh !!!!

 

[AlphaIVT]

i've used this program before, but my friend got hit with it and it spawned everywhere, he couldn't open up any programs because it'd ask for a missing file that never existed on his computer before.

I'm using BlackIce Defender now, is this program any good? I heard that it was the best firewall/hacker securtiy program

 

[Pyro]

Oh man....i love that proggie! Too bad I don't have any reason to use it on my friends

If you want to remove the program, please send me you IP and I can help you