1
   

trojans, parasites, problems with Word, and fu*king kazaa.

 
 
Reply Mon 29 Mar, 2004 02:16 pm
ok... i need some serious help. my fantastic little brother accidentally upgraded the version of kazza that i have on my computer, and since then i have had nothing but problems and frustration with my system.
i tried to talk with a gateway tech for 20 minutes, and all he ended up doin was trying to get me to buy some more crap from them.

1. i have done a virus check on my system through symantec online:
Your computer is infected with at least one known virus or Trojan horse.
75385 files scanned, 11 file(s) infected on your disk drives.
No viruses were detected in memory.
Your computer is free of known viruses and Trojan horses. Virus Detection does not check compressed files.
Your computer appears safe for now. If you want to protect your computer from viruses, hackers and privacy threats, upgrade to Norton Internet Security.
No viruses were detected in memory.
The scan was cancelled before finishing. To restart the scan, click here.
Your computer is free of known viruses and Trojan horses. Virus Detection does not check compressed files.
Your computer appears safe for now. If you want to protect your computer from viruses, hackers and privacy threats, upgrade to Norton Internet Security.
Warning! The scan detected a virus that is active in your computer's memory.
The scan ended to prevent further infection.
You should shut down your computer immediately and restart it with an antivirus rescue disk or similar tool.
No viruses were detected in memory.
Your computer is infected with at least one known virus or Trojan horse.
No viruses were detected in memory.
Your computer is infected with at least one known virus or Trojan horse.
Note: The scan was cancelled before finishing. There may be more infected files on this computer.
Search for the name of the virus(s) listed below on the Symantec Security Response site for removal information.
A scan has not been run. To start Virus Detection, click here.
c:\Program Files\iMesh\Client\FTP_back.exe is infected with Backdoor.FTP_Bmail
c:\WINDOWS\Desktop\music\Music Stuff\Winamp Plugin For Aim.exe is infected with W32.HLLP.Handy
c:\WINDOWS\Desktop\music\Music Stuff\cdripper_1.39.exe is infected with W32.HLLP.Handy
c:\WINDOWS\Desktop\music\Music Stuff\kmdupdate.exe is infected with W32.HLLP.Handy
c:\WINDOWS\Desktop\music\Music Stuff\lakefree.exe is infected with W32.HLLP.Handy
c:\WINDOWS\Desktop\music\Music Stuff\Sims - Art Studio.exe is infected with W32.HLLP.Handy
c:\WINDOWS\Desktop\alexis\more **** to sort\def_ss.exe is infected with W32.HLLP.Handy
c:\WINDOWS\SYSTEM\bm_insta.exe is infected with Backdoor.FTP_Bmail
c:\WINDOWS\SYSTEM\attnvg.exe is infected with Backdoor.FTP_Bmail
c:\WINDOWS\SYSTEM\istabm.exe is infected with Backdoor.FTP_Bmail
c:\WINDOWS\SYSTEM\driverpg.exe is infected with Backdoor.FTP_Bmail

now, what is so incredibly bizarre about that copy n paste is that 3/4 of that does NOT appear on the page i copied it from.

2. i ran http://www.doxdesk.com/ :

Your browser appears to have the "FavoriteMan" parasite installed. This software can compromise your computer's security, and may present you with unwanted advertising. It might have been installed without your knowledge. Information and removal instructions.

Your browser appears to have the "ShopAtHomeSelect" parasite installed. This software can invade your on-line privacy and compromise your computer's security, and may cause errors and stability problems. It might have been installed without your knowledge. Information and removal instructions.


3. i ran the ad-aware software on my computer:
Scan initialized on 03/29/2004 2:18:59 PM.
(AAW release 5.71, referencefile 103-07.04.2002)
=================================================


Started memory scan
====================
Running processes:

#:1 : C:\WINDOWS\SYSTEM\KERNEL32.DLL

#:2 : C:\WINDOWS\SYSTEM\MSGSRV32.EXE

#:3 : C:\WINDOWS\SYSTEM\SPOOL32.EXE

#:4 : C:\WINDOWS\SYSTEM\MPREXE.EXE

#:5 : C:\WINDOWS\GWMDMMSG.EXE

#:6 : C:\WINDOWS\SYSTEM\mmtask.tsk

#:7 : C:\WINDOWS\EXPLORER.EXE

#:8 : C:\WINDOWS\SYSTEM\SYSTRAY.EXE

#:9 : C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE

#:10 : C:\WINDOWS\LOADQM.EXE

#:11 : C:\WINDOWS\SYSTEM\MSBB.EXE
Warning! NCASE : msbb.exe (msbb.exe)

"msbb.exe" unload successfull!


#:12 : C:\WINDOWS\SYSTEM\SAHAGENT.EXE

#:13 : C:\PROGRAM FILES\AIM95\AIM.EXE

#:14 : C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE

#:15 : C:\WINDOWS\SYSTEM\WMIEXE.EXE

#:16 : C:\WINDOWS\R6VQXGTR.EXE

#:17 : C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE

#:18 : C:\WINDOWS\SYSTEM\DDHELP.EXE

#:19 : C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE

#:20 : C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE

#:21 : C:\WINDOWS\SYSTEM\SIMSGM.EXE

#:22 : C:\WINDOWS\NOTEPAD.EXE

#:23 : C:\PROGRAM FILES\LAVASOFT AD-AWARE\AD-AWARE.EXE

Memory scan result:
Total modules found:23
Suspicious modules found:1


Started registry scan
======================
NCase key:HKEY_CURRENT_USER\software\180solutions\msbb\
NCase key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\msbb\
NCase key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\ncase\


Started deep registry scan
===========================
NCase value:Software\Microsoft\Windows\CurrentVersion\Run:msbb


Registry scan result:
Suspicious keys found :4


Started folder scan
====================
Warning, no disk in drive (A)

NCase file:C:\WINDOWS\msbb.exe
Folder scan result:
Folders processed:4689
Suspicious folders found:0


Started file scan
==================
NCase file:C:\WINDOWS\SYSTEM\msbb.exe
Other file:C:\WINDOWS\Profiles\alexis\Cookies\alexis@sexlist[2].txt
Other file:C:\WINDOWS\Profiles\alexis\Cookies\alexis@sextracker[2].txt
Other file:C:\WINDOWS\Profiles\alexis\Cookies\[email protected][2].txt
Other file:C:\WINDOWS\Profiles\alexis\Cookies\alexis@valueclick[1].txt
NCase file:C:\WINDOWS\msbb.exe

File scan result:
Suspicious files found:7



Scan complete
==============
Suspicious modules found:1
Suspicious keys found :4
Suspicious folders found:0
Suspicious files found:7
=========================
Spyware components ignored:0
Spyware components found total:12


i know that my computer has NCase on it, and i have not yet touched any of this basically. i need some serious help.
another question i have is this: i had set up 2 other user accounts on my computer last week so that the rest of my computer illiterate family could play online without going through my crap. well, i noticed that there are exe programs downloaded to the desktops of those user accounts. should i delete the other accounts or will that not solve the problem?

also, my microsoft word has been giving me a horrible time as well since all of this happened... i havent written the text of the error messages down yet, but i figured it may be something thats fixable when the parasites/viruses are removed.

in regards to kazaa: i had the old version, and i suppose now i have the upgraded one. is there anyway to revert to the old version minus the ridiculous spyware? i refuse to pay for that crap.

please help! i need this computer for school! im not necessarily a genius when it comes to computers, but i can learn quickly... i have windows 98 if that is needed...

~feiticeira~
  • Topic Stats
  • Top Replies
  • Link to this Topic
Type: Discussion • Score: 1 • Views: 1,203 • Replies: 3
No top replies

 
feiticeira
 
  1  
Reply Mon 29 Mar, 2004 02:18 pm
Rolling Eyes
oh yea, and i dont know nothin bout that "sextracker" crap.
hah.
funny how that sllllllllllllllllllllllick software just throws my name right in there... is that legal? hm.
0 Replies
 
feiticeira
 
  1  
Reply Tue 30 Mar, 2004 11:26 pm
everyones lookin but no ones helping!
im pouting. =(

*sniffle*
0 Replies
 
Heliotrope
 
  1  
Reply Wed 31 Mar, 2004 04:23 am
OK, so you ran the scans.
Did you get the software that found the parasites etc... to remove them ?
0 Replies
 
 

Related Topics

Clone of Micosoft Office - Question by Advocate
Do You Turn Off Your Computer at Night? - Discussion by Phoenix32890
The "Death" of the Computer Mouse - Discussion by Phoenix32890
Windows 10... - Discussion by Region Philbis
Surface Pro 3: What do you think? - Question by neologist
Windows 8 tips thread - Discussion by Wilso
GOOGLE CHROME - Question by Setanta
.Net and Firefox... - Discussion by gungasnake
Hacking a computer and remote access - Discussion by trying2learn
 
  1. Forums
  2. » trojans, parasites, problems with Word, and fu*king kazaa.
Copyright © 2025 MadLab, LLC :: Terms of Service :: Privacy Policy :: Page generated in 0.03 seconds on 12/22/2025 at 02:35:25