04-15-2005, 09:17 AM | #1 |
Ironworks Moderator
Join Date: March 1, 2001
Location: Midlands, South Carolina
Age: 48
Posts: 14,759
|
I ran my weekly virus scan and Avast foundd something that made it through all my operating detections, until now. It was called "erikxx.chm", and it was an "online.exe". I tried to get Avast to delete it but the error message said that it was a shared file, and could not. Then I just deleted it off the location with just a Right-click and delete command. It went away, but Avast also discovered that it was in my Outgoing Box all of the sudden. Avast stopped it from retreating, and I was able to delete it from the Outgoing box. What I forgot to do before restarting the PC was to delete the deleted folder. Since I did not, erikxx found his way back onto the C drive. I deleted him from the deleted folder and the C drive again, and restarted. He is gone for good.
Funny thing, though...is when I decided to look at what he was, I clicked on it to actually run the exe. It only came up with some kind of help screen that had nothing going on. I checked my running operations, and there was nothing there. I checked the startup menu and there was nothing there. By all appearances, this thing was dormant. I did a Google on it, but found no information directly related to it, though I did find people on game forums who use the name ErikXX. Anyway...It was alot easier to get rid of than I would have imagined. Avast would not delete it because it thought it did not have the permission to, but I was able to delete it with the easiest of methods. Just freaking wierd. Oh..I forgot one thing. When I deleted it from the C drive but did not yet know that it was trying to be sent through the Outlook outgoing...When I realized that something was in Outlook, I tried to access Outlook but I was not allowed in! I had to restore Erikxx to the C drive so that I could get into my Outlook profile...delete Erik from the folder, then delete him from the C drive, in that order.
__________________
|
04-15-2005, 09:59 AM | #2 |
40th Level Warrior
|
You did wash your hands afterwards, right ?
__________________
|
04-15-2005, 10:17 AM | #3 |
Jack Burton
Join Date: May 15, 2001
Location: The Netherlands
Age: 39
Posts: 5,888
|
And so everything was safe and sound after all! Tune in next week for a new adventure featuring Larry and his computer!
Bye! *Sesamestreet ending tune*
__________________
Rowing is not a sport, it's a way of life Goal: Beijing 2008 |
04-15-2005, 10:28 AM | #4 |
40th Level Warrior
|
You're such a friendly guy Link.
__________________
|
04-15-2005, 10:43 AM | #5 | |
Jack Burton
Join Date: May 15, 2001
Location: The Netherlands
Age: 39
Posts: 5,888
|
Quote:
__________________
Rowing is not a sport, it's a way of life Goal: Beijing 2008 |
|
04-15-2005, 10:51 AM | #6 |
Elite Waterdeep Guard
Join Date: April 7, 2005
Location: Denmark
Age: 38
Posts: 5
|
If you are using your computer for anything important like moneytransactions/paypal, work etc., I'd definately recommend a format C:.
Trojans have a nasty habit of opening up previously closed ports and stuff like that to further breach your security. Another popular feature of trojans are keyloggers to steal your passwords, so you'll probably want to change them after the format. [ 04-15-2005, 10:56 AM: Message edited by: Crynus ]
__________________
^_ ________________ _ ^ |
04-15-2005, 10:59 AM | #7 | |
Ironworks Moderator
Join Date: March 1, 2001
Location: Midlands, South Carolina
Age: 48
Posts: 14,759
|
Quote:
|
|
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
Peeping Trojan | Knightscape | General Conversation Archives (11/2000 - 01/2005) | 19 | 08-27-2004 10:14 AM |
Want a trojan guys? | Ziroc | General Conversation Archives (11/2000 - 01/2005) | 30 | 06-26-2004 05:28 AM |
trojan in my site | philip | Neverwinter Nights 1 & 2 Also SoU & HotU Forum | 3 | 06-25-2004 03:36 AM |
trojan in my site | philip | Neverwinter Nights 1 & 2 Also SoU & HotU Forum | 0 | 06-23-2004 02:17 PM |
Trojan Virus | Lord | General Conversation Archives (11/2000 - 01/2005) | 24 | 03-14-2004 12:02 PM |