1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

trojan trouble

Discussion in 'Computer Security' started by metrock 66, Feb 1, 2007.

  1. metrock 66

    metrock 66 Byte Poster

    113
    0
    0
    Hi guys and gals.
    Not posted on here for quite a while so sorry for that, course work and all it involves. But i am getting a little yellow bubble that pops up every now and then stating "system alert:trojan-spy.win32@mx most annoying any way i can get rid of it help much needed thanks in advance. currently running windows xp home ed sp2...
     
    Certifications: None
    WIP: Just started A+
  2. tas121

    tas121 Nibble Poster

    88
    1
    19
    im getting the same alert aswell! tryd to delete it with anti spyware but still doesnt go away hope some one could help on here
     
    WIP: A+,mcp.mcdst,mcsa
  3. hbroomhall

    hbroomhall Petabyte Poster Gold Member

    6,623
    115
    224
    This looks like a smitfraud trojan.

    There is a fairly comprehensive set of instructions for removal here.

    Note that Ewido free is now AVG Anti-spyware free. I haven't tried it under the new name so I can't be 100% sure that it will work the same way.

    Harry.
     
    Certifications: ECDL A+ Network+ i-Net+
    WIP: Server+
  4. hbroomhall

    hbroomhall Petabyte Poster Gold Member

    6,623
    115
    224
    Get a better anti-spyware! Which one are you using?

    Harry.
     
    Certifications: ECDL A+ Network+ i-Net+
    WIP: Server+
  5. tas121

    tas121 Nibble Poster

    88
    1
    19
    im using avg anti spyware but it still doesnt delete the trojan for some reason :blink
     
    WIP: A+,mcp.mcdst,mcsa
  6. hbroomhall

    hbroomhall Petabyte Poster Gold Member

    6,623
    115
    224
    Ah! This is why the instructions say to use Smitfraudfix to remove this particular problem.

    Harry.
     
    Certifications: ECDL A+ Network+ i-Net+
    WIP: Server+
  7. tas121

    tas121 Nibble Poster

    88
    1
    19
    is this downloadable and free of charge?
     
    WIP: A+,mcp.mcdst,mcsa
  8. tas121

    tas121 Nibble Poster

    88
    1
    19
    thank you for the info just got rid of that annoying thing!
     
    WIP: A+,mcp.mcdst,mcsa
  9. hbroomhall

    hbroomhall Petabyte Poster Gold Member

    6,623
    115
    224
    Glad that worked.

    Suggestions for *keeping* these things out of the machine:

    You are using AVG - which is fairly good (what do you expect for free? :biggrin )
    Use Firefox instead of Internet Explorer
    Use Thunderbird instead of Outlook/Express. Both from mozilla
    Use Zonealarm instead of the built-in firewall

    Harry.
     
    Certifications: ECDL A+ Network+ i-Net+
    WIP: Server+
  10. tas121

    tas121 Nibble Poster

    88
    1
    19
    iv got avg anti spyware which is great considering its free! have you got a link for zonealarm and what does it do?
     
    WIP: A+,mcp.mcdst,mcsa
  11. hbroomhall

    hbroomhall Petabyte Poster Gold Member

    6,623
    115
    224
    You can find it here. Make sure you download the *free* edition, rather than a 30day trial of the paid-for editions.

    It is a Firewall - and replaces the rather inadequate firewall in XP.
    The main reason for it being better is that it will spot nasties trying to 'phone-home'; which the MS firewall won't do.

    Harry.
     
    Certifications: ECDL A+ Network+ i-Net+
    WIP: Server+
  12. tas121

    tas121 Nibble Poster

    88
    1
    19
    where is the free edition? the only one i can find is the 15 day free trial!
     
    WIP: A+,mcp.mcdst,mcsa
  13. hbroomhall

    hbroomhall Petabyte Poster Gold Member

    6,623
    115
    224
    :p

    On the link I gave click on "Home & Home Office" on the list on the left. This will open up a submenu. Click on "ZoneAlarm" (just that - not Pro or anything else) at about #5 on the submenu.

    Harry.
     
    Certifications: ECDL A+ Network+ i-Net+
    WIP: Server+
  14. metrock 66

    metrock 66 Byte Poster

    113
    0
    0
    Used smitfraudfix now it seems the problem has gone:D thanks for the info...hbroomhall i am currently using opera browser,zone alarm and avg would you suggest any changes to reduce the risk of this happening again??
     
    Certifications: None
    WIP: Just started A+
  15. tas121

    tas121 Nibble Poster

    88
    1
    19
    thanks hg i have to say zone alarm is top quality an plus its free :D
     
    WIP: A+,mcp.mcdst,mcsa
  16. hbroomhall

    hbroomhall Petabyte Poster Gold Member

    6,623
    115
    224
    What are you using for email?

    I don't know Opera. The main reason I suggest Firefox is that it has 'extensions', one of which is 'NoScript'. I use that to stop all web-based scripts except on sites I know are safe. This is much finer control than the usual 'all or nothing' control you find in IE.

    The rest looks good.

    Harry.
     
    Certifications: ECDL A+ Network+ i-Net+
    WIP: Server+
  17. metrock 66

    metrock 66 Byte Poster

    113
    0
    0
    thanks for that i am currently using outlook.
     
    Certifications: None
    WIP: Just started A+
  18. hbroomhall

    hbroomhall Petabyte Poster Gold Member

    6,623
    115
    224
    <shudder> Outlook is just as hole-ridden as IE. Change to an email client that behaves! Thunderbird or Agent for example.

    Harry.
     
    Certifications: ECDL A+ Network+ i-Net+
    WIP: Server+
  19. Bluerinse
    Honorary Member

    Bluerinse Exabyte Poster

    8,871
    167
    256
    That's all good. Now you just need to employ safe surfing tactics ie avoid sites that may host malicious content, avoid using file sharing software BT stuff and avoid the temptation to delve into wares, keygen sites. Just stick to sites you trust, never open emails from people you don't know. Oh and if you really want your PC to be secure, unplug the damn thing :biggrin
     
    Certifications: C&G Electronics - MCSA (W2K) MCSE (W2K)
  20. metrock 66

    metrock 66 Byte Poster

    113
    0
    0
    Just a quick thanks to harry for the info and advice everything is ok know (changed to thunderbird)...:D And for bluerinse it might be a bit to secure if i actually turn it off anyway thanks for advice much appriceated:D.....
     
    Certifications: None
    WIP: Just started A+

Share This Page

Loading...