IDIOT + LIMEWIRE = TROJAN

Discussion in 'malware problems & news' started by CartoonBoy, Jan 23, 2008.

Thread Status:
Not open for further replies.
  1. CartoonBoy

    CartoonBoy Registered Member

    Joined:
    Jan 10, 2005
    Posts:
    1,136
    Location:
    32? 56'S 151? 44'E
    Hi All

    In my stupid quest to save some $$ I downloaded a key generator from limewire for a software program. I scanned it with my AVG ( FULLY PAID VERSION ) and it showed no danger so I opened it and ran the file.

    Surprise Surprise nothing happened until I had several windows pop up telling me I had malware and all kinds of stuff. I did an AV scan of my PC and luckily wrote down the infections before I went to delete them because when I hit the delete button I also lost avgas.exe file. It is gone and so is my anti-virus !!

    I have no protection.

    I know this was stupid.

    The AV found these:

    Not-A-Virus.Monitor.win32.NetMon.a..... ( couldnt see the rest )
    Adware.CommAd
    Not-A-Virus.Adware.Virtumonde
    Adware.2Quest
    Not-A-Virus.Adware.TTC
    Dropper.Agent.dgo
    Trojan.Agent.cmn
    Trojan.Small


    Any advice ? :doubt:
     
  2. C.S.J

    C.S.J Massive Poster

    Joined:
    Oct 16, 2006
    Posts:
    5,029
    Location:
    this forum is biased!
    Download drweb cureit from my sig.
     
  3. Meriadoc

    Meriadoc Registered Member

    Joined:
    Mar 28, 2006
    Posts:
    2,642
    Location:
    Cymru
    + learned lesson

    If you need to ask then you really need to goto a malware removal forum, or try an online av scan or perhaps cureit from DrWeb

    Think about getting an imaging program such as ATI.

    Don't open totally unknown programs on your productive machine.
     
  4. CartoonBoy

    CartoonBoy Registered Member

    Joined:
    Jan 10, 2005
    Posts:
    1,136
    Location:
    32? 56'S 151? 44'E
    ok I'll try it now and let you know.
     
  5. ASpace

    ASpace Guest


    Congratulations ! Hope you learned a good lesson that you get what you paid for ! :)

    Register in a forum which provides malware cleaning services such as Forum.Aumha.org and post your request + a HijackThis v2 log . Leave the experts lead you :thumb:
     
  6. ProSecurity

    ProSecurity Registered Member

    Joined:
    Dec 13, 2007
    Posts:
    123
    I must say, I am just dumbfounded that a "Very Frequent Poster" who has been a member here for over three years would rely solely on blacklist-based software for protection, instead of running an unknown keygen in a sandbox or a VM.
     
  7. Xenophobe

    Xenophobe Registered Member

    Joined:
    May 26, 2007
    Posts:
    174
    Post count doesn't relate to his security setup.
     
  8. Old Monk

    Old Monk Registered Member

    Joined:
    Feb 8, 2005
    Posts:
    633
    Location:
    Sheffield, UK
    .....especially if he/she hung around mostly at Ten Forward as opposed to the ''other anti-malware'' forum.

    ;)
     
  9. ProSecurity

    ProSecurity Registered Member

    Joined:
    Dec 13, 2007
    Posts:
    123
    I am not referring to his security setup, I am referring to the decisions that he made when using that setup.
    My point was that even with all the veterans that we have here, it is apparently still best to take any recommedation with a grain of salt.
     
  10. Sjoeii

    Sjoeii Registered Member

    Joined:
    Aug 26, 2006
    Posts:
    1,240
    Location:
    52?18'51.59"N + 4?56'32.13"O
    Haha
    well said HT :cool:
     
  11. Xenophobe

    Xenophobe Registered Member

    Joined:
    May 26, 2007
    Posts:
    174
    I would say his decisions make up his security setup. If he had Sandboxie in his setup, I'm sure he would of ran it in a sandbox.
     
  12. ProSecurity

    ProSecurity Registered Member

    Joined:
    Dec 13, 2007
    Posts:
    123
    I am impressed that you can be "sure" of what someone else would do if they had more options. :cautious:
     
  13. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    This is surely not the lesson he is supposed to get from this incidence.
    Lesson is not to install so called keygenerators, cracks!
     
  14. CartoonBoy

    CartoonBoy Registered Member

    Joined:
    Jan 10, 2005
    Posts:
    1,136
    Location:
    32? 56'S 151? 44'E
    Thanks to CSJ and Meriadoc looks like its cleared up but waiting for hijackthis log to be checked.

    AVG stays installed after startup and scans are clean again. Although I am considering another AV after all that.

    You are LEGENDS !!

    And I did spend majority of my time clowning around at Ten Forward :D
     
  15. C.S.J

    C.S.J Massive Poster

    Joined:
    Oct 16, 2006
    Posts:
    5,029
    Location:
    this forum is biased!
    did cureit fix your computer then? ;)

    another one bites the dust, eh?
     
  16. CartoonBoy

    CartoonBoy Registered Member

    Joined:
    Jan 10, 2005
    Posts:
    1,136
    Location:
    32? 56'S 151? 44'E
  17. zapjb

    zapjb Registered Member

    Joined:
    Nov 15, 2005
    Posts:
    3,518
    Location:
    USA - Back in a real State in time for a real Pres
    OT. Great topic title! :D
     
  18. ProSecurity

    ProSecurity Registered Member

    Joined:
    Dec 13, 2007
    Posts:
    123
    I don't understand why this is with the "other anti-virus software" threads, since:
    1. The OP mentioned avgas.exe, which if IIRC is the AVG AntiSpyware executable, and
    2. The title states, "TROJAN".

    Can someone clue me in?
     
  19. C.S.J

    C.S.J Massive Poster

    Joined:
    Oct 16, 2006
    Posts:
    5,029
    Location:
    this forum is biased!
    I'm surprised Avg did not clean it properly, or at least better than it did.

    Lucky for you, drweb offer such a tool. ;)
     
  20. Macstorm

    Macstorm Registered Member

    Joined:
    Mar 7, 2005
    Posts:
    2,531
    Location:
    Sneffels volcano
    Next time, KasperskyFileScanner for every file downloaded.
     
  21. WSFuser

    WSFuser Registered Member

    Joined:
    Oct 7, 2004
    Posts:
    10,632
  22. computer geek

    computer geek Registered Member

    Joined:
    Oct 6, 2007
    Posts:
    776
    try m:D c:D a:D ...:oops: too late.
     
  23. C.S.J

    C.S.J Massive Poster

    Joined:
    Oct 16, 2006
    Posts:
    5,029
    Location:
    this forum is biased!
    Well done ;)

    another vote for real time perfomance over so-called huge tests and percentage figures.
     
  24. ellison64

    ellison64 Registered Member

    Joined:
    Oct 5, 2003
    Posts:
    2,499
    The problem is ,that some trial software is of limited functionality ,and an evaluation sometimes cannot be made without a fully fuctional trial of the software (imo).Not condoning it ,but on occasions i do understand the need to trial a full version ,and unfortunately keygens can provide just that avenue.
    ellison
     
  25. Fuzzfas

    Fuzzfas Registered Member

    Joined:
    Jun 24, 2007
    Posts:
    2,753
    My deepest condolences for an unlucky guy. According to the latest test,

    http://blog.chip.de/0-security-blog/security-suiten-2008-im-test-q12008-20080122/

    with AVG, you had a 98,1% chance to nail that malware. But, dang it, you fell in that tiny 1,9%! :doubt: Malware at Jotti's very often prefers the improbable too.


    Morale of the story. There are 3 kind of lies: Lies, damn lies and statistics - Mark Twain.
     
Loading...
Thread Status:
Not open for further replies.