Author |
Topic: Wrong fucking board....... (Read 765 times) |
|
jonny
Guest
|
I posted this on the wrong board
Here it is.
How to get rid of these
Trojan horse Downloader.Turown.C
Trojan horse Downloader.Turown.A
I've tried
Stinger
AVG
Norton
Spybot
Trojan remover
Trend micro security
Webshredder
Adaware
AVG picks it up but does nothing with it, just fucking tells me it's there.
|
| « Last Edit: Mar 28th, 2004, 5:00pm by jonny » |
 IP Logged |
|
|
|
snyder
New Board Veteran
Nothing can hurt me as much as my head.
  
Gender: 
Posts: 143
|
 |
Re: Wrong fucking board.......
« Reply #1 on: Mar 28th, 2004, 5:03pm » |
 Quote  Modify
|
Go back to the other board. I posted a reply.
Bill
|
|
IP Logged |
"Comedy is the last refuge of the nonconformist mind." -- Edward Albee
|
|
|
Superpain
New Board Hall of Famer
GOT O2!?
Gender:
Posts: 1351
|
|
Re: Wrong fucking board.......
« Reply #3 on: Mar 28th, 2004, 5:17pm » |
Quote Modify
|
try spysweeper...
You can goto webroot.com and check it out.
If you buy it, it comes with a subscription service that updates weekly. It works very well.
|
| « Last Edit: Mar 28th, 2004, 5:22pm by Superpain » |
IP Logged |
Chris
|
|
|
Lobster
CH.com Alumnus
New Board Hall of Famer
Gender:
Posts: 2016
|
|
Re: Wrong fucking board.......
« Reply #5 on: Mar 28th, 2004, 8:03pm » |
Quote Modify
|
You are going to have two problems...
First...Turown gets into your system like STDs get into a $10 crack ho... it is all over the place... quite invasive.
Second... it is really rare. It is not a netsky or a mydoom. Therefore all the great minds of the anti world are not working on a cure.
As suggested, go with TrojanHunter and ActiveScan and spysweeper. Great as they are though, the Turown variants are nasties on planet trojan... real biatches.
If those do not do the trick, the cure being suggested out there, if you are not an uber-tech or have first hand access to an uber-tech for 4-5 hours, is to backup your important files then wipe your system with a fresh install. Yes, that blows.
Rok
|
| « Last Edit: Mar 28th, 2004, 8:03pm by Lobster » |
IP Logged |
Rock beats Scissors.
|
|
|
Lobster
CH.com Alumnus
New Board Hall of Famer
Gender:
Posts: 2016
|
|
Re: Wrong fucking board.......
« Reply #6 on: Mar 28th, 2004, 10:37pm » |
Quote Modify
|
Know that if you are running XP or 2K then your uber-geek does not need to be local... it can be a close trusted buddy, such as someone you know on this board with said skillz.
You can get them on the horn, then they can talk you through how to your configure your system and drop your firewall enough for them to log in remotely and fix you right up.
Make sure it is someone you like enough that if they hose your system you are ok with that. Nasty stuff you got there.
Wrokk Robstah
|
| « Last Edit: Mar 28th, 2004, 10:37pm by Lobster » |
IP Logged |
Rock beats Scissors.
|
|
|
brain_cramps
New Board Hall of Famer
Gender:
Posts: 2103
|
|
Re: Wrong fucking board.......
« Reply #7 on: Mar 28th, 2004, 10:44pm » |
Quote Modify
|
on Mar 28th, 2004, 10:37pm, Rock_Lobster wrote:Make sure it is someone you like enough that if they hose your system you are ok with that. Nasty stuff you got there.
Wrokk Robstah |
|
Sounds like a job for the Wrokk.
(can't say as i want a chance at screwing up jonny's computer  )
Let us know how it goes,
grant 
|
|
IP Logged |
|
|
|
Mark C
CH.com Alumnus
New Board Hall of Famer
Onward through the fog.
Gender:
Posts: 2660
|
|
Re: Wrong fucking board.......
« Reply #8 on: Mar 29th, 2004, 12:19am » |
Quote Modify
|
Nasty critter there jonny....where you been?!
Looks like this nasty likes to reside in the "System Restore" section of your HD. Disable this handy fuction and then run the removal tool. To disable Restore in WinXP and 2000 look here and for WinME look here.
Then use one of the many on-line scans provided or maybe even AVG can get to it once you disable Restore.
Per Tony Klien, an "uber-geek" if there ever was one...
"It's just because your Restore folder is protected, and Antivirus software is unable to modify its contents.
You'll need to flush that folder:
1. On the Desktop, right-click My Computer.
2. Click Properties.
3. Click the System Restore tab.
4. Check Turn off System Restore.
5. Click Apply, and then click OK.
6. Restart the computer.
All data, including your virus, will be purged from the restore folder.
7. Run your antivirus once more.
After rebooting, re-enable System Restore. "
Look here.
More information on System Restore can be found here.
I am concerned how you got this bug...an open port maybe? I know you are "always-on" broadband so it is possible your firewall is not plugged up. Go here and do a port scan and see if you got holes in your wall dude.
For a really good read on how to prevent such infections, again by uber geek Tony Klien look here.
If you like REALLY nasty bugs....
Quote:| Most infected computers will have to be rebuilt from scratch unless their owners instead decide to buy new ones |
|
Look here for a read on the "Witty" worm. It is expected to die quickly because it destroys it's host.....not your average script kiddie stuff.
Let me know how it goes King,
See ya,
Mark
|
|
IP Logged |
Click The Flag
|
|
|
Root
New Board Veteran
rm -r *.*
Gender:
Posts: 229
|
|
Re: Wrong fucking board.......
« Reply #9 on: Mar 29th, 2004, 2:05am » |
Quote Modify
|
From the looks of it. All things being equal. What with the trouble and all that you have to go trhough over this. Might I suggest a different tactic. That should prove more beneficial in the long run.
FTP://limestone.uoregon.edu/pub/linux/fedora/core
My personal preference is BSD, but for the "average" user that appears to me to be the best all around solution to most of the current problems.
Your milage may differ ofcourse.
Best of luck. Be careful out there. 
|
|
IP Logged |
In the land of the dark the Ship of the Sun is driven by the Grateful Dead. -- Egyptian Book of the Dead
|
|
|
cootie
New Board Hall of Famer
sumday I'm gonna be sumbody........ ..
Gender: 
Posts: 8406
|
|
Re: Wrong fucking board.......
« Reply #10 on: Mar 29th, 2004, 10:33am » |
Quote Modify
|
I've read to run Stinger succesfully you 'have' to disable systems restore cuz virus's hide in there and it won't find them. But if you do that you will not be able to go back beyond the date you did it to restore anything you muss up now or later. Hope you got rid of yer bugs by now Pam
PS: I had to buy a new PC recently cuz my mine peuk'd a motherboard furball. Anyhow....I went to onea the small private owned computer stores and lots of people were walkin in with there pc's and the guys hook em up out back to scan for virus's and remove them for them for small fee. Did it while ya wait too. I got to stand around and watch em for a while.....interesting ! They had all sorts of high tech shit to do it and software. Mite be an option ta think about if anyone else gets stuff they can't get rid of.
|
| « Last Edit: Mar 29th, 2004, 10:39am by cootie » |
IP Logged |
Cause and Effect......"Cause is the effect concealed, Effect is the cause revealed"
|
|
|
jonny
Guest
|
|
Re: Wrong fucking board.......
« Reply #12 on: Mar 29th, 2004, 6:49pm » |
Quote Modify
 Remove
|
I want to thank all you folks, It aint fixed but I now know alot more than I did and I have been hanging out over at the computer cop website. Im sure they will be able to help me out.
Thanks again....You all ROCK!!!!
........................jonny
|
|
IP Logged |
|
|
|
Opus
New Board Hall of Famer
(Insert witty comment here)
Gender:
Posts: 2509
|
|
Re: Wrong fucking board.......
« Reply #13 on: Mar 29th, 2004, 9:46pm » |
Quote Modify
|
Kirk!,
Get in here and tell root how it is really done.
Ummmm, must be busy upgrading to the 2.6 kernel.
Well I'll give it a try,
No problem,
Just insert your copy of Fedora core 1, reboot,
and all will become clear.
Jonny, nothing on symantic, man you in trouble!
Do you have a hardware firewall such as a broadband router,
If not run to the store quick.
With the sudden attack of computers through their software firewalls I am thinking of removing the one on the windoze box, or better yet installing knoppix to the hard drive and telling my wife win98 was recalled.
Opus/Paul
|
|
IP Logged |
Zed-Zed-nine plural-Zed alpha,
There is no place like home.
|
|
|
|
|
|
Home
Help
Search
Members
Member Map
Login
Register
Reply
Notify of replies
Send Topic
Print
test rss