Just been infected

[PsyWulf]

Nobody actually got a trojan ever? Hmm much like the cake trojans must be a lie then...

 

[Ou grote]

Nobody actually got a trojan ever? Hmm much like the cake trojans must be a lie then...

Nope.

Anyhow, has the OP had his issue sorted yet?

 

[Ou grote]

I'll probably get one on XP now that I been talking k@k.

 

[PsyWulf]

Just been infected by some nasty k@K :

Submission details:
Submission received: 8 October 2008, 08:23:06
Processing time: 5 min 58 sec
Submitted sample:
File MD5: 0x573B7FA011D03949D6529FF2A3DB6F79
Filesize: 114,695 bytes
Alias: Trojan-Dropper.Win32.Agent.xqr [Kaspersky Lab], TrojanDownloader:Win32/Renos.DU [Microsoft]

It was my bad, I downloaded a exe (don’t even ask) scanned it with NOD32 (updated) and double clicked… and boom! I immediately noted something was horribly wrong when the program did not respond and it created some URL shortcuts on my desktop… followed shortly by some very annoying pop-ups.
It turns out NOD32 does not detect this yet.
I opened security task manager and saw that there was a dll called: msysamd32.dll in system32 that could potentially be malicious. I googled it and found that it could be removed by SmitfraudFix I rebooted in safe mode and removed it. I have used SmitfraudFix some time back to remove nasties, it is a great little app. Clean now whew…

Tead the actual OP alf

 

[gpe]

Thanks for the "Sandboxie" info+link. Useful.

 

[Ou grote]

Tead the actual OP alf

 

[.Froot.]

You people getting virii.... be more careful... please?

 

[UnoPanelvan]

Funny just I had a similar incident when I opened thge thread, only the file was myadsl.dll. Works out that AVG free detected this thread as html on my computer Internet temp folder.

 

[Park@82]

Just a update: NOD32 has not yet added this virus to their database it seems... Its still sitting on my desktop waiting to be detected by my up-to-date NOD32 Whats up with that NOD?

More info: http://www.virustotal.com/analisis/d844f9388d9a821cb8b3f49e567944d5

 

[adamr]

"Attention, following keys are not inevitably infected"

what does the above mean???? no manual for this smitfraudfix

 

[Park@82]

"Attention, following keys are not inevitably infected"

what does the above mean???? no manual for this smitfraudfix

It means that it does not detect infected files in some of the places it scans for viruses... Look through the log c:\rapport.txt to see if it did find an infection and then proceed to clean if it did find something.