Printable View
https://discussions.virtualdr.com/im.../2002/05/1.jpg
I found this very suspicious thing in c:/windows and found a site about it HERE, but it's in German. I used AltaVista to translate the page, but it did a pretty poor job.
Insights anyone, please!
TIA...
------------------
^dAvEy^
just did a quick browse of their site and I think I'd stay away (full of dialers and such) https://discussions.virtualdr.com/
hi there IMM - thanks.
ya, I certainly didn't intentionally hook up to this thing - I got rid of the exe and a couple shortcuts - not sure what else to look for...
you think it's a trojan?
any further suggestions?
wondering if it's got anything to do with all the ZA hits I've been getting...
TIA...
------------------
^dAvEy^
dunno anything about it - could look where it makes you nervous if you can point me at where you think you got it. For example - do you think that the original download was called decrypter.exe or similar (appears to be a upx packed thingy)
[This message has been edited by IMM (edited 05-13-2002).]
thanks, but no clue, man
------------------
^dAvEy^
thanks again, guys...
a search for *decrypter* (included *) came up clean, johnking & IMM...
have ZA running and on ADSL...
I have never used a "dialer" on this pc, and don't plan to.
I have already dumped it, John - just looks slimy to me!
a-v comes up clean, but haven't scanned for trojans - been waiting for ANTS 3.0
>>Dialup Networking folder
searched for this too, John - do I likely even have such a directory?
------------------
^dAvEy^
didn't that site say something in German about winZip?
I found the following along this path:
C:\WINDOWS\Temporary Internet File...\X81POU7U\dialer_winzip[1].htm
------------------
^dAvEy^
Thanks John
>>Double click My Computer, the Dial-Up Networking folder is in there...
- nope, not in there
>>That is the site you posted
- um, thanks https://discussions.virtualdr.com/
ran regcleaner and found this little sucker in startup!
don't know how it got there or understand:
GrpConv
------------------
^dAvEy^
[This message has been edited by ^dAvEy^ (edited 05-13-2002).]
Run adaware daily.
>>Hey Davey, you on a paranoia trip?
- haha! apparently?
look, when I find something I know nothing about like that "hag" thing, for instance, I check out stuff like startup, etc...
One thing's for sure, GrpConv hasn't been in there for long, so while looking for anything that's changed recently, I found one - apparently an irrelevant one though.
Thanks for settling me down, johnking! https://discussions.virtualdr.com/oh, sometimes twice!Quote:
Originally posted by saturnsl:
Run adaware daily.
------------------
^dAvEy^
[This message has been edited by ^dAvEy^ (edited 05-13-2002).]