Antivirus Protection
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsSystem AdministrationAntivirus Protection

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #16  
Old June 3rd, 2004, 05:24 AM
jasperlord jasperlord is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: May 2004
Location: Letchworth Garden City
Posts: 16 jasperlord User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Last in this thread

Thanks for the suggestion, this is not the problem. Norton is being targeted by this trojan, supervisor window appears but it's not the norton supervisor password window, see below. I'm almost ready to quit BUT I'm not going to. I want to solve this problem without the big format command !
Current situation is, dllfix, cwshredder and adaware don't resolve. It returns very quickly. I used ravantivirus which found ukm.exe, bridge.exe, uk7.exe, dc31.dll, dc32.dll, iddm.dll and interfast.exe. They're all deleted now, then run dllfix, cwshredder and adaware. Re-installed Norton and all ok until a program tried to access via explorer, which I blocked (I didn't write down but I think it was something like msimn.exe) but didn't seem to work as Norton nobbled straightaway. ie cannot access firewall setup and intrusion detection and privacy control turned off with no option to turn on. No access to network is achievable in this condition.
Once Norton firewall uninstalled network access returns. Not sure if this is intentional or just crap coding by the trojan.
I surely cannot be the only person with this trojan which purports to be CWS searchx so I will be posting this to other similar boards for wider exposure and starting a new thread here.
Thanks again for your help and please continue with your advice.
Currently all shows ok but Norton firewall not installed.

Kevin

Reply With Quote
  #17  
Old June 3rd, 2004, 07:11 PM
Tom Myboy Tom Myboy is offline
Contributing User
Dev Shed Regular (2000 - 2499 posts)
 
Join Date: Aug 2003
Posts: 2,491 Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level)Tom Myboy User rank is Sergeant (500 - 2000 Reputation Level) 
Time spent in forums: 3 Days 20 h 13 m 41 sec
Reputation Power: 14
Kevin,

I suggest you post your description of the problem and a HijackThis log at http://forums.spywareinfo.com/ in the Malware Removal forum. They are very busy and it may take some time, but the experts there are top notch. Once you get your problem resolved please post back and let us know how it went!

Tom
__________________
HijackThis
Ad-aware
Spybot Search & Destroy
SpywareBlaster
SpywareGuard
Housecall Online A/V Scan

Please read the stickys at the top of the forum before posting!

Reply With Quote
Reply

Viewing: Dev Shed ForumsSystem AdministrationAntivirus Protection > Hijacker deleted but has it gone for good ?


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 1 hosted by Hostway