KVR Audio

tee boy · Post by **tee boy** » Sun Jul 04, 2004 5:19 pm

Fook, my comp has just hit me with a Trojan alert:

Trojan horse Downloader.Perfiler.B

is found file
C:\System Volume Information\_restore{BC6D... .dll

Shit, is this serious? What can i do about it? I have AVG which is what alerted me to the problem, but when running a scan it doesnt find anything.

_oswald · Post by **_oswald** » Sun Jul 04, 2004 5:26 pm

Try TrendMicro's on-line 'Housecall' virus scan.

Sascha Franck · Post by **Sascha Franck** » Sun Jul 04, 2004 5:27 pm

There's TONS of these around these days. Apparently they don't harm (apart from virus checkers sometimes finding them and complaining).
Only thing I know is that you should check with all the various tools (HiJackThis, Adaware, CWShredder and perhaps SpySweeper) then delete all suspicious things and run your updated virus checker over it.
You may eventually have to turn off system restauration before you do so and you may also have to check with your scanner in safe mode.

After that NEVER open IE again if you are on XP. With 98 it's all OK but XP these days simply is a risk. I've been using it until recently but now I switched to FireFoy which seems to be a better browser anyways (the 98 machine still runs IE though, for compatibility reasons).
MS doesn't seem to be able to fix it this time... not even temporarily.

tee boy · Post by **tee boy** » Sun Jul 04, 2004 5:41 pm

Thanks lads, I'll give that a try. I already scanned with AVG and Spybot with System Restore on and off. No joy there, but I'll try again in safe mode. Sasha, you say IE is sketchy? Shit i had no idea, you say Firefoy is better? Reckon i'll check that one out, cheers.

Sascha Franck · Post by **Sascha Franck** » Sun Jul 04, 2004 5:44 pm

IE on XP isn't just "sketchy", to be honest. Had to learn it the hard way... these days, the safest Windows for internet stuff seems to be 98SE as nobody would care about it anymore (not even them evil

hackers). On XP one really shouldn't use IE.

griels · Post by **griels** » Sun Jul 04, 2004 5:52 pm

By the way, it's 'Firefox', not 'Firefoy':

http://www.mozilla.org/products/firefox/

Works better than Opera it seems (more compatible with badly written sites), except it seems it downloads to a temp directory before copying it to the destination, so I can't prelisten to mp3s in Winamp, unless someone knows better?

LBN · Post by **LBN** » Sun Jul 04, 2004 10:30 pm

griels wrote:Works better than Opera it seems (more compatible with badly written sites), except it seems it downloads to a temp directory before copying it to the destination, so I can't prelisten to mp3s in Winamp, unless someone knows better?

I use the QuickTime plug-in with Firefox to handle MP3 playback. It lets you begin playback before the entire file is downloaded. If you don't want to install all of QuickTime just to get the plug-in you can use QuickTime Alternative.

But I agree with switching from IE to Firefox or Opera. This is no longer just a nerdy anti-Microsoft thing. This latest round of exploits is really bad and Microsoft isn't taking the threat very seriously. You don't even have to be visiting "questionable" websites since several major websites were hacked and infected with these trojans.

tee boy · Post by **tee boy** » Sun Jul 04, 2004 10:48 pm

This shit makes me f**king sick man. I reckon if i ever caught one of those wee bellends they would be getting one major beasting! I had no idea you could get that stuff just by visiting a site. I thought it was from funky e-mails or dodgy p2p networks.

One word... WANKERS!

ouroboros · Post by **ouroboros** » Sun Jul 04, 2004 10:50 pm

I love spybot. It seems to work very well. For the occasional trojan/file that slips through, I find that this spy detector nicely complements spybot:

http://www.kephyr.com/spywarescanner/in ... e=appvisit

Together, all my wyrm/trojan problems have gone away. It's also 10x faster than Spybot (But, oddly, not as thorough.)

Bigg John · Post by **Bigg John** » Mon Jul 05, 2004 12:47 am

Sascha Franck wrote:
After that NEVER open IE again if you are on XP. With 98 it's all OK but XP these days simply is a risk. I've been using it until recently but now I switched to FireFoy which seems to be a better browser anyways (the 98 machine still runs IE though, for compatibility reasons).
MS doesn't seem to be able to fix it this time... not even temporarily.

The US Department of Homeland Security has recommended against using IE. Use Mozilla. I haven't had a single piece of spyware since i quit using IE. I suppose it's just a matter of time till hackers and their ilk figure out the holes in it, but at least for now, mozilla is the best defense against spyware and trojans i have tried.

Who was the Freakin Genius that decided to integrate the desktop with IE ???Thank God for Macs

LBN · Post by **LBN** » Mon Jul 05, 2004 6:07 am

Bigg John wrote:The US Department of Homeland Security has recommended against using IE. Use Mozilla. I haven't had a single piece of spyware since i quit using IE. I suppose it's just a matter of time till hackers and their ilk figure out the holes in it, but at least for now, mozilla is the best defense against spyware and trojans i have tried.

The nice thing about Mozilla/Firefox is that if an exploit is found there will likely be a patch for it in a matter of hours instead of months like this latest one from Microsoft (should be fixed in XP SP 2 but everyone else is screwed).

Trojan!