Computing.Net > Forums > Disk Operating System > trojan?

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

trojan?

Reply to Message Icon

Name: Guy delnonymo
Date: July 10, 2001 at 06:22:42 Pacific
Comment:

I have a problem i think. I use wfw 3.11 on an old 486 dx2 66 clone, and i have this thing that keeps creeping up in my registry file: linkXXXXXX where XXXXXX is a random number. I keep deleting it, but it keeps coming back. I looked at win.ini and system.ini to see if anything loaded in the load= of run= statement; nothing! I ran F-Prot 3.09a with the latest fp-def file i could get, it was only 2 days old, and a complete "dum" scan of all files didn't detect anything. In addition, i have this file "" that keeps coming up at the top of my registry. I looked all over my harddrive to see if i could find something suspicious, but nothing. Is there a trojan on my machine? What can i do to remove it? I'm thinking of doing a low level format on it, but i'd rather not if something else can be done first.



Sponsored Link
Ads by Google

Response Number 1
Name: Win
Date: July 10, 2001 at 08:58:23 Pacific
Reply:

I have not tried this antivirus service yet but it is a free online scan.

http://housecall.antivirus.com/

Good Luck,


0

Response Number 2
Name: Jim
Date: July 10, 2001 at 09:18:22 Pacific
Reply:

Is it causing an actual problem?


0

Response Number 3
Name: Bob
Date: July 10, 2001 at 13:34:06 Pacific
Reply:

Since when did Win 3.X use a registry?


0

Response Number 4
Name: tsuji
Date: July 10, 2001 at 22:11:46 Pacific
Reply:

MS did introduce registry from win3.1 and wfw3.11. Only maybe the computer was so expensive and the utilities and know-hows to deal with it were not as widespread as present that it was more intimidating to average users.



0

Response Number 5
Name: aa
Date: July 11, 2001 at 12:06:58 Pacific
Reply:

More likely than a trojan: shareware that "counts" days or trial-instances until your "time's up". I have noticed this registry key (yes, win3x has a registry)on my old 486. I don't have it connected up right now, so I can't identify the most likely "shareware prog. candidate".


0

Related Posts

See More



Response Number 6
Name: Guy Delnonymo
Date: July 12, 2001 at 14:37:24 Pacific
Reply:


AA, when you say not connected, do you mean not connected to the net? Because if it is not connected to the net, and you still have this thing, it might mean i'm overreacting.

Win, thanks for the tip, but Housecall doesn't work in my 3.1.

Jim, no it is not creating an actual problem, unless you don't care someone having all your passwords! But i haven't notice any problems while on the net, like the mouse moving by itself, or other things like that.

Any other thought would be appreciated, even the most unlikely.

Guy.


0

Response Number 7
Name: World Library
Date: July 12, 2001 at 15:57:40 Pacific
Reply:

Hmmm
Look for a zero byte file.
There was a bbs program years ago that would cause what you have. (many clones)

The zero byter is a nightmare to get rid of as the computer cannot recognise it. Even in dos it will not go away.

Neither 0byte or wipe will make this rascal go away. You need to add text to the file using the echo some text .....directional arrow command to the offending file. Once the size is increased from zero to 1 or more the computer will see it.

The file was used as an anchor of sorts for a counter and the information sent to the bbs site (Like a cookie)to let them know how many times a connection was made.

I might also suggest a fire wall as it will stop any outgoing messages and give you an idea as to where the file is at and to whom the info is going.

For a little fun........send them a packet of unfriendlyness instaed of you personal info.......................Oh my!


Next! Running a program called Integerty?

It keeps track of your system (anti viri)

Many of the anti viri programs keep a log of files checked so it does not have to recheck them each time the program is run.

Off and running..

W.L.



0

Response Number 8
Name: will smyth
Date: July 19, 2001 at 21:24:38 Pacific
Reply:

You probably have the paranoia virus

to get rid of it low level format your harddrive 50 times then throw it away
Buy a new one and clean it with disinfectant then format it 10 times and install windows nt 3.51 & add nothing! not even notepad as it can be exploited! it contains a virus too.
use norton firewall AS WELL AS blackice and zonealarm.
install f-prot, mcafee, norton and housecall antiviruses and have them scanning everyfile even .jpg's.
Soak your computer in disinfectant then leave for a week to dry.
Prey before turning the computer on


0

Sponsored Link
Ads by Google
Reply to Message Icon

Batch File Programming dos



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Disk Operating System Forum Home


Sponsored links

Ads by Google


Results for: trojan?

lucifer trojan virus www.computing.net/answers/dos/lucifer-trojan-virus/6222.html

BIOS password lockout! www.computing.net/answers/dos/bios-password-lockout/1648.html

message to Petit Jean www.computing.net/answers/dos/message-to-petit-jean/9449.html