Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.
trojan horse / ibis
Name: emlarge Date: July 7, 2004 at 14:07:40 Pacific OS: Windows XP CPU/Ram: ?
Comment:
Hi there, can someone help me out here? I'm using Windows XP. There's something on my system that is tracking what I type. When I do a google search, I'll sometimes get a popup window (not via google) that displaying some results. Recently I've had a lot of pop up ads when I get online (properties show ibis in the path), some IE errors, and the icons of my shortcut bar have been all switched around. I downloaded AVG 6.0 Anti Virus System for free off the internet and found 'Trojan horse Dropper.Siboco.B' & 'Trojan horse Downloader.Siboco.B' & 'Trojan horse Downloader.Qdown.C' all of which were reported as 'Healed OK' after they were detected. There were 14 files (including a windows\system32\config file) that the AVG couldn't open and didn't check. Any ideas what I can do? Any help would be GREATLY appreciated, thanks!
Name: grasshopper Date: July 7, 2004 at 15:21:21 Pacific
Reply:
yes, go to www.housecall.antivirus.com and do an online scan. Delete all that it finds.
When all is said and done More is said than done..
0
Response Number 2
Name: emlarge Date: July 10, 2004 at 07:10:41 Pacific
Reply:
Hi, thanks for the response. I downloaded Housecall from TrendMicro's site and had it run a scan on my system. It found a trojan horse downloader SIBOCO.B in my temp folder. I deleted it, but am still having custom search result page and ad pages popup. Any ideas on what I might be able to try next? Thanks!
Summary: i found trojan horse on my computer he infected wmplayer.exe, iedll.exe. i tried to clen em up with NAV but no success so i deleted them. what shold i do next ? thank a lot ...
Summary: I am using AVG for my anti-virus protection. I have a Trojan horse Keybiz.A virus in file "System Volume Information\_restore{599EE4B7-B281-4319-8676-4FDD248A4A94}-RP242\A0018076.exe" This message ke...