Dead Men Walking

dMw Events => Previous dMw LAN Parties => dMw LAN VII => Topic started by: TeaLeaf on April 26, 2005, 12:46:29 PM

Title: Trojan Reminder
Post by: TeaLeaf on April 26, 2005, 12:46:29 PM
Just a quick reminder that a trojan was found at the LAN, residing in the C:\Documents & Settings\ folder under the name svchost.exe.  It did not appear to have been 'installed', it just appeared to have been copied along with the contents of whichever directory was being copied.  It was picked up by AVG software.

As was requested at the LAN, check your systems if you have not already.  I checked both of my machines and they were clean, so I do not think it has spread to many machines (if any others at all), but it is worth checking none the less.

TL.
Title: Trojan Reminder
Post by: Jamoe on April 26, 2005, 01:08:01 PM
i have another problem, CZ crashes whenever I shoot... ;)

the virus found was istbar and was easily removed using the free version of AVG.
Title: Trojan Reminder
Post by: target on April 26, 2005, 02:21:14 PM
Checked mine - all clear!

Jamoe wrote:
Quotei have another problem, CZ crashes whenever I shoot...

Good, gives the rest of us a chance ;)

Seriously though, hope you get it sorted
Title: Trojan Reminder
Post by: Jamoe on April 26, 2005, 03:37:24 PM
QuoteOriginally posted by target@Apr 26 2005, 01:21 PM
Checked mine - all clear!

Jamoe wrote:
Good, gives the rest of us a chance ;)

Seriously though, hope you get it sorted
[post=82858]Quoted post[/post]
[/b]

at a guess it was saturday night and i was pissed. Either JB or Armitage had a play with my config ,  :angry:  :P
Title: Trojan Reminder
Post by: Armitage on April 26, 2005, 04:21:42 PM
:whistle:  must have been JB
Title: Trojan Reminder
Post by: DarkAngel on April 26, 2005, 04:51:24 PM
:lmfao:

JB strikes again  :lmfao:
Title: Trojan Reminder
Post by: JB on April 26, 2005, 06:05:00 PM
Well errm.. you see...DA put me up to it !!  :blush:

I think he put me up to it 3 times, maybe 4.  Jas, Jamoe, one of the wee scotty lads(forget which) and err... someone else.  Maybe.
Title: Trojan Reminder
Post by: Liberator on April 26, 2005, 08:41:17 PM
We were sworn to secrecy by JB. :blush:

I think I may remember the owner of the forth PC, but I'm sure they have figured it out by now.

On a completely unrelated subject :unsure: , has anyone seen OB on the servers recently.  :whistle:
Title: Trojan Reminder
Post by: Jamoe on April 27, 2005, 07:29:30 AM
I can't complain, I was standing next to him when he did it  :lmfao:

edit: too early to type
Title: Trojan Reminder
Post by: Gone_Away on April 27, 2005, 01:47:53 PM
Checked both of my rigs before and now, after.. Both clean.. wassn'me
Title: Trojan Reminder
Post by: Whitey on April 27, 2005, 03:48:11 PM
I'm clean  :D
Title: Trojan Reminder
Post by: BigFatCat on April 27, 2005, 04:14:40 PM
Who had a wooden horse parked outside? Bit of a giveaway really.
Title: Trojan Reminder
Post by: Thulsa Doom on April 27, 2005, 11:15:24 PM
PC clean also

(never been called a wee scotty lad  <_< )
Title: Trojan Reminder
Post by: Gh0st Face Killah on April 28, 2005, 12:10:28 AM
Thulsa you are a wee scotty lad!!

Now you have.
Title: Trojan Reminder
Post by: Thulsa Doom on April 28, 2005, 09:02:44 AM
QuoteOriginally posted by Gh0st Face Killah@Apr 28 2005, 12:10 AM
Thulsa you are a wee scotty lad!!

Now you have.
[post=82955]Quoted post[/post]
[/b]
tks... I think  :D
Title: Trojan Reminder
Post by: sheepy on April 28, 2005, 09:08:21 PM
i didnt pick up the trojen when i did a scan at the lan

but i have just found that file name 4 times in my task manager. so im updating my virus checker again and hope it gets it
Title: Trojan Reminder
Post by: Anonymous on April 28, 2005, 09:49:14 PM
QuoteOriginally posted by sheepy@Apr 28 2005, 08:08 PM
i didnt pick up the trojen when i did a scan at the lan

but i have just found that file name 4 times in my task manager. so im updating my virus checker again and hope it gets it
[post=83039]Quoted post[/post]
[/b]
You SHOULD find svchost.exe many times in task manager. It is a legitimate windows service.

Microsoft Article (http://support.microsoft.com/kb/314056/EN-US/)

It can also be a trojan:

Page 1 (http://www.windowsstartup.com/wso/browse.php?l=19&start=450&end=475) and Page 2 (http://www.windowsstartup.com/wso/browse.php?l=19&start=475&end=500)
Title: Trojan Reminder
Post by: sheepy on April 29, 2005, 10:21:56 AM
ok wqell a full scan today cant hurt

just trying to work out why pc is so slow
Title: Trojan Reminder
Post by: TeaLeaf on April 29, 2005, 10:29:04 AM
QuoteOriginally posted by sheepy@Apr 29 2005, 10:21 AM
just trying to work out why pc is so slow
[post=83065]Quoted post[/post]
[/b]
Try pressing the big round power button.  That will turn the computer on and things will work much better and you'll have fewer BSOD - black screens of darkness.  :P

TL.
Title: Trojan Reminder
Post by: sheepy on April 29, 2005, 01:30:24 PM
seriously my computer is taking 45mins to write a cd and about a min to load up an explorer window
Title: Trojan Reminder
Post by: Anonymous on April 29, 2005, 04:12:00 PM
QuoteOriginally posted by sheepy@Apr 29 2005, 12:30 PM
seriously my computer is taking 45mins to write a cd and about a min to load up an explorer window
[post=83074]Quoted post[/post]
[/b]
Have you removed all "LAN VII" network settings? Just a thought in case it is trying to use routing that doesn't exist.?
Title: Trojan Reminder
Post by: sheepy on April 30, 2005, 06:44:13 PM
i dont have broad band yet so trying to dial up the lan network through a 56k probably isnt goign to work!

i found out what was wrong.

my sister hadput about a gig of music on the system disk since i got back to the lan, even if i have told her several times to put it in the disk marked music!!!!!  so no its cleared pc is runnign fine.