Wetlook World Forum

Current time: Thu 25/04/24 17:54:57 GMT

Translate page FROM -> TO

Translate page TO <- FROM

Message # 8126.4

Subject: Re: Hobie's trojan removal

Date: Tue 20/01/04 12:24:04 GMT

Name: Hobie

Email:

Website:

Report Abuse or Problem to Nigel at Minxmovies
If you enjoy this forum, then please make a small donation to help
with running costs: (you can change amount)

Thanks Nigel for reposting with the picture.

A bit more about what trojans can do: They can install different kind of programs on your computer. Some of these programs establish a connection with a paysite through a dialup-connection. I got one this summer, because I clicked on a link in an eMail. If you're on broadband, don't think you're safe. Most of us will still have their modem or ISDN connected to the computer for fax transmissions.

Therfoe, like Nigel said, protect your computer. At least run a good anti-virus software and a firewall. Get the security-updates regularly, also for your operating system. Even then, you cannot be sure, that nothing can happen, so you'll still need to be carefull.

I don't want to start a thread here, because it's off topic. Get more information on this topic. You'll find a lot, if you start searching. I only know of German sites like www.computerbetrug.de or www.dialerschutz.de

Stay wet! Hobie

In reply to Message (8126)

Hobie's trojan removal

By Nigel - nigel@wetlook.com Mon 19/01/04 23:30:39 GMT

Website: www.wetlook.com

I've deleted 2 posts 8103/4 that contained a link to a non-wet site that reportedly download a trojan. Hobie sent the following instructions to check if you inadvertently got infected. The file is called f22776.exe or similar, and is located in the Windows doanload folder - according to Hobie, it will not show up using Explorer, so don't bother searching for it, you need to use a DOS box as he describes below.

When I tried the link, there was no problem for me, so if you are not up to date with your Windows/IE updates, then do a Windows Update NOW !!! Protect yourselfs, the rest of us, and the Internet from these jerks.

Stay Clean

Nigel

------- From Hobie ------

Don't click the link!!!! it will try to install a programm on your computer. Even if you have a firewall - I've got Zonealarm running - it will download an executable file named «f22776.exe» or simular. The file is downloaded to you «windows\downloaded program files» directory. You won't be able to see it in your explorer though. To delete it, open a DOS-box, and enter the directory in the DOS-box. if you list all the files, you will be able to see the file and delete it. For all of you, who don't really know, what I'm talking about, all the steps and the commands to follow:

Open a DOS-box: click «start» and then on «execute»

in the dialog box, type «command» and press «enter»

In the opened DOS-box, type «cd \» and press «enter»

Then type «cd windows\downloaded program files» and press «enter»

The name of your windows-directory may be different. Pleas substitute «windows» with the name of the windows-directory on your computer. Example: If your windows-directory is named winxp, then you must type «cd winxp\downloaded programm files» and press «enter».

then type «dir» and press «enter».

You will now be able to see the file (See above). If you can't find it, look for an exe-file with a date and time of the moment when you clicked the link.

then type «del xy.exe» and press «enter» again, where «xy.exe» stands for the name of the file. In my case, I had to type «del f22776.exe»

Type «dir» again, to be sure that you deleted the file succesfully.

Then your PC should be clean again.

Stay wet, Hobie

Report Abuse or Problem to Nigel at Minxmovies
If you enjoy this forum, then please make a small donation to help with running costs: (you can change amount)