trojaned proxy server

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
I have been informed by BTYahoo (unless it is a false alarm) that I may have
a trojaned proxy server so that my account is sending out unsolicited
commercial emails.
Any suggestions as to how I might remedy this? AGV 8 Free has not detected
anything, nor has SuperAntispyware Pro

--
Yours Quilly,
http://quilljar.users.btopenworld.com/


Re: trojaned proxy server


| I have been informed by BTYahoo (unless it is a false alarm) that I may have
| a trojaned proxy server so that my account is sending out unsolicited
| commercial emails.
| Any suggestions as to how I might remedy this? AGV 8 Free has not detected
| anything, nor has SuperAntispyware Pro
|


Download MULTI_AV.EXE from the URL --
http://www.pctipp.ch/ds/28400/28470/Multi_AV.exe

http://www.pctipp.ch/downloads/dl/35905.asp

English:
http://www.raymond.cc/blog/archives/2008/01/09/scan-your-computer-with-multiple-anti-virus-for-free /

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal
Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the
PC.

You can choose to go to each menu item and just download the needed files or you
can
download the files and perform a scan in Normal Mode. Once you have downloaded
the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode
[F8 key
during boot] and re-run the menu again and choose which scanner you want to run
in Safe
Mode.  It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive
PDF help
file.

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * *   Please report back your results  * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: trojaned proxy server

Wow! David, just clicking on Kaperski has made my brain ache. What a
complicated procedure! I think I will leave things as they are...

--
Yours Quilly,
http://quilljar.users.btopenworld.com/


Re: trojaned proxy server

Quilljar wrote:
Quoted text here. Click to load it


I strongly advise against this. If your machine is being used as a proxy
server, you are responsible for anything it sends. Not to mention that
'net performance will suffer. Etc. So take your machine to a tech who
can clean it up for you, and in future make sure you maintain it
properly. You maintain your car, right? Your computer is as valuable a
resource as your car. More, IMO - much of the dat  on it is priceless.

HTH

--
wolf k.

Re: trojaned proxy server

Wolf,
I reckon I spend about an hour a day just on maintaining my computer, far
more time than I spend on my car. I also spend a good deal of my time
maintaining other peoples' computers. I don't blame you for not knowing my
circumstances, but do not think for one moment that I don't take this
seriously. However, the procedure that David recommends is too complicated
for me, so I am hoping that some other soluton can be found.

--
Yours Quilly,
http://quilljar.users.btopenworld.com/


Re: trojaned proxy server

Quilljar wrote:
Quoted text here. Click to load it


Ok, point taken.

I don't know anything about proxy servers, so I have no suggestions. Sorry.

--
wolf k.

Re: trojaned proxy server


| Wow! David, just clicking on Kaperski has made my brain ache. What a
| complicated procedure! I think I will leave things as they are...
|

Alternative:



1. Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

2. Disable Notepad's word wrap:
In Notepad.exe;  Format --> uncheck; "Word wrap"

3. Download/run Deckard's System Scanner:
http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post in one of
the below
expert forums...


{ Please - Do NOT post the HJT and Deckard's System Scanner Logs here ! }

Forums where you can get expert advice for HiJack This! (HJT) and Deckard's
System Scanner
Logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.malwarebytes.org/forums/index.php?showforum=7

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://aumha.net/viewforum.php?f=30
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security /
http://forums.security-central.us/forumdisplay.php?f=13

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: trojaned proxy server

Thank-you!

--
Yours Quilly,
http://quilljar.users.btopenworld.com /

Re: trojaned proxy server


| Thank-you!
|

My pleasure.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: trojaned proxy server

David H. Lipman wrote:
Quoted text here. Click to load it

I have an older v2.0.0 beta and noticed the link above goes to v2.0.2
Is there much difference, worth changing versions etc.?

Re: trojaned proxy server


| David H. Lipman wrote:
Quoted text here. Click to load it
|
| I have an older v2.0.0 beta and noticed the link above goes to v2.0.2
| Is there much difference, worth changing versions etc.?

Yes.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: trojaned proxy server

David H. Lipman wrote:
Quoted text here. Click to load it

OK, it's only a little larger file and seems to scan faster,
maybe it processes the ignore list quicker.
I had the1.97 (I think it was) for the longest time and v2 seemed to hit
on some new stuff, I guess v2.0.2 does the same?

Re: trojaned proxy server

On Wed, 18 Jun 2008 13:35:14 +0100, Quilljar wrote:

Quoted text here. Click to load it

Would you please elaborate on the complications you were experiencing?

Re: trojaned proxy server

They were too elaborate to elaborate...

--
Yours Quilly,
http://quilljar.users.btopenworld.com /
Quoted text here. Click to load it


Re: trojaned proxy server

Quilljar wrote:

Quoted text here. Click to load it

It's like a hammer. If you don't know which end to whack the nail with,
it is a complicated tool.

--
   -bts
   -Friends don't let friends drive Windows

Re: trojaned proxy server



Quoted text here. Click to load it

Good analogy and very succinct.

--
Sir_George


Re: trojaned proxy server

Beauregard T. Shagnasty wrote:
Quoted text here. Click to load it

I hard it a bit differently -
If the only tool you have is a hammer,
all problems look like nails.

Site Timeline