Pages: 1

 

2010-07-16 12:38:31
prototype
Member
+52|6569
my system kept "hanging" and acting strange so I scanned it using spybot

it found a trojan called win32.agent.wn

i have tried to remove this using "hijack this" "AVG pro" "spybot" and "ad-aware pro"
both in safe mode and regular mode

after each attempt i clean my registry reboot and its back again

i have googled it and tried to find an answer but i cant get rid of this thing

I plan on reformatting today or tomorrow unless someone here knows how to get rid of it

here is the file path for the infected file

C:\DOCUMENTS AND SETTINGS\NETWORK SERVICE\LOCAL SETTINGS\APPLICATION DATA\WINDOWS SERVER\LOSAYB.DLL

thank you for any info that gets posted

Last edited by prototype (2010-07-16 12:39:51)

2010-07-16 12:39:28
SonderKommando
Eat, Lift, Grow, Repeat....
+564|6917|The darkside of Denver
malwarebytes.org

if it blocks the install then rename the exe to somthingelse.exe  reboot into sfae mode and scan.  remove infection and reboot.  Scan again.

profit.


also ccleaner would be a good follow up to fix any registry issues after malware removal.

Last edited by SonderKommando (2010-07-16 12:40:53)

2010-07-16 12:40:37
prototype
Member
+52|6569

SonderKommando wrote:

malwarebytes.org

if it blocks the install then rename the exe to somthingelse.exe  reboot into sfae mode and scan.  remove infection and reboot.  Scan again.

profit.
will try that right now

thank you
2010-07-16 12:41:04
CammRobb
Banned
+1,510|6388|Carnoustie MASSIF
http://www.sophos.com/support/disinfection/trojan.html

First link on Google. Give it a bash.
2010-07-16 12:51:20
SonderKommando
Eat, Lift, Grow, Repeat....
+564|6917|The darkside of Denver
Seriously, I used MWB pretty frequently.  It's a great anti malware tool for post infection triage.
2010-07-16 13:19:49
prototype
Member
+52|6569
looks like malwarebytes got rid of it

it has been a few years since i have reformatted
do you guys think i should reformat and reinstall my OS ?

I also wanted to ask if my system can handle windows 7 ultimate or should i just reinstall XP pro ?

my system specs are in my sig
2010-07-16 13:19:53
Canin
Conservative Roman Catholic
+280|6733|Foothills of S. Carolina

SonderKommando wrote:

Seriously, I used MWB pretty frequently.  It's a great anti malware tool for post infection triage.
I will second this. MWB has worked wonders on some severely impacted systems.
2010-07-16 13:37:49
Tdog2007
Giggity Giggity
+25|6971|US

prototype wrote:

I also wanted to ask if my system can handle windows 7 ultimate
You'll need another stick or 2 of ram. win7 itself needs 2gb (recommended anyway)
2010-07-16 13:42:21
SonderKommando
Eat, Lift, Grow, Repeat....
+564|6917|The darkside of Denver

Tdog2007 wrote:

prototype wrote:

I also wanted to ask if my system can handle windows 7 ultimate
You'll need another stick or 2 of ram. win7 itself needs 2gb (recommended anyway)
I've run win7 on 512mb.  Its surprisingly scalable. but your machine will do fine w/ 7
2010-07-16 14:45:01
HaiBai
Your thoughts, insights, and musings on this matter intrigue me
+304|5742|Bolingbrook, Illinois
for the 100th time use combofix
2010-07-16 20:00:33
tazz.
oz.
+1,338|6432|Sydney | ♥

HaiBai wrote:

for the 100th time use combofix
Don't use combofix on vista/win7.

shit corrupts yo.

or atleast it did pre 2010. Havnt checked if there's a new release.
everything i write is a ramble and should not be taken seriously.... seriously. ♥
2010-07-16 23:55:14
HaiBai
Your thoughts, insights, and musings on this matter intrigue me
+304|5742|Bolingbrook, Illinois

tazz. wrote:

HaiBai wrote:

for the 100th time use combofix
Don't use combofix on vista/win7.

shit corrupts yo.

or atleast it did pre 2010. Havnt checked if there's a new release.
really?  didnt know that, ive only used it on xp.

the only problem i ever had was that i hid my porn folder in the windows folder so combofix tried to delete it lolz.

 

Pages: 1

Board footer

Privacy Policy - © 2025 Jeff Minard