avast found this Trojan

mindovermatter

Hi,
Avast just found this Trojan which I have placed in quarantine.
JS:ScriptIP-inf
I've tried to find out what it does - does anyone know?
Best wishes
Mindovermatter

aliEnRIK

usually caught by 'drive by' script on a website (Which neither internet explorer nor firefox prevent in default settings)
To prevent this from ever happening again id suggest using FIREFOX with the NOSCRIPT plugin

Download FIREFOX
http://www.mozilla-europe.org/en/firefox/

NOSCRIPT
https://addons.mozilla.org/en-US/firefox/addon/722


NOSCRIPT works by blocking ALL website scripts (Which is how dodgy websites infect your computer ~ the easiest way to catch a virus after downloading). So you need to UNLOCK all websites you use for them to work properly (Like this one for example)
I personally set it so that it DOESNT show messages about blocked scripts. Then all you need to do is use common sense. Think to yourself 'does the site work ok'? If so it doesnt need touching. But if you wanted to watch a video on youtube say, youd need to unlock parts of it. Look bottom right, If theres ANY red on the 'S' symbol, then something is being blocked.

(You will also need the other addons like FLASH etc)
http://www.google.com/tools/firefox/toolbar/FT5/intl/en-GB/index.html
https://addons.mozilla.org/en-US/firefox/browse/type:7

As for the trojan. More than likely youll be infected with the VUNDO trojan so ~

Download MALWAREBYTES (Make sure you click 'DOWNLOAD NOW')
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
UPDATE and FULL SCAN
Post the log here AFTER youve deleted everything it finds

reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
Click DO A SCAN AND SAVE A LOGFILE (Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)

mindovermatter

hi,
many thanks for the help - I have tried to download malwarebytes but it didnt work as I am on windows ME.
is there anything I can now do?
best wishes
Mindovermatter

aliEnRIK

As far as im aware it 'should' work fine on ME!
Didnt work as in? (I ask as its possible that VUNDO is stopping it from working)

Try HIJACK instead

spud17

As far as im aware it 'should' work fine on ME!

Not according to Malwarebytes.
Windows 2000 onward. See Download/Operating systems.

aliEnRIK

spud17 wrote: »

Not according to Malwarebytes.
Windows 2000 onward. See Download/Operating systems.

My bad. I was going off 'download.com' which stated ALL windows

Reluctant_spender

Try this online scanner by Nod32 - http://www.eset.com/onlinescan/

Please go to Eset website to perform an online scan. Please use Internet Explorer as it uses ActiveX.

1. Check (tick) this box: YES, I accept the Terms of Use.
2. Click on the Start button next to it.
3. When prompted to run ActiveX. click Yes.
4. You will be asked to install an ActiveX. Click Install.
5. Once installed, the scanner will be initialized.
6. After the scanner is initialized, click Start.
7. Uncheck (untick) Remove found threats box.
8. Check (tick) Scan unwanted applications.
9. Click on Scan.
10. It will start scanning. Please be patient.
11. Once the scan is done, you will find a log in C:\Program Files\esetonlinescanner\log.txt. Please post this log in your next reply.

spud17

My bad. I was going off 'download.com' which stated ALL windows

I only knew because I tried it on an ME pc a couple of weeks back. (First time I'd seen ME), and I've been around computers for all of 5 mins.