Page 1 of 2

The Trojan That Is Pissing Me Off

Posted: Mon Jul 11, 2005 9:20 pm
by Q12321
Well, it exists in system.exe, right on my C partition, where Windows is. It has a registry key for it too. I got into safe mode, deleted both, and they just come back. It's using my bandwidth, and it seems to be blocking sites that are anti-viral, such as Kaspersky's site and sometimes Norton's.

AVG is overlooking it, and BitDefender isn't updating, and I'm not able to get the updates from their site, for whatever reason (perhaps the virus).

So, WTF now?

Posted: Mon Jul 11, 2005 9:46 pm
by Q12321
It doesn't allow me to update BitDefender or Norton's trial version. I can update AVG, but that isn't doing shit anyhow.

Posted: Mon Jul 11, 2005 11:04 pm
by palmboy5
can you get the virus name?

Posted: Mon Jul 11, 2005 11:20 pm
by Q12321
Google system.exe. It can be many things...


Well I have an update:

I updated norton manually, and it found 3 viruses, 2 were trojans, neither were this one. At least it's a bit cleaner...

But, Norton's site has info on system.exe and how to get rid of it (by running a scan and doing whatever from there), but it's not even finding it.

Posted: Mon Jul 11, 2005 11:44 pm
by Q12321
Meh, I have Zone Alarm blocking it, so it's not harming much right now.

The only problem is that I close Zone Alarm during gaming. I need the least amount of processes going at one time on this machine. I have 33 right now because Norton has to have a gagillion going. I usually only have 20, and 13 while gaming.

Posted: Tue Jul 12, 2005 6:32 am
by Directive
Without knowing the name its hard. Have you tried here.....?
http://www.symantec.com/search/

Posted: Tue Jul 12, 2005 8:25 am
by Q12321
Yeah. Considering I only know that the file name is system.exe, it doesn't narrow it down very much. Many things come up.

Posted: Tue Jul 12, 2005 11:36 am
by palmboy5
try kaspersky trial?

Posted: Tue Jul 12, 2005 12:08 pm
by Q12321
Am I the only one who can't get to Kaspersky's site?

Posted: Tue Jul 12, 2005 2:34 pm
by mannyace
i could get to their site...

have somone dl it for u and then send it to u

Posted: Tue Jul 12, 2005 2:47 pm
by palmboy5
81.176.69.71

their site's IP. if the virus writer was smart they woulda blocked by IP too but who knows.. otherwise i could upload the trial... could.

Posted: Tue Jul 12, 2005 3:21 pm
by Q12321
Too stupid to block the IP, but if I try to navigate anywhere else on their site, it says it cannot be found.

Posted: Tue Jul 12, 2005 4:06 pm
by palmboy5
ok ill upload when i get back home..

dont feel like doing it in C++ class XD where speeds are 352/528

Posted: Tue Jul 12, 2005 7:57 pm
by palmboy5

Posted: Tue Jul 12, 2005 9:45 pm
by Q12321
Thanks.


I'm just gonna use linux from now on... Stage 1 Gentoo, here I come.