Crocodile
- 16 Dec 2002 03:59
HARRYCAT
- 13 Dec 2007 17:45
- 6433 of 11003
This is the technical spec on the above virus. I'm none the wiser!!!
"Troj/Psyme-AN is a JavaScript downloader Trojan (usually HTML-based) which exploits the ADODB stream and CODEBASE vulnerabilties associated with certain versions of Microsoft Internet Explorer to silently download a file from a remote website to the affected computer and run it.
When Troj/Psyme-AN is run on Windows 95 or Windows 98 it tries to download and run an executable via the CODEBASE attribute of an object element.
When run on Windows NT, 2000 or XP Troj/Psyme-AN first uses the ADODB Stream exploit to download the remote executable to C:\Program Files\Internet Explorer\.exe where is a random character string consisting of 1-8 random characters (typically 8 characters) within the range A-Z. It then tries to execute the downloaded file via the CODEBASE exploit.
Troj/Psyme-AN can arrive on the computer via HTML pages containing a link to an infected page. "
tyketto
- 14 Dec 2007 12:10
- 6434 of 11003
HARRYCAT
Im no expert but you could try downloading and running SpybotS&D.
I replaced Adaware with SuperAntiSpyware, as it picked up bugs
missed by Adaware.
Also have SpyWareBlaster loaded.
mac
PS All free.
HARRYCAT
- 14 Dec 2007 14:05
- 6435 of 11003
Thanks. Have now downloaded & paid for Xoft which has found the bugs & quarantined them, but when I run Ad-Aware again it says they are still there!
Have sent e-mail to Xoft tech dept, so hopefully will have answer soon.
KEAYDIAN
- 14 Dec 2007 16:41
- 6436 of 11003
Is it possible to firewall a phone socket?
Kayak
- 14 Dec 2007 16:47
- 6437 of 11003
Why? Are you trying to stop the mother-in-law calling? :-)
KEAYDIAN
- 14 Dec 2007 17:04
- 6438 of 11003
Na, I'm trying to cheekily set up my broadband on my laptop at work. All the lights are on as say should be but no joy.
Kayak
- 14 Dec 2007 17:14
- 6439 of 11003
Not sure what you're trying to do exactly, do you mean that you have had broadband connected on a socket at work and you are trying to get it to work through a router?
Dailos
- 15 Dec 2007 09:57
- 6440 of 11003
I ave bought (another!) new laptop.
2 trouble free weeks and its fooked!
It did an overnight auto update 2 days ago, ever since then iv'e been getting error messages.
If you look under "view text" it always says this...
C:/DOCUME1/NEILJE1/LOCALS1/Temp\a33c_appcompat.txt
(with a few squiggles in it, that havent got a key for)
Help! I have sent (reported to Microsoft) 100s of them over the past 2 days but nothing changes.
Thanks.
d.
HARRYCAT
- 15 Dec 2007 19:47
- 6441 of 11003
That's exactly when my troubles started, Dailos. Downloading the latest updates/ patches from Microsoft. I only update from them once a month, manually, so I know it was the updates which were highjacked by a virus. I don't trust auto.
Not much help, I know, but maybe a pattern emerging!
ThePublisher
- 16 Dec 2007 10:31
- 6442 of 11003
Oh, dear.
I've altered my automatic updates to 'notify me but don't download' until further notice.
In fact I will be off air for ten days from tomorrow - Christmas hol - so I'll re-visit this thread on the 28th to see whether you whiz kids have found a solution.
Bye
TP
Richgit69
- 21 Dec 2007 09:08
- 6443 of 11003
Got a problem when windows starts up, it is running 2 Internet Explorers at once in Task Manager, which is eatting up a load of memory and making the pc crash, checked for viruses and Adware etc found some, but its still happening, any ideas how to fix it???
Optimist
- 21 Dec 2007 18:40
- 6445 of 11003
If anyone still has a problem with the MS update causing problems with IE I found this
comment from Microsoft. It seems that this problem only effects IE6 so the answer is to upgrade to IE7.
Optimist
- 21 Dec 2007 18:54
- 6446 of 11003
HARRYCAT
- 21 Dec 2007 23:32
- 6447 of 11003
Thanks for your post #6445, Optimist. Yes I have IE v6, but it's interesting to note that Microsoft have acknowledged a loophole. I normally wait for software to be out for a while until the bugs have been ironed out, but now v7 may be the answer.
Richgit69
- 22 Dec 2007 00:43
- 6448 of 11003
Optimist, yes as soon as Windows boots up, in the background it starts Internet Explorer, so when I start my own IE session it means two or three are running at once but only notice the one I've started and only found the others were running by accident thru Task Manager
NabCom
- 23 Dec 2007 13:28
- 6450 of 11003
Anybody using Safari on a Mac to view Stockwatch?
Suddenly (I think) I have to deselect "block pop-up windows" in order to view Charts/Trades/News
I am sure this wasn't necessary until recently
Safari should only block pop-up from page loads or exits
Haystack
- 27 Dec 2007 20:18
- 6451 of 11003
Anyone know of some FREE software to rip video and convert to iPod video format
Seymour Clearly
- 04 Jan 2008 21:50
- 6452 of 11003
Have a big problem - can't print anything because:
Spooler SubSystem App encountered a problem and needed to close.
I've got the Microsoft solution but some sources are saying it doesn't work. There isn't a new printer installed - just using the existing ones so this suggests some corrupted file. Does anyone know if the MS solution works before I dive into the registry?