Author Topic: trojano-964  (Read 5524 times)

0 Members and 1 Guest are viewing this topic.

angel74

  • Guest
trojano-964
« on: March 02, 2005, 02:01:56 AM »
anyone know what this is and where it comes from?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: trojano-964
« Reply #1 on: March 02, 2005, 12:17:13 PM »
It is a trojan and it comes from infected systems/files to your system.

angel74

  • Guest
Re: trojano-964
« Reply #2 on: March 02, 2005, 12:51:24 PM »
sorry, what i meant was, some viruses seem to be known to come from porn sites or certain other places, and i wanted to know if anyone knew where i could have picked it up. Infact, i would like any info on what type of things to avoid to stop getting viruses. I have 3 on my pc now, which avast wont put in to the chest. I have had previous advice on how to go in to safe mode etc and deal with them, but am going to get someone who knows what they are doing to sort it out - 'cause i dont!
ive got win32:zins, win32:webdor-d, and now this trojano-964.
Also can anybody recomend a good book/ website on how to work computers? I am picking things up slowly, but tend to rely on all of you to help me out!
cheers , angel x x

Spyros

  • Guest
Re: trojano-964
« Reply #3 on: March 02, 2005, 12:56:20 PM »
angel74, about PC Security you could start by reading my site --> http://www.geocities.com/spyros300/. There are a lot of usefull links to (free) tools and other security sites...  ;)

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: trojano-964
« Reply #4 on: March 02, 2005, 01:04:31 PM »
In addition to what Spyros said, have a look at the website in my signature. And especially the malware removal section and the HijackThis section. I think both will be of good use for you.

Spyros

  • Guest
Re: trojano-964
« Reply #5 on: March 02, 2005, 01:08:30 PM »
In addition to what Spyros said, have a look at the website in my signature. And especially the malware removal section and the HijackThis section. I think both will be of good use for you.

Eddy, my site has a link to yours & Rejzor's, so I think she will be covered  ;D

angel74

  • Guest
Re: trojano-964
« Reply #6 on: March 22, 2005, 02:28:26 AM »
i still cant get rid of this, avast wont put it in the chest it is in svchost.exe...

Spyros

  • Guest
Re: trojano-964
« Reply #7 on: March 22, 2005, 10:28:41 AM »
angel74,
1- Have you checked Eddy's "malware removal section and the HijackThis section"?
2- Have you checked my site's "anti-trojan" & "online scanners" tools?
Please do, and you will be clean.

Regarding "svchost.exe". There are 2 kinds: One is a Windows process (in the c:\windows\System32 folder) and there is another one which is in fact the Welchia Worm (It takes advantage of the Windows LSASS vulnerability, which creates a buffer overflow and instigates your computer to shut down. To see more information about this vulnerability please look at the following Microsoft bulletin: http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx)