Author Topic: INFECTION of ldcore.dll with WIN32.small-IKY  (Read 25859 times)

0 Members and 1 Guest are viewing this topic.

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: INFECTION of ldcore.dll with WIN32.small-IKY
« Reply #30 on: December 02, 2007, 11:38:17 AM »
You're welcome.

Quote
however, i still have all the infected files in the avast's secure chest. do i delete the whole chest? or let them remain?

They are safe there, they can't be accessed from outside the chest or ran from within the chest. You can leave them a few days if you want, then delete them.

To delete them, start avast, click on the chest, click the infected button.

The files will appear in the window, highlight them, and delete. Don't worry they can't be executed (ran) from within the chest.  ;)

Quote
spybot ran a scan and found tagasaurus and some other one. i had it fix the problems...hope they won't come up again.

Where did spybot detect them? The name of the files and the path?

Just a security note for wireless routers. They come from the manufacturer with a factory password. That is they all have the same password. The users guide tells users to change the password. If you haven't done this already please do so. Any infected computer tapping into your router could infect you.

If you already knew that, then disregard it.  8)

Happy surfing.  ;D


Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89065
  • No support PMs thanks
Re: INFECTION of ldcore.dll with WIN32.small-IKY
« Reply #31 on: December 02, 2007, 03:28:18 PM »
There is no rush to delete anything from the chest, a protected area where it can do no harm. Anything that you send to the chest you should leave there for a few weeks. If after that time you have suffered no adverse effects from moving these to the chest, scan them again (inside the chest) and if they are still detected as viruses, delete them.

There is also an area in the chest System Files, these are back-up copies of important system files, so you should most certainly leave these alone.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

sdunford

  • Guest
Re: INFECTION of ldcore.dll with WIN32.small-IKY
« Reply #32 on: December 03, 2007, 04:44:33 PM »
i use the linksys wireless adapter, going through my school's wireless network. how would i change that password?

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: INFECTION of ldcore.dll with WIN32.small-IKY
« Reply #33 on: December 03, 2007, 04:55:13 PM »

I thought perhaps it was a home network. Some people don't bother to change the default password on the wireless modem. This allows anyone to tap into it.

Seeing it's the school's network, it's adminstrated by the school and you won't have any control over that.

sdunford

  • Guest
Re: INFECTION of ldcore.dll with WIN32.small-IKY
« Reply #34 on: December 03, 2007, 09:00:05 PM »
here are the posts....

sdunford

  • Guest
Re: INFECTION of ldcore.dll with WIN32.small-IKY
« Reply #35 on: December 03, 2007, 09:05:41 PM »
one more...

sdunford

  • Guest
Re: INFECTION of ldcore.dll with WIN32.small-IKY
« Reply #36 on: December 03, 2007, 09:07:20 PM »
the rest

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: INFECTION of ldcore.dll with WIN32.small-IKY
« Reply #37 on: December 03, 2007, 10:54:47 PM »
Hi, sorry, this computer keep locking up. Lost this a couple of times.

The tagasarus is a tracking cookie, usually nothing to worry about.

"C:\Documents and Settings\All Users\Application Data\Rabio\Search Enhancer\"

is a low risk adware. Origanally I searched for just rabio and came up wth something different, as the log just showed "C:\Documents and Settings\All Users\Application Data\Rabio". The \search enhancer\ is subfolder. I don't see any indication that the program itself is running. Did you previously uninstall it?

After the spybot fix do they still appear?

sdunford

  • Guest
Re: INFECTION of ldcore.dll with WIN32.small-IKY
« Reply #38 on: December 04, 2007, 12:01:31 AM »
i should have placed the logs in order. some of them are from after spybot says the virus is fixed. is the Rabio something like adaware? i found this site. http://www.xblock.com/product_show.php?id=3770
should i run the antivirus or just uninstall the program if i can?

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: INFECTION of ldcore.dll with WIN32.small-IKY
« Reply #39 on: December 04, 2007, 02:19:47 AM »
Yes, it's adware. Try to uninstall it if you can. If you can't, come back and we'll remove it here. You may have better luck doing it in safe mode. Let me know how you make out.
« Last Edit: December 04, 2007, 03:36:56 AM by oldman »

sdunford

  • Guest
Re: INFECTION of ldcore.dll with WIN32.small-IKY
« Reply #40 on: December 08, 2007, 06:14:03 AM »
 :)   hello, again. more good news. i successfully uninstalled the rabio and cool (?) programs. no adverse effects have come up. i have ran scans with AVG, Avast, and Spybot....  all threats essentially eliminated.
THANKS AGAIN FOR THE GREAT HELP!!!!!    SAVES MUCHO DINERO!!  ;D

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: INFECTION of ldcore.dll with WIN32.small-IKY
« Reply #41 on: December 08, 2007, 07:42:42 AM »
You're welcome, happy to help.  8)