Malware name :Win32:Dialer - 1154 [Trj]

[Maxx_original]

break the links, pls

[angeaa]

Sorry, I do not understand what I have to do!

[Lisandro]

Sorry, I do not understand what I have to do!

Edit the links, putting spaces between it... this way, people won't click on it.
Like http:  //  www. mulopol. com  /track2/track2.php

[angeaa]

that links are only in Chronology and I cannot edit them. I can only delete but then they appears again! also if i do not use them! they are present in all the days of Chronology

[oldman]

They meant edit them in your post. Click the modify button in your post, edit the links, then click save. 

[angeaa]

I have still the virus as described in  Reply #29 on: March 27, 2008, 02:15:36 PM.
About the 3 sites, I have split the address as suggested to me.
They are:
http: //  www. mulopol. com/track2/track2.php
http: //  www . wpse . mobi /track2/track2.php
http: / /www . wsepro . com/track2/track2.php

I have  canceled them in Chronology. but they are back again , also if I do not visit them. They appear in any day of the Chronology.

[Lisandro]

Hope they give priority to this and improve detection...

[angeaa]

The situation is going worst. From yesterday there is another virus of the same type.

04/04/08   18.25.20   1207326320      4294856997   
Sign of "Win32:Dialer-JC [trj]" has been found in
"C:\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\O9O9QF49\2029[1].EXE\[UPX]" file. 


 I have still in the Chest of AVAST the  Virus
Win32:Dialer-1154 [trj]
Original file location: C:\WINDOWS\TEMPORARY INTERNET
FILES\CONTENT.IE5\A8U1TOGZ\2026[1].EXE.

There is someone that can suggest me what to do?
 May I delete that file from the chest?
 What else can I do?
 
It becomes very difficult to use Windows , because this new Virus  is not easy to stop as the previous one and  it appears continuously  until the system goes blocked!

I am afraid that I have to Uninstall AVAST and try to install again NORTON, hoping that this could solve the problem.

[Lisandro]

What else can I do?

I suggest:

1. Disable System Restore and reenable it after step 3.
2. Clean your temporary files.
3. Schedule a boot time scanning with avast with archive scanning turned on.
4. Use SUPERantispyware and/or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
5. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
7. Immunize your system with SpywareBlaster or Windows Advanced Care.
8. Check if you have insecure applications with Secunia Software Inspector.

I am afraid that I have to Uninstall AVAST and try to install again NORTON, hoping that this could solve the problem.

I suggest that you first use on-line scanning:
Kaspersky (very good detection rates)
ESET NOD32
Trendmicro housecall
F-Secure
BitDefender (free removal of the malware)

[oldman]

Hi Tech. It's a win98 system. So most of the things you suggested won't work. SAS does and I think F-secure online still does, though Kav dropped win98se a some month ago. Any other thoughts on online scans?