PDA

View Full Version : IRC.Backdoor.Trojan "sigh"


earsofdoom
January 25th, 2007, 11:17 AM
Well after i finished my Exam in school today i got back to find my computer at home left on with about 90 or so warning of detected IRC.Backdoor.Trojan's and W32.Alcra.F virus's (which piss's me off since i have more protection then an armored tank on this machine) anyone have any advice on how to fix this and prevent it from happening in the future? I've never had much luck in the past with this sorta thing.

Soluzar
January 25th, 2007, 11:20 AM
What are you using? If you say "Norton" or "Semantec", then that's your problem right there. Get rid of the worthless junk, and install NOD or AVG. If you use LimeWire or KaZaA, or anything other than bittorrent for filesharing, that's the problem.

If you're not using any of that crap, then I apologize for the assumption. You'll still need to tell us what you are using before we can diagnose the problem, though.

Reidar
January 25th, 2007, 11:36 AM
Make sure that your protection isn't missing any of these (not necessarily these specific brands, but the essential programs themselves):

Anti-spyware:

1. Download Spybot at http://www.spybot.info

2. In Spybot, click on Mode at the top. Set it to Advanced.

3. Click on Tools at the bottom. Click on Resident, and put a checkmark next to both SDHelper and TeaTimer.

4. Download and install Ad-Aware at http://www.download.com/3000-2144-10045910.html

5. Download and install SpywareBlaster at http://www.javacoolsoftware.com/spywareblaster.html. This is easy to configure on your own. It acts like TeaTimer; it stops spyware from getting installed in the first place.

Firewall:

1. If you use Windows, turn on Windows Firewall in the Control Panel. It's not great on its own, but it's unobtrusive and will do some good as a layer. While you're in the Control Panel, make sure that you have automatic updates turned on for your system.

2. Download Comodo Firewall at http://www.personalfirewall.comodo.com

3. Once that's installed, open it. Click on Security, then Advanced, and then Configure under Miscellaneous. Set the Alert Frequency Level to Very Low so that only one alert is shown for each application and you're not bombarded with messages all the time.

Anti-virus:

1. Download Avira Anti-Vir at http://www.free-av.com/

If you have Firefox, download the extensions NoScript and Permit Cookies. Turn off all cookies in Firefox's options menu, and then manually permit the sites that you do trust with the Permit Cookies extension (make sure that your status bar is turned on so that you have access to the controls for this). Do the same for all scripts, and make exceptions for trusted sites. If you subscribe to all over the web, it's easy to make them trusted. You just right click to turn on scripts, and click the C in your status bar to turn on cookies for that specific site.

earsofdoom
January 25th, 2007, 11:50 AM
What are you using? If you say "Norton" or "Semantec", then that's your problem right there. Get rid of the worthless junk, and install NOD or AVG. If you use LimeWire or KaZaA, or anything other than bittorrent for filesharing, that's the problem.

If you're not using any of that crap, then I apologize for the assumption. You'll still need to tell us what you are using before we can diagnose the problem, though.

I use Avg, norton is on my system but i never use the worthless thing. And i do have limewire on here (well not me really.... my parents for downloading music) but its Pro edition, i myself use torrents.

And thanks for the help reider, though i already have firefox, spybot, and ad-aware. (though i suspect other ppl are using explorer on my machine)

VidelCoolGirl
January 25th, 2007, 11:57 AM
GOD! I had that virus. Its gonna kick you in da ***.

sazae
January 25th, 2007, 12:00 PM
http://vil.nai.com/vil/stinger/

Use McAfee's Stinger. It's a small standalone program that is only used to get rid of those certain problems. Just run it and then delete the .exe off your computer. Simple and works every time.

Soluzar
January 25th, 2007, 12:39 PM
I use Avg, norton is on my system but i never use the worthless thing. And i do have limewire on here (well not me really.... my parents for downloading music) but its Pro edition, i myself use torrents.

And thanks for the help reider, though i already have firefox, spybot, and ad-aware. (though i suspect other ppl are using explorer on my machine)
You didn't mention a firewall... personally I suspect that your problems come from your parents use of LimeWire. The files uploaded to that service are usually crawling with nasties, even if you are using the Pro version.

earsofdoom
January 25th, 2007, 01:15 PM
You didn't mention a firewall... personally I suspect that your problems come from your parents use of LimeWire. The files uploaded to that service are usually crawling with nasties, even if you are using the Pro version.

Im running the basic windows firewall becouse the others i used caused problems for me when it came to world of warcraft, and thats my guess of how it happened (i try to get them to use torrents but older ppl arn't really all that good with computers) now I just gotta figure out how to get rid of it. (would using that stingray thing work?) Still a pain in the !@# though, i hate all those 8 year old kids out there who have nothing better to do but mess around with other ppls computers.

Soluzar
January 25th, 2007, 01:30 PM
...now I just gotta figure out how to get rid of it.
So AVG is detecting this virus but is unable to remove it? If so, take a note of which file is affected, and boot into safe mode to delete it. The reason AV programs have a problem removing some virus infections is because the file is held open and locked by Windows, so you can't delete it.

In safe mode that should not apply. Try it.

Also IRC.Backdoor.Trojan is a virus class, not a specific virus. Is the name of this particular virus actually "sigh"? When I saw that in the topic title I assumed it was just an expression of your frustration. -_-;

master terrence
January 25th, 2007, 03:11 PM
question:

Is bittorrent and other torrent clients safer than kazaa?

Soluzar
January 25th, 2007, 03:21 PM
question:

Is bittorrent and other torrent clients safer than kazaa?
It is safer as long as you get your torrents from trustworthy sites. The type of hash checking that is built into Bittorrent makes it much harder (though not impossible) for fake files, or files containing viruses to be subtituted for the original good download.

It doesn't stop someone uploading a nasty virus-laden torrent, but it makes it far easier to get files from trustworthy sources, such as AnimeSuki for fansubs. Establishing which sites and which uploaders you trust is left as an exercise for the reader. ;)

KaZaA also has a bunch of malware built into it, which Sherman repeatedly insist is completely harmless.

If you're asking about safety in the sense of 'getting cought' then torrents are not really any more safe. Lets face it, if we're copying things illegally, we take risks.

Samurai Drifter
January 25th, 2007, 03:23 PM
I use Avg, norton is on my system but i never use the worthless thing. And i do have limewire on here (well not me really.... my parents for downloading music) but its Pro edition, i myself use torrents.

And thanks for the help reider, though i already have firefox, spybot, and ad-aware. (though i suspect other ppl are using explorer on my machine)
Tell them to get rid of Limewire. You'll just get more viruses/trojans.

Also, get a Mac. :P

HSaabedra
January 25th, 2007, 03:25 PM
It is safer as long as you get your torrents from trustworthy sites. The type of hash checking that is built into Bittorrent makes it much harder (though not impossible) for fake files, or files containing viruses to be subtituted for the original good download.

It doesn't stop someone uploading a nasty virus-laden torrent, but it makes it far easier to get files from trustworthy sources, such as AnimeSuki for fansubs. Establishing which sites and which uploaders you trust is left as an exercise for the reader. ;)

KaZaA also has a bunch of malware built into it, which Sherman repeatedly insist is completely harmless.

If you're asking about safety in the sense of 'getting cought' then torrents are not really any more safe. Lets face it, if we're copying things illegally, we take risks.

By that logic, I've already violated my cellular services provider TOS, and the DMCA, do I care? Not anymore after reading Free Culture.

DazzleKitty
January 25th, 2007, 03:47 PM
I actually had IRC.Backdoor.Trojan on my computer a long time ago, and I think Spybot took care of it.

I know there are a lot of Norton haters here, but I've been using it a while and rarely get any viruses (it's been way over a year since I got one, and the one I had was minor). I always get super-paranoid about crap getting on my computer. Is Norton sufficient if you don't download much and only browse 'safe' sites?

Hajime Saitou
January 25th, 2007, 07:49 PM
I actually had IRC.Backdoor.Trojan on my computer a long time ago, and I think Spybot took care of it.

I know there are a lot of Norton haters here, but I've been using it a while and rarely get any viruses (it's been way over a year since I got one, and the one I had was minor). I always get super-paranoid about crap getting on my computer. Is Norton sufficient if you don't download much and only browse 'safe' sites?

Norton is an ok program contrary to what everyone says. It works well, and with additional programs can keep your computer clean. It's what Norton DOESN'T do that's a problem. I'm not going to say what, but it involves certain groups that release malware and Norton allows it, even though they can detect it *cough http://en.wikipedia.org/wiki/Norton_AntiVirus#Criticisms cough*.

As for your problem Earsofdoom, I would recommend getting avast!. I use Norton, but I can still acknowledge that Avast! basically wipes the floor with all other programs of the type. The home edition is free, and works very well. One other thing, you need a firewall. I would recommend Outpost. I haven't personally used it, but it is recommended a by a group of people who are the only people I trust when it comes to security. And you should also probably get rid of Limewire. P2P file sharing apps are way more vulnerable and targeted more often than torrents. I'm going to send you a PM with a little bit more.