questions about TCP optimizer

General discussion related to Cable Modems, DSL, Wireless, Fiber, Mobile Networks, Wireless ISPs, Satellite, or any other type of high-speed Internet connection, general issues and questions here. Review and discuss ISPs as well (AT&T / SBC, BellSouth, Bright House, CableOne, Charter, Comcast, Covad, Cox, Cablevision / Optimum Online, TMobile, Verizon FIOS, Shaw, Telus, Starlink, etc.)
User avatar
Goliard
Member
Posts: 81
Joined: Tue Apr 29, 2008 4:33 am
Location: Cell 187 Block C. Styx River RD.

Theres Bugs In Your Soup

Post by Goliard »

Trojan.Webus.B - Symantec.com
... 2003, Windows XP. When Trojan.Webus.B is executed, it performs the following
actions: Copies itself as %Windir%\system\lsass.exe. ...

VBS.Ypsan.E@mm - Symantec.com
... VSHWin32.exe; VidSvr.exe; VSMon.exe; VSSTat.exe; VSSvc.exe; Ad-Watch.exe;
AIM.exe; Advchk.exe; AgentSvr.exe; AlertSvc.exe; ALG.exe; ALogServ ...

Adware.AllSum - Symantec.com
... the following registry entries: "mscfs" = "RUNDLL32 C:\WINDOWS\system32\msibm\cfsys.
dll,cfs" "spoolsv" = "C:\WINDOWS\system32\spoolsv\spoolsv.exe -printer" to ...

VBS.Ypsan.E@mm - Symantec.com
... Jdbgmgr.exe; KB891711.exe; LoadQM.exe; LoadWC.exe; Locator.exe; Lsass.exe;
LuComServer.exe; Lucoms~1.exe; rtvscan.exe; MAD.exe; MAPISp32.exe; ...

Symantec Security Response Advisory - Symantec Intruder Alert ...
20 June, 2002 Symantec Intruder Alert Denial of Service in the snmptrap.exe
module Risk Low. Overview Symantec is aware of a reported ...

Trojan.Syginre - Symantec.com
... Update" = "%Windir%\kdb34894234.exe" HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run\"SysCheck" = "\msdtc.exe" HKEY_CURRENT_USER\Software ...

Adware.PurityScan - Symantec.com
... exe; %System%\cmd.exe; %System%\dexplore.exe; %System%\iexplore.exe;
%System%\notepad.exe; %System%\msdtc.exe; %System%\javaw.exe; %System ...


THOUGHT I RECOGNIZED A COUPLE MORE,DIDNT LOOK EM UP BUT YOU GET THE IDEA
I Suffer therefor I exist,,
User avatar
Brave_heart
Member
Posts: 64
Joined: Fri Apr 18, 2008 8:05 pm

Post by Brave_heart »

Goliard wrote:Trojan.Webus.B - Symantec.com
... 2003, Windows XP. When Trojan.Webus.B is executed, it performs the following
actions: Copies itself as %Windir%\system\lsass.exe. ...

VBS.Ypsan.E@mm - Symantec.com
... VSHWin32.exe; VidSvr.exe; VSMon.exe; VSSTat.exe; VSSvc.exe; Ad-Watch.exe;
AIM.exe; Advchk.exe; AgentSvr.exe; AlertSvc.exe; ALG.exe; ALogServ ...

Adware.AllSum - Symantec.com
... the following registry entries: "mscfs" = "RUNDLL32 C:\WINDOWS\system32\msibm\cfsys.
dll,cfs" "spoolsv" = "C:\WINDOWS\system32\spoolsv\spoolsv.exe -printer" to ...

VBS.Ypsan.E@mm - Symantec.com
... Jdbgmgr.exe; KB891711.exe; LoadQM.exe; LoadWC.exe; Locator.exe; Lsass.exe;
LuComServer.exe; Lucoms~1.exe; rtvscan.exe; MAD.exe; MAPISp32.exe; ...

Symantec Security Response Advisory - Symantec Intruder Alert ...
20 June, 2002 Symantec Intruder Alert Denial of Service in the snmptrap.exe
module Risk Low. Overview Symantec is aware of a reported ...

Trojan.Syginre - Symantec.com
... Update" = "%Windir%\kdb34894234.exe" HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run\"SysCheck" = "\msdtc.exe" HKEY_CURRENT_USER\Software ...

Adware.PurityScan - Symantec.com
... exe; %System%\cmd.exe; %System%\dexplore.exe; %System%\iexplore.exe;
%System%\notepad.exe; %System%\msdtc.exe; %System%\javaw.exe; %System ...


THOUGHT I RECOGNIZED A COUPLE MORE,DIDNT LOOK EM UP BUT YOU GET THE IDEA
so thats what i "fix" using hijackthis?
512MB 8800 GTS|AMD athlon 6000 X2|4GB OCZ platinum 800|700W OCZ gamexstream|gigabyte MA770|modded coolermaster mystique|250GB barracuda|razer diamondback| vista 64 HP
User avatar
Goliard
Member
Posts: 81
Joined: Tue Apr 29, 2008 4:33 am
Location: Cell 187 Block C. Styx River RD.

Post by Goliard »

I'm not familiar with "hijackthis" Just knew couple of signatures on your list an poped over to the Norton site to be sure.

YES, you have to remove them an any others on the list that check bad with some virus/apyware tool.

Didnt check all the items on list but sure theres more bugs there.

You wish look them up go to: http://searchg.symantec.com/search?
(page is blank except for search box, kina my back door)
To check the entries I didnt look up all you need to type in is the last two words in the string \/,....,\/
"Service: @%systemroot%\system32\>>vssvc.exe<<,-102 (VSS) - Unknown owner -"

VBS.Ypsan.E@mm - Symantec.com
... VSHWin32.exe; VidSvr.exe; VSMon.exe; VSSTat.exe; VSSvc.exe; Ad-Watch.exe; ^^^':':'^^

As common as some of those are realy supprised your antivirus didnt catch them right off the bat.

well hope that does ya some good ,, gota get out o here for awhile
I Suffer therefor I exist,,
User avatar
mccoffee
Posts: 13365
Joined: Sat Nov 03, 2001 12:00 pm
Location: Cleveland, Ohio, United States

Post by mccoffee »

Boot in safe mode run an antivirus ,and adaware spybot ,and also the windows malicous software some that could be rooted.
Comptia a+ n+
User avatar
Brave_heart
Member
Posts: 64
Joined: Fri Apr 18, 2008 8:05 pm

Post by Brave_heart »

Goliard wrote:Trojan.Webus.B - Symantec.com
... 2003, Windows XP. When Trojan.Webus.B is executed, it performs the following
actions: Copies itself as %Windir%\system\lsass.exe. ...

VBS.Ypsan.E@mm - Symantec.com
... VSHWin32.exe; VidSvr.exe; VSMon.exe; VSSTat.exe; VSSvc.exe; Ad-Watch.exe;
AIM.exe; Advchk.exe; AgentSvr.exe; AlertSvc.exe; ALG.exe; ALogServ ...

Adware.AllSum - Symantec.com
... the following registry entries: "mscfs" = "RUNDLL32 C:\WINDOWS\system32\msibm\cfsys.
dll,cfs" "spoolsv" = "C:\WINDOWS\system32\spoolsv\spoolsv.exe -printer" to ...

VBS.Ypsan.E@mm - Symantec.com
... Jdbgmgr.exe; KB891711.exe; LoadQM.exe; LoadWC.exe; Locator.exe; Lsass.exe;
LuComServer.exe; Lucoms~1.exe; rtvscan.exe; MAD.exe; MAPISp32.exe; ...

Symantec Security Response Advisory - Symantec Intruder Alert ...
20 June, 2002 Symantec Intruder Alert Denial of Service in the snmptrap.exe
module Risk Low. Overview Symantec is aware of a reported ...

Trojan.Syginre - Symantec.com
... Update" = "%Windir%\kdb34894234.exe" HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run\"SysCheck" = "\msdtc.exe" HKEY_CURRENT_USER\Software ...

Adware.PurityScan - Symantec.com
... exe; %System%\cmd.exe; %System%\dexplore.exe; %System%\iexplore.exe;
%System%\notepad.exe; %System%\msdtc.exe; %System%\javaw.exe; %System ...


THOUGHT I RECOGNIZED A COUPLE MORE,DIDNT LOOK EM UP BUT YOU GET THE IDEA
i do not see any of those in my hijackthis list.....


how do i boot in safe mode?
512MB 8800 GTS|AMD athlon 6000 X2|4GB OCZ platinum 800|700W OCZ gamexstream|gigabyte MA770|modded coolermaster mystique|250GB barracuda|razer diamondback| vista 64 HP
Post Reply