Need help - Trojan.

We've got a rune marked in your mum's bedroom.

Moderators: Benn, Calix, senji

Post Reply
Nixon
AFRIKA KORPS
Posts: 3850
Joined: Wed Dec 24, 2003 3:58 pm
Location: Aberdeen
Contact:

Need help - Trojan.

Post by Nixon »

The laptop has some kind of Trojan, I'm having difficulty staying logged on to properly diagnose the problem.

So far all I know is, AVG picks it up as an 'Agent.mer' trojan file, and there is an 'spzru.exe' that fails to run. It has installed some kind of software, and more worryingily, whatever has been installed has attempted to withdraw £19.99 out the bank account.

The executable target website is 'secure.microbillsys.com/logon.php'

Any suggestions at this point would be more than welcome.
No to U
Lady Redname
WAR ME HOMO
Posts: 2624
Joined: Wed Jan 07, 2004 8:11 pm

Post by Lady Redname »

if its tried to take 19.99 out your bank that means they already have your bank details

so call your bank and get your card cancelled

id then google the trojan and see if there is any specific cleaning programs for it
Noxin
BENEFIT CHEAT
Posts: 2091
Joined: Sat Jan 17, 2004 12:27 am

Post by Noxin »

stop downloading and running freegayporn.exe
YOUR GAMES ARE THE GAYIST THING EVER ACRCADEN CRUSADE WAS EPIC FAIL AND SO WAS ANY THING U MADE WITH A P THE REST WAS JUST FLAT OUT GAY U DONT DESERVE LIFE NO U DONT DESERVE ANYTHING U ARE JUST A GAY MORON WHO NEEDS TO GET A LIFE
Villa
Devon Knows
Posts: 5696
Joined: Mon Jan 19, 2004 12:34 am
Location: Lost in the '80s
Contact:

Post by Villa »

What the hell kind of trojan tries to nick just twenty quid ?
Signatures broken since 2009...
Benn
Posts: 1000591
Joined: Wed Dec 24, 2003 12:35 pm
Contact:

Post by Benn »

Villa wrote:What the hell kind of trojan tries to nick just twenty quid ?
After a 30 second google, it doesn't, it's just spyware;

http://www.pcadvisor.co.uk/forums/index ... &forumid=1

http://research.sunbelt-software.com/th ... tid=123902

http://groups.google.co.uk/group/micros ... %22&rnum=2#

It's trying to convince you to go pay them I think

**I might be wrong
Nixon
AFRIKA KORPS
Posts: 3850
Joined: Wed Dec 24, 2003 3:58 pm
Location: Aberdeen
Contact:

Post by Nixon »

It's actually on the online Bank statement that they have tried to withdraw £19.99.

Anyway, I tried to remove this manually from the registry settings going by other posts/sites dealing with MicroBillSys and that didn't worked, so I've formatted the laptop, and it seems to have gotten rid of it.

And Buster, I've only ever used the laptop about twice cause it's not mine :/
No to U
Buster
DAS DRAGONLODE
Posts: 1733
Joined: Sat Dec 27, 2003 3:53 pm

Post by Buster »

Nixon wrote:And Buster, I've only ever used the laptop about twice cause it's not mine :/
????
[img]http://www.light875.plus.com/buster.jpg[/img]
Nixon
AFRIKA KORPS
Posts: 3850
Joined: Wed Dec 24, 2003 3:58 pm
Location: Aberdeen
Contact:

Post by Nixon »

Ups, I meant Noxin. learn2read nixon
No to U
Post Reply