Computer Forum - PC Hardware, Software Forums  

Go Back   Computer Forum - PC Hardware, Software Forums > Networking and Security Zone > Computer Security, Viruses and Spyware
Register Members List Calendar Search Today's Posts Mark Forums Read

Computer Security, Viruses and Spyware Matters covering firewalls, virus scanners, spyware scanners and any other security concerns.

Reply
 
LinkBack (3) Thread Tools Display Modes
  3 links from elsewhere to this Post. Click to view. #1 (permalink)  
Old 27/09/06, 07:50
chrisling's Avatar
chrisling chrisling is offline
Enthusiast
 
Join Date: May 2006
Location: Malaysia
Posts: 89
chrisling is an unknown quantity at this point
Unhappy Trojan PWS

Recently this virus had effected my girl friend's computer. The symptoms it gived are slowing down the running process, force on 'do not show hidden files and folders' in the folder option, cause Norton files crashed and cannot be updated and used further, cannot run Microsoft Office.
I roughly know the virus is Trojan Pws and its name may be Trojan PWS.QQ Pass with Norton's virus definition. I know it had altered the registry values so that everytime I cannot switch to 'show hidden files and folders'. I had check the HKCU\software\microsoft\windows\currentversion\pol cies\system\run
but it seems clean, so that's for same place of HKLM. I'm headache now...Please help me anybody...
__________________
~^.^~Do our best~^.^~
Reply With Quote
  #2 (permalink)  
Old 27/09/06, 10:56
megamaced megamaced is offline
Newbie
 
Join Date: Sep 2006
Location: /home/megamaced/
Posts: 10
megamaced is an unknown quantity at this point
Quote:
Originally Posted by chrisling
cause Norton files crashed and cannot be updated and used further
Norton is more then capable of crashing by itself

What I would suggest you do is install Avast! Home Edition and schedule a boot time scan. Then you should remove your user account from the administrator's group.
Reply With Quote
  #3 (permalink)  
Old 02/10/06, 08:25
chrisling's Avatar
chrisling chrisling is offline
Enthusiast
 
Join Date: May 2006
Location: Malaysia
Posts: 89
chrisling is an unknown quantity at this point
I finally cure it. By change the setting in registry in the following address
HKLM\Software\Microsoft\WINDOWS\CurrentVersion\Exp lorer\Advanced\Hidden\SHOWALL
I deleted the value of CheckedValue by type of REG_SZ, and create a new value of CheckedValue by the type of REG_DWORD and with the value of 1.
And then I switch to 'show hidden files and folders' and 'show system files and folders', by the way I know the virus files, which are:
C:\WINDOWS\system32\SVOHOST.exe
C:\WINDOWS\system32\winscok.dll
sxs.exe and a autorun.inf files in every drives.

megamanced,
Improper using of Norton may crashed the system. What I mean by improper use is block few of its features such as its Internet Worm Protection instead of Windows Fire Wall. Norton is good as I what I had expected since the first time I chose it, from its features of few protections against spyware, adware, virus and malicious. I do prefer to the anti virus that have the detail of the virus data in their company site. The anti virus such as Avast is lack of the features and informations. Meanwhile Symantec and TrendMicro do have.
Anyway, my problem is not relavant with what anti virus I suppose to use. Most of the viruses I fixed and terminated not by anti virus, but directly search its files and permanently delete them. Once a pc infected, anti virus is hard to react and take action. So I want to convey is prevention is better than termination.
__________________
~^.^~Do our best~^.^~
Reply With Quote
  #4 (permalink)  
Old 02/10/06, 10:03
syphus's Avatar
syphus syphus is offline
Administrator
 
Join Date: Oct 2005
Location: Far away
Posts: 2,034
syphus is on a distinguished road
Send a message via ICQ to syphus Send a message via AIM to syphus Send a message via MSN to syphus Send a message via Yahoo to syphus
Quote:
Originally Posted by chrisling View Post
So I want to convey is prevention is better than termination.
This is absolutely true

Although Norton is usually the first AV to fail post-infection, due to the fact that widespread popularity means it's a common target for AV-disabling viruses; if kept properly updated, Norton is one of the best at preventing infections occurring.
Reply With Quote
  #5 (permalink)  
Old 03/10/06, 05:16
chrisling's Avatar
chrisling chrisling is offline
Enthusiast
 
Join Date: May 2006
Location: Malaysia
Posts: 89
chrisling is an unknown quantity at this point
Thanks syphus. Recently I did XP-No-Reformat on my pc, I believethe process did change the registry value and deleted the Norton's subscription period. So now I had changed the anti virus to Avast! Home Addition v4.7.

Base on the few views from other site, we are recommended to install a extra Fire Wall. I know Norton has Fire Wall itself, which is Internet Worm Protection if I didn't wrong. So I wonder what's sphus's opinion against my case.
__________________
~^.^~Do our best~^.^~
Reply With Quote
Reply


LinkBacks (?)
LinkBack to this Thread: http://www.itsallpc.co.uk/computer-security-viruses-spyware/8050-trojan-pws.html
Posted By For Type Date
Low Interest Credit Cards WebLog » Blog Archive » Изменения по номерам билдов This thread Pingback 26/07/07 04:49
Low Interest Credit Cards WebLog » Blog Archive » 青椒炒肉的教学网站: ä¿¡æ¯æ €æœ¯ å½’æ¡£ This thread Pingback 26/07/07 04:48
SVOHOST.exe, sxs, cannot view hidden file - Google Search This thread Refback 04/11/06 07:50

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Similar Threads
Thread Thread Starter Forum Replies Last Post
Trojan virus altered files - need help Poppy1 Computer Security, Viruses and Spyware 4 20/05/06 09:46
Trojan Downloader Tai Computer Security, Viruses and Spyware 4 08/02/06 23:40
I think i have a trojan horse on my computer Weight Desktop Computer Forum 1 17/10/05 20:57


All times are GMT +1. The time now is 05:18.


| Laptop Computer Reviews | Earn Cashback on Computer Shopping in UK | Cheap Broadband Bundles

Powered by vBulletin® Version 3.6.7
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0
Content Relevant URLs by vBSEO 3.0.0