cat & mouse & trojan horse

Dear MVP's;

I was Googling. A cat walked across my desk and stepped on my mouse while
the pointer was out of the way on the "Sponsored Links" column. Seriously!

AVG alerted me that "Trojan Horse Dialer.8.AP" had been detected and asked
if I wanted to fix the problem. I OK'd this. Then it asked if I wanted to
"Heal" the problem. I again agreed. However, it informed me that the problem
could not be fixed by healing. Apparently, some aspect of my Java Script had
to be deleted. But I have no idea what aspect nor how to fix it.

That was 3 weeks ago. I haven't noticed any problem concerning Java,
although I occasionally see a note on the bottom of the IE page which says:
"Shortcut to Java Script Void".

Since I am on HS Cable, I don't think the Dialer Trojan would have caused me
a problem, although I suppose I could have transmitted it were it not for
AVG.

So, when y'all stop laughing, perhaps someone could advise me about how to
go about evaluating & fixing whatever is amiss with my Java.

rooster
boundary bay, bc

p.s. Anybody want a cat skin?

Please give the following a try...

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt261.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

2) Reboot your PC into Safe Mode
3) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
4) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware

* * * Please report back your results * * *

Dave






"rooster" wrote in message
...
| Dear MVP's;
|
| I was Googling. A cat walked across my desk and stepped on my mouse while
| the pointer was out of the way on the "Sponsored Links" column. Seriously!
|
| AVG alerted me that "Trojan Horse Dialer.8.AP" had been detected and asked
| if I wanted to fix the problem. I OK'd this. Then it asked if I wanted to
| "Heal" the problem. I again agreed. However, it informed me that the problem
| could not be fixed by healing. Apparently, some aspect of my Java Script had
| to be deleted. But I have no idea what aspect nor how to fix it.
|
| That was 3 weeks ago. I haven't noticed any problem concerning Java,
| although I occasionally see a note on the bottom of the IE page which says:
| "Shortcut to Java Script Void".
|
| Since I am on HS Cable, I don't think the Dialer Trojan would have caused me
| a problem, although I suppose I could have transmitted it were it not for
| AVG.
|
| So, when y'all stop laughing, perhaps someone could advise me about how to
| go about evaluating & fixing whatever is amiss with my Java.
|
| rooster
| boundary bay, bc
|
| p.s. Anybody want a cat skin?
|
|

I'll take the cat skin. (But it's too soon for me to break my vow &
enter another Java thread!)

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
should things get worse after this,
PCR

"rooster" wrote in message
...
| Dear MVP's;
|
| I was Googling. A cat walked across my desk and stepped on my mouse
while
| the pointer was out of the way on the "Sponsored Links" column.
Seriously!
|
| AVG alerted me that "Trojan Horse Dialer.8.AP" had been detected and
asked
| if I wanted to fix the problem. I OK'd this. Then it asked if I wanted
to
| "Heal" the problem. I again agreed. However, it informed me that the
problem
| could not be fixed by healing. Apparently, some aspect of my Java
Script had
| to be deleted. But I have no idea what aspect nor how to fix it.
|
| That was 3 weeks ago. I haven't noticed any problem concerning Java,
| although I occasionally see a note on the bottom of the IE page which
says:
| "Shortcut to Java Script Void".
|
| Since I am on HS Cable, I don't think the Dialer Trojan would have
caused me
| a problem, although I suppose I could have transmitted it were it not
for
| AVG.
|
| So, when y'all stop laughing, perhaps someone could advise me about
how to
| go about evaluating & fixing whatever is amiss with my Java.
|
| rooster
| boundary bay, bc
|
| p.s. Anybody want a cat skin?
|
|

Short on cash for clothes this year?

--=20

Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm


"PCR" wrote in message =
...
I'll take the cat skin. (But it's too soon for me to break my vow &
enter another Java thread!)
=20
--=20
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
should things get worse after this,
PCR

No. But I'm hoping the claws come with it. (They won't be as good as
Bear's, though.)

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
should things get worse after this,
PCR

"Brian A." gonefish'n@afarawaylake wrote in message
...
Short on cash for clothes this year?

--

Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm


"PCR" wrote in message
...
I'll take the cat skin. (But it's too soon for me to break my vow &
enter another Java thread!)

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
should things get worse after this,
PCR

Couldn't afford any dental floss?

--=20

Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm


"PCR" wrote in message =
...
No. But I'm hoping the claws come with it. (They won't be as good as
Bear's, though.)
=20
--=20
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
should things get worse after this,
PCR

"Brian A." gonefish'n@afarawaylake wrote in message
...
Short on cash for clothes this year?
=20
--=20
=20
Brian A.
=20
Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm
=20
=20
"PCR" wrote in message
...
I'll take the cat skin. (But it's too soon for me to break my vow &
enter another Java thread!)

--=20
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
should things get worse after this,
PCR
=20

That ain't it. I hardly even brush any more now. Four teeth are gone &
five are fakes. The others are more filling than anything else!

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
should things get worse after this,
PCR

"Brian A." gonefish'n@afarawaylake wrote in message
...
Couldn't afford any dental floss?

--

Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm


"PCR" wrote in message
...
No. But I'm hoping the claws come with it. (They won't be as good as
Bear's, though.)

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
should things get worse after this,
PCR

"Brian A." gonefish'n@afarawaylake wrote in message
...
Short on cash for clothes this year?

--

Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm


"PCR" wrote in message
...
I'll take the cat skin. (But it's too soon for me to break my vow &
enter another Java thread!)

--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
should things get worse after this,
PCR

Hi Dave;

Thanks for your thoughtful response. I'll get back to you in a day or so
when I get some time to follow your suggestion.

I already have Adaware SE and I did several AVG/ Adaware/Spybot S&D/Clean
Boot ( à la Terhune) cycles immediately after the aforementioned incident.
The results were all nominal. I deduced from this that AVG had purged the
Trojan. AVG also audits outgoing emails; no alerts so far.

I also have Kerio Firewall with what I think is a reasonably tight rule
configuration and logging of questionable activity in effect. Although I
still have a lot to learn about all these protections, I *assume* a trojan
dialer would have provoked some kind of alert by now, given that the event
occured more than 3 weeks ago. But I am still very much a newbie and it
would be easy to convince me that my assumptions are quaint, albeit flawed.

Looking for possible holes in my Java Script file is still a concern. I have
no idea how to go about determining this, or what remedy would apply.


rooster

Hi PCR;

The skin is yours. I'll even pay the shipping.

The cat wasn't mine anyway, and I am ambitious to get rid of the evidence
while I can still lie convincingly to its owner as to it's truancy.
By'n'bye, the smirk I am supressing is destined to emerge, become a
permanent facial feature and thereby compromise my ability to commiserate
without provoking suspicion.

rooster

Ah, ha, ha (about the cat). Well, the MSKB comes up blank for "Shortcut
to Java Script Void". It doesn't look to me that files were deleted,
necessarily. It could be AVG simply disabled a shortcut by removing it's
target or something. Also, if it is something on a particular WEB site,
it could be the site needs repair. I guess, post the site, then. (But I
just don't know, sorry.)


--
Thanks or Good Luck,
There may be humor in this post, and,
Naturally, you will not sue,
should things get worse after this,
PCR

"rooster" wrote in message
...
| Hi PCR;
|
| The skin is yours. I'll even pay the shipping.
|
| The cat wasn't mine anyway, and I am ambitious to get rid of the
evidence
| while I can still lie convincingly to its owner as to it's truancy.
| By'n'bye, the smirk I am supressing is destined to emerge, become a
| permanent facial feature and thereby compromise my ability to
commiserate
| without provoking suspicion.
|

| rooster"rooster" wrote in message
...
| Dear MVP's;
|
| I was Googling. A cat walked across my desk and stepped on my mouse
while
| the pointer was out of the way on the "Sponsored Links" column.
Seriously!
|
| AVG alerted me that "Trojan Horse Dialer.8.AP" had been detected and
asked
| if I wanted to fix the problem. I OK'd this. Then it asked if I wanted
to
| "Heal" the problem. I again agreed. However, it informed me that the
problem
| could not be fixed by healing. Apparently, some aspect of my Java
Script had
| to be deleted. But I have no idea what aspect nor how to fix it.
|
| That was 3 weeks ago. I haven't noticed any problem concerning Java,
| although I occasionally see a note on the bottom of the IE page which
says:
| "Shortcut to Java Script Void".
|
| Since I am on HS Cable, I don't think the Dialer Trojan would have
caused me
| a problem, although I suppose I could have transmitted it were it not
for
| AVG.
|
| So, when y'all stop laughing, perhaps someone could advise me about
how to
| go about evaluating & fixing whatever is amiss with my Java.
|
| rooster
| boundary bay, bc
|
| p.s. Anybody want a cat skin?