Thread: Just avoided a trojan/worm/something...
View Single Post
Old 06-23-2009, 11:28 AM  
fusionx
Confirmed User
 
Industry Role:
Join Date: Nov 2003
Location: Olongapo City, Philippines
Posts: 4,618
Quote:
Originally Posted by polish_aristocrat View Post
do you still have the servises.exe process running? I hope not.

Consider the following - download malwarebytes antimalware free version http://malwarebytes.org/ and run a full scan.

After that you might also run Combofix, here's a full guide, read it carefully before using Combofix. http://www.bleepingcomputer.com/comb...o-use-combofix
servises.exe never actually ran. It was set up to run when the system restarted, thank goodness.

Frustrating.. I've found at least 5 different names/descriptions for what appears to be the same "root" of the trojan/worm. Zotob-I, Trojan.Spadenf, Troj/Agent-KGI, Troj/Agent-JUJ , and several others...

I'm running MalwareBytes right now.. nothing so far. My system is patched up, and some of those patches were fixes for this beastie. I'm guessing that's why Outlook just crashed instead of being compromised.

ComboFix is an amazing tool. Use with care

I think I got lucky
fusionx is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote