[kimmydawn]

My daughter and her husband acquired his grandmother's computer when she passed away. It hadn't been used for much but ebay and playing games I was told (which may be true I reckon).

Anyhow, my daughter and her hubby don't have room for a computer station with the baby coming, they're here most of the time, the don't have an online service, etc., and asked me if I would buy it. I jumped on it...cheap, like new, computer...a back up, or make it primary even...whatever.

I got it here and it was running a bit slow, but realized that it was doing automatic updates (it hadn't been online in so long)...there were 35 updates. So that was finished and I immediately download my virus protection and immediately it started popping up with some realtime protection things.

I ran the virus scan and there were over 1,200 infected files!!!!! It appears that all of them were infected with the same trojan. I've never even heard of the like. Have any of you???

It appears to be all clean now, has gobs of space and running good. I've also ran adaware and spybot. Do y'all think it's ok? Of course, I'm still going to give them the money whether I can use it or not just because it's my kids and I help them that why, but what do y'all think?

It appears to run like a dream and is clean now.

KD

[lenjan]

KD, I'm glad it was just viruses (virii?). When I saw the title of your post and then read the first little bit, I was afraid you were going to have found out Granny had a secret life.

Ya think I'm dealing with too many pervs, covering courts?

Candy

I thought the same thing, Candy.
Guess I should get my mind out of the gutter.
KD, you've done everything I know about. Of course, I'm just a frog.

[kimmydawn]

LOL candy! hehehe.

Thanks so much, guys. No, I don't think she ever had a virus protection or ANYTHING on here. McAfee was installed in the computer when she bought it and I just uninstalled it so there would be no conflict with mine that I installed. I was amazed that adaware had never been run and only found 16 issues, so it shows it wasn't "surfed" alot. I think she just went to the wrong place at the wrong time OR opened an email.

I was amazed that this trojan had spread to over 1,200 files!

Other than that, it was/is really clean...almost like brand new actually.

I've set my virus scan to run nightly and will do that for a week or two then back off to weekly after that. Also, I have it set for full system scan and not a smart scan. There are a bunch of files that can't be scanned, but I think they're OK?

So, y'all think if I get it good and clean, it's usable and will be a good little machine for me? I'll never check my bank account or anything on it. I'll use my laptop for that because I have norton on it.

KD

There's this with over a thousand more:

C:\WINNT\Temp\fba22.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fba24.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fba28.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbaE0.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbaEE.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbb16E.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbb3B1.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbb3E5.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbb851.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbc261.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbc47E.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbd96A.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbe4B2.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbe657.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbe6EF.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbe772.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbeA23.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbf69E.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbfAE3.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbgA25.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbgA26.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbu44F.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fbw5EA.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fca90.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fcb15C.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fcb2D7.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fcb3DC.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fcc362.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fcc473.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fcc49D.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fcc603.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fcd2A1.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fcd489.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fcd48D.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fco13A3.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fcq838.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fcs1EA2.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fcs33A.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fda67.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fda78.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fda7A4.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdb152.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdb1A5.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdb1DB.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdb3B6.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdc3A7.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdc594.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdd251.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdd4AC.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdd4D9.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdd64B.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdd874.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fde301.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fde856.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdeA16.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdeA84.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdg809.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdhAA0.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdm11B1.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdn121E.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdt3E5.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fdy6E7.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fea1C9.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fea54.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fea814.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fea85.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\feaB6.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\feaDF.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\feb1F1.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fec263.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fec29D.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fec3A9.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fec5D1.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fef764.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fefBA4.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\feg6DF.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fehABF.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fehB59.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\feq17C4.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\feq1A35.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fes1EA3.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fes1F16.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffa1E.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffa1FF.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffa2D.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffa49.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffa62.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffaF2.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffb1C8.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffb1CF.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffb1F2.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffb1F4.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffb1FF.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffb20A.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffb403.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffc609.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffd2B9.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffd37A.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffd4AF.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffe676.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffe6A7.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffe913.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffeA1B.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffeAAE.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fff740.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fff844.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffp14A8.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffq1CCE.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffv517.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\ffx664.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fga17B.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fga797.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fgaA5.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fgaA7.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fgaEB.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fgaF5.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fgb153.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fgc2B5.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fgc3B5.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fgd9C5.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fge3C8.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fge639.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fge6D0.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fgeA26.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fgeAAF.tmp - Win32/Pinfi.A trojan. Deleted.
C:\WINNT\Temp\fgfB0A.tmp - Win32/Pinfi.A trojan. Deleted.

[kimmydawn]

HMMM, I just read this...should I disable the system restore, come back in safe mode and run virus scan?

What do y'all think? Think it's worth it to do, should I wait to see if virus scan picks up more, then do this, or forget the whole deal?

Thanks!

KD

Sorry, I forgot to include the link to the site I'd just read: http://www.symantec.com/security_res...99&tabid=3

[Mystry]

a little late for this post Kimmydawn but better late than never...watchout...lol...anyway...copy and paste each of these trojans into goggle and you will find out what they are and how to remove them...also if you are interested there is a freebie program called hijackthis this that is good for finding all kinds of baddies...and...always an and eh...lol...maybe better than a but...but with the same connotations...lol... regseeker too is good also free...(BE AWARE THAT THESE PROGRAMS CAN BE DANGEROUS)...register yourself at majorgeeks.com and have fun...

[DocClyde]

LOL--Candy and Keb...I thought something of the kind myself...LOL, that was kind of funny...

Yeah, thats what I was telling all those who get the emails about greeting cards and stuff, not to open them...you can NEVER be to careful when it comes to viruses and trojans and worms, and lions and tigers and bears...

[(JD)]

Many of the game sites tag that stuff onto you, esp if you don't use a pop up blocker. Then, if you click on a pop up ad, you're in the tracking for sure.

Also, many sites like for ecards and such have an agreement you click off before you can use the site, and few ppl actually look it over. OFTEN you can scroll to the bottom and find a place where it's automatically checked off for you to receive third party emails and in essence, spam. Unchecking the box stops a lot of that.

TC

[DocClyde]

Yep, cookies are sure useful for when people cannot remember their passwords, or want to have a special greeting for them, like "Welcome back to PsychCentral Clyde!" but other than being a tracing or tracking use, it really is more to keep a "piece of the operator"...

[TwilightDawn]

Ouch, when I hear that I think back to my grandpa's computer! We have to do biweekly repair jobs because every week he gets another virus, and next week he'll tell us!

It sounds like it'd be pretty clean now. It was good you did catch it, who knows what it would have done?

[bebop]

I use to get them and deleted them with no issues at all. I think you are good to go with it hon!

When I got my laptop (a couple years back) I had norton on it but it turned out that it wasn't set to autoscan and it was a couple weeks before I actually ran a scan on it. I found about 72 viruses! i couldn't see where on earth i might have gone to pick up all that... didn't do anything out of the usual...

norton managed to deal to all but one of them. my office mate was a bit of a comp. whizz and so he did as mystry suggested and typed it into google to see what he could find out about it. he managed to find instructions for getting rid of it. he followed the instructions. it did deal to it - but it also took him half a day to get it off my computer.

i currently use AVG virus scanner. it was free to download and it seems to fetch updates off the net (to deal to new viruses) every day. i run it automatically on start-up every day. it does slow down my system considerably (system is getting old now) but i haven't found any viruses (or had any problems) since then. i've heard that no one virus checker is able to find all viruses. some people thus have two different virus checkers. i'm not sure what is reasonable caution vs paranoia, though. i do lots of google scholar searches and visit a few message boards and check email but that is about it really.

i've used hijack this at times, too. i'm a little scared because i'm not sure what some of the stuff is... i'm similarly scared about changing 'auto start on start-up' settings because i'm not sure what some of the stuff is... i think you can type the stuff into google, though, and see. and of course if you get your system to save itself (create a restore point) before mucking around with it you can always restore it to the save point.

[kimmydawn]

wow, thanks for sharing y'all.

it's doing really well. i thought that something critical was wrong when i kept getting an application error window recently. i would eventually have to shut down then all would be fine till next time.

it turns out that i went wireless throughout the house...that computer too and the guy did configure the wireless completely.

i was on the phone with them for over an hour tonight and it's all better. we went in and had windows configure it for me.

i've not found a hint of anything since the initial and run the virus scan weekly, plus adaware and spybot.

it's turned out to be a good buy.

KD