BACK DOOR BOT or TROJAN AGENT?

Hi Sneakyone:

Seems to be running OK. Not slow like before. Scan said clean from Eset. That made me feel good. What are your thoughts?

Thanks,
Karen

Hi.

Your computer is now clean. Now, time to remove the tools used, and update your computer to prevent vulnerability.

Updating System Restore
Now to get you off to a good start we will clean your restore points so that all the bad stuff is gone for good. Then if you need to restore at some stage you will be clean. There are several ways to reset your restore points, but this is my method:

• Select Start > All Programs > Accessories > System tools > System Restore.
  
• On the dialogue box that appears select Create a Restore Point
  
• Click NEXT
  
• Enter a name e.g. Clean
  
• Click CREATE.

You now have a clean restore point.

To get rid of the bad ones:

• Select Start > All Programs > Accessories > System tools > Disk Cleanup.
  
• In the Drop down box that appears select your main drive e.g. C
  
• Click OK
  
• The System will do a calculation of temporary/old files, and then display a dialogue box.
  
• Select the More Options Tab.
  
• At the bottom will be a System Restore box with a CLEANUP button click this
  
• Accept the Warning and select OK again, the program will close and you are done.

========

Removing the tools
Now, to remove all of the tools we used and the files and folders they created, please do the following:

Download OTC.exe by OldTimer:

• Save it to your Desktop.
  
• Double click OTC.exe.
  
• Click the CleanUp! button.
  
• If you are prompted to Reboot during the cleanup, select Yes.
  
• The tool will delete itself once it finishes.
  Note: If any tool, file or folder (belonging to the program we have used) hasn't been deleted, please delete it manually.

============

Service Pack upgrade
Please consider upgrading to Windows XP SP3, because it includes all previously released updates. It also includes a small number of new functionalities. Some of the updates that Service Pack 3 provides, you may not have. It is now available via Windows Update.

More info about SP3: Here

=====

Update Programs
Please download the newest version of Adobe Acrobat Reader from Adobe.com

Before installing: it is important to remove older versions of Acrobat Reader since it does not do so automatically and old versions still leave you vulnerable.
Go to the Control Panel and enter Add or Remove Programs.
Search in the list for all previous installed versions of Adobe Acrobat Reader. Uninstall/Remove each of them.

Once old versions are gone, please install the newest version.



Please download the newest version of Java from Java.com.

Before installing: it is important to remove older versions of Java since it does not do so automatically and old versions still leave you vulnerable.
Go to the Control Panel and enter Add or Remove Programs.
Search in the list for all previous installed versions of Java (J2SE Runtime Environment). Please uninstall/remove each of them.

Once old versions are gone, please install the newest version.

==========

Here are some prevention tips I have provided:

1. Don't download files from untrusted websites or websites that seem suspious.

2. Don't use torrents they are a good way to get lots of malware.

3. Don't download and use cracks/warez/keygens they are illegal and are another good way to contract malware.

4. Disable autorun XP or Vista/7

5. Always make sure you have the latest Windows updates. windowsupdate.microsoft.com

6. Don't ever click on the links inside of a popup.

7. Make sure you know what you install you can make sure it is not know for being a virus by just simply searching about it on google.

8. Use a Site Advisor so you don't go to sites that will infect you. Mcafee Siteadvisor

9. Also there are many holes and flaws in Internet Explorer I recommend using Firefox 3 to keep you more safe.

10. Always keep your Java and Adobe updated.

11. Don't fall for the Scareware. What is Scareware? it is a website made to download a rogue Antivirus on your system that will scare you into buying their fake software due to false detections.

12. Always have a Firewall and a Antivirus.

Thanks for choosing GeekPolice, see this page if you would like to leave feedback or contribute to our site. Do you have any more questions?

For more information please visit Here

Hi Sneakyone:

Computer seems to be running fine. In the past week I have gotten several emails from friends that say I sent them something via email that I did not send. Also in my outgoing email box I have seen the same thing my friends have complained about. I did not send these emails. Yesterday I got some emails that said some emails I sent could not be delivered. Again, I did not send those emails either. I have looked online and see that it is possible for someone to pretend they are me and send emails. I also see there is little or nothing I can do about this. It is similar to having someone pose as me and send out snail mail via the post office. Still, I am upset.

Although my computer appears to be running just fine now, should I be concerned? Is there anything further I should do? I did change my email password even though I read online that will not do anything.

Thanks,
Karen

Hi Sneakyone:

I went to the Control Panel to see how many Java applications I had. I saw nothing there. I also have Revo Uninstall on my computer. I saw no Java there either. I did a computer search on my computer and there were many Java items located. I am afraid to delete these because I do not know what they are or if they are needed on my computer. I tried to copy and then paste the search results here, but could no do so.

I will give you some examples of what is on the list. The first item has an icon that looks like a cup of coffee. It is called "Java." It says this Java is located in the Control Panel. The next item is a yellow folder that says "Java." The computer says it is located in the c/Windows folder. The next "Java" is also a yellow folder and it says this one is located in Windows/Common files. I am afraid to delete anything because I do not know what these files are. I do not know if they are old Java. In fact I am not certain what Java is. I think it runs stuff from the internet when I go to certain websites, but I am not certain.

Is there a way to save this list so that you can see it? I can not believe that there would be this much Java on my computer.

Also, where would I download a new Java that would be safe? Cnet?

Thanks,
Karen

Hi,

You're e-mail should be fine now that all malware has been removed, do you use Outlook or Gmail, yahoo, etc?

As for Java, you should be fine.

Hi Sneakyone:

I use Windows Live mail. Used to be Hotmail. Today I got more of that crap again. Emails that say they can not be delivered. Again, I researched on the internet and it seems there is little I can do about this. I can not understand how this happened? Is one of my contacts infected? I wonder about that because each time this one gal emails me I get alot of the "can not deliver" stuff in my sent mail box.

Thanks for the info about Java. I could not tell one Java thing from another. What shall I do about this mail thing?

Thanks,
Karen

Hi.

Try re-installing Windows Live Mail, and see if it still re-occurs.

Hi Sneakyone:

If I do a Windows Live Mail re-install won't I loose all my contact information for my mail and all my calendar appointments?

Thanks,
Karen

Hi,

I am not sure, but that is the only way I can think of to fix it.

Can you back up all of your contacts and calender appointments?

Hi Sneakyone:

You will recall that I had changed my password regarding my email. Before I could do a re-install I noticed a large diminishing of the problems with the contacts getting email I did not send out. I think it may be over.

Computer running fine now.

Thanks so very much,
Karen

Hi.

Great news indeed, glad your computer is fixed.

If it does happen again please post back here.