Welcome, Guest. Please login or register.
March 19, 2010, 10:22:45 PM

Login with username, password and session length

373094 Posts
41383 Topics
94057 Members

Latest Member: nsane

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Learn about Computer Security and Interact with Security Experts
| |-+  Virus/Malware Removal Assistance
| | |-+  trojan-spy.pophot.wx
« previous next »
Pages: [1] Go Down Print
Author Topic: trojan-spy.pophot.wx  (Read 1905 times)
uhohkimee
Comodo Family Member
***
Offline Offline

Posts: 86


« on: May 26, 2008, 04:23:11 AM »

A few days ago my desktop got hit by trojan-spy.pophot.wx and I have no idea how I even got this. Spyware Doctor was the one who detected this and apparently it corrupted my system files so I was forced to reformat. Now I want to know how did it get in my comp? Any ideas?
Logged
Eric Cryptid
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 1832


Security Saskquatch


« Reply #1 on: May 26, 2008, 04:36:10 AM »

It's hard to tell how this got in your sysetem. Further threat information can be found here:

http://www.threatexpert.com/report.aspx?uid=1789d1e5-4626-4467-8c96-a619a5778c7c

Now for removal.

Firstly, I suggest let comodo do it for FREE for you. Here:

http://www.personalfirewall.comodo.com/avsmart/malware-removal.html

And then I'd run SuperAntispyware FREE to locate and remove any existing reminents.

Eric
Logged


Moderator: Any concerns? Please send me a PM and/or review the Forum Policy -  update 1st March 2010!
System: 32 bit Windows Vista SP3
Realtime Protection:CIS 4 Proactive
grue155
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 1172



« Reply #2 on: May 26, 2008, 11:09:04 AM »

A very common malware insertion technique these days is known as an "iframe attack" that comes in thru your web browser. For a description, I'll refer you to this article http://isc.sans.org/diary.html?storyid=3078 about a nasty little piece of malware called MPack.

I've been hit by an iframe attack. Running as a "limited user account" with a good (is there any other kind) antivirus will block any infection, or at least tremendously limit the damage. The attack that hit me came from a compromised legit web server (and cleared in a matter of hours), and about as effective as bug on the windshield.
Logged
Tags:
Pages: [1] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in -0 seconds with 20 queries.
Powered by SMF 1.1.11 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by 7dana.com