Welcome, Guest. Please login or register.
November 18, 2008, 06:32:00 PM

Login with username, password and session length

212233 Posts
24531 Topics
57714 Members

Latest Member: wilhoit

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Desktop Security Products
| |-+  Comodo Internet Security - CIS
| | |-+  Virus/Malware Removal Assistance
| | | |-+  trojan-spy.pophot.wx
« previous next »
Pages: [1] Go Down Print
Author Topic: trojan-spy.pophot.wx  (Read 802 times)
uhohkimee
Comodo Family Member
***
Offline Offline

Posts: 86


« on: May 26, 2008, 04:23:11 AM »

A few days ago my desktop got hit by trojan-spy.pophot.wx and I have no idea how I even got this. Spyware Doctor was the one who detected this and apparently it corrupted my system files so I was forced to reformat. Now I want to know how did it get in my comp? Any ideas?
Logged
Eric Cryptid
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 1121


Security Saskquatch


« Reply #1 on: May 26, 2008, 04:36:10 AM »

It's hard to tell how this got in your sysetem. Further threat information can be found here:

http://www.threatexpert.com/report.aspx?uid=1789d1e5-4626-4467-8c96-a619a5778c7c

Now for removal.

Firstly, I suggest let comodo do it for FREE for you. Here:

http://www.personalfirewall.comodo.com/avsmart/malware-removal.html

And then I'd run SuperAntispyware FREE to locate and remove any existing reminents.

Eric
Logged


Moderator: Aims to keep the forum a friendly place. Any concerns? Please send me a PM and/or review the forum policy.
System: 32 bit Windows XP SP3, Comodo Internet Security 3.5, Comodo BoClean
grue155
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 1016


« Reply #2 on: May 26, 2008, 11:09:04 AM »

A very common malware insertion technique these days is known as an "iframe attack" that comes in thru your web browser. For a description, I'll refer you to this article http://isc.sans.org/diary.html?storyid=3078 about a nasty little piece of malware called MPack.

I've been hit by an iframe attack. Running as a "limited user account" with a good (is there any other kind) antivirus will block any infection, or at least tremendously limit the damage. The attack that hit me came from a compromised legit web server (and cleared in a matter of hours), and about as effective as bug on the windshield.
Logged
Tags:
Pages: [1] Go Up Print 
« previous next »
Jump to:  

SSL Firewall
Page created in 0.129 seconds with 19 queries.
Powered by SMF 1.1.7 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by 7dana.com