infected by naruto.sys.vbs/recycle.sys.vbs [resolved]

[alaertsxan]

Does anyone know that we’re talking in a closed thread ?

Or it's a nice Rootkit and Norton can't find it any more, have you tried running a scan with GMER and/or Rootrepeal ?

Or GMER must be really good, or you really like it :). Well Ganda, as I'm such a simple boy, I will agree with Ronny. Please scan with GMER ^_^

Xan

[ganda]

@Ronny post:40

Or it’s a nice Rootkit and Norton can’t find it any more,

thx for ruining my weekend Ronny >:(

@Soyabeaner post:38

With friends like those, who needs hackers (:TNG). It’s deja vu again.

yeah, not a friend actually, a workplace friend,need to get a file from the flashdisk 88)

@Soyabeaner post:38

Traitor 88)

blame tiffany 88)

@JamesFrance post:17

ganda I think you are looking at the right one with recycle.vbs, but cannot find much about it.

It does seem similar to this:

http://tiffany-t.blogspot.com/2008/02/attack-by-trojan-horse.html

now i’m gonna download this GMER. thx guys

oh, this topic is unlocked

edit:
here’s my GMER log. what should i do about it? who wants to check it for me? :a0

[attachment deleted by admin]

[rhgtyink]

@bad ganda post:42

edit:
here’s my GMER log. what should i do about it? who wants to check it for me? :a0

Since i brought it up i guess i should take a look at it

I can’t see any suspicious stuff in here, i assume GMER did not show a popup after startup and the automatic scan with a text like “suspicious activities found, please run a full scan” and showed any entries in RED ?

[JamesFrance]

I was just looking at BOCleans list and saw over 1400 variations of ZLOB which it protects against.

That would probably have caught it.

[ganda]

@Ronny post:43

Since i brought it up i guess i should take a look at it

I can’t see any suspicious stuff in here, i assume GMER did not show a popup after startup and the automatic scan with a text like “suspicious activities found, please run a full scan” and showed any entries in RED ?

errr, pop up ??? nope. no red entry either.
what automatic scan?GMER scan my system right away after i double click the icon (is that what you mean automatic?) & after that, i use it to scan for rootkit/malware one more time. no red entry.

@JamesFrance post:44

I was just looking at BOCleans list and saw over 1400 variations of ZLOB which it protects against.

That would probably have caught it.

errr, maybe i misread the trojan name?maybe it’s not zlob?or maybe norton recognize that naruto.vbs as zlob varian? the second scan with norton come up empty. and i don’t see any suspicious activity on my comp now.

i have D+ remember?