Check your PC user accounts NOW !!

Recently I've noticed a major slow down on my laptop. MAJOR and MASSIVE slow down.

Cutting to the chase (others can read the rest if interested), Go into your Control Panel check your user accounts. MAKE sure the only accounts there, are the ones that are supposed to be !!!

I try to keep current on all spyware/trojan/virus software and definitions. But, I usually never run a tea timer. I find it annoying to keep allowing the registry changes. Bad mistake!! Especially from someone who hangs out on all the wrong websites and servers

I recently downloaded a trojan, my software caught it (most of it anyway) BUT not before it made some major changes within my system. I managed to dig through several areas it had embedded itself, and manually remove other parts.

In a nutshelll, this was a nasty file. It contained multiple actions, some caught, some not. It gained control of Limewire completely. It also wrote it's own user account (something I just discovered).

How I discovered this. I set my wifes new PC up on our wi-fi Christmas, then noticed that she was getting hammered with multiple pings. The offending PC was mine!

Fortunately, I have not spent a lot of time online since getting this. The wifes PC has taken a lot of time to get set up and "third grade proof" as she likes to call it

I do not know if they have assigned a name to this. I only noted the original file that was blocked was a backdoor, other files were virus files. But, the creation of a seperate and password protected user account is something completely new to me.

Anyone care to share some knowledge on this one??

 

One of the best ways to avoid this is to run NOD32, an anti-virus that works REALLY well. Also, be careful where you go and where you click. Never open email from anyone you don't know. If you have a router, it's a great help as it acts as a hard wall firewall - one of the best defenses against viruses and trojans.

I haven't had a virus or trojan in years - not one - and I attribute it to all of the above.

Is this the one you refer to above danc? http://www.esecurityplanet.com/alerts/article.php/3631876

 

Nope that's not it

Worked kinda like it though.

I usually download something (virus, trojan, spyware) a couple of times a week. The dangers of file sharing. My software has worked good so far. I'm using a router (now), and have removed the POS Norton Internet Security, replaced it with ZA Pro and an active Tea Timer.

I'll check out NOD32, as I'll be needing a new virus program. Thanx

I downloaded the thing in a .rar file. So it's completely my fault. My software didn't catch it until I started to extract the files, then it was too late.

It did manage to create the account, then keep it hidden in the boot up screen showing active accounts. But, it was easily seen when I opened up User Accounts in the admin section.

Although I haven't been online with this PC, I've had this #### thing for 2 weeks. And it just about crippled performance completely, on or off line.

 

Once the machine is compromised this way it can be tough to regain control. I'd suggest you use spybot and then run a root kit detection program. The trojan would have had to have some kind of root kit in it to take control of your PC the way it did. You can also try AVG antivirus (for 30 days) for free to try and detect anything else that was installed (and you are right to avoid anything Norton...Norton = evil buggy software).

In 17 years of computing I've only had one infection like this and to be honest its often easier to just backup data, format the drive and reinstall the OS. At least this way you can be sure you are infection free (assuming you've fully scanned and re-scanned your backup data before you restore it to your primary drive(s)). Call me paranoid but these infections have a dozen ways of reinstalling themselves and your best bet is to nuke the bugger from orbit, its the only way to be sure (hahaha, sorry I just had to throw in that Aliens reference).

-Reby

 

I have used AVG for along time, a couple years and have not had any problems,(virus, worms, trojans). I also run the windows defender from microsoft and along with my router have not experience any problems for quite a long time now.

Biker

 

I run these programs with a couple different ones along with them and have no issues so far..

 

I run Spybot S&D along with their TeaTimer programs on every computer I own....I think they are the best programs on the market....AND FREE....also run AVG Free.....doesn't have all the features of the pay version...but, it does have all the essentials. Spybot S&D can be found at http://www.safer-networking.org/index2.html
AVG can be found at http://free.grisoft.com/doc/2/
Using both of these programs....I think is the best all around solution....going on 20 years virus free....but then again....I stay away from places like Limewire.....

 

ive got avast home which is free. they also have a pay version which is $60 per year. and i also use spybot s&d.

 

A quick thanks for recommending this software. I'll be purchasing it for all our PC's. I've ran it for the past few days and found it to be much better than ones I am currently using, or have used in the past.

It does have a couple of issues. But, those issues are resident in everything I've used in the past. Overall, I'm impressed with its performance

For everyone else, Guys and Gals. I appreciate your recommendations. But most (if not all) of the other software mentioned has been used in the past and found to be severely lacking.

Your recommendations for steering clear of certian software and sites....fell on deaf ears. I actively hunt these sites and software, so I am at greater (if not extreme) risk than the average user.

Re-formatting my hard drive has/had become a way of life in my household. It insures that others within my family do not have to worry about these issues.

My current software has kept me "semi" protected, and I've only had to do a format once in the past 3 years. That particular bug wasn't found by ANY software I had access to.

I have 2 variants on my PC now, that have not been found by ANY software I have used. They sit silently...waiting. They fire up once a week, and I get to see whether or not current software will completely remove them. So far none have. They (most) stop the installation, but fail to remove the offending software that distributes it.

Such is life