popups; Trj/Downloader.OZB, Generic Malware, Trj/Downloader.PCQ - Page 2

stellar · 10-08-2007, 07:15 PM

oh, ok. it's uninstalled.

tetonbob · 10-08-2007, 07:16 PM

Cheers.

Now, what's this about the RAM?

What's now reporting 192?

How many sticks are installed?

stellar · 10-08-2007, 07:26 PM

there are 2 memory sticks, one is the factory stick, the other is a 128 mb stick. when i was trying to make sure they were secure i guess i actually loosened it, b/c it said 192 when i started the computer back up. i went back and re-secured it, and now it's back at 320.

tetonbob · 10-08-2007, 07:38 PM

That's an odd configuration for 2 sticks if one is 128.

Seems like you would have a 256 and a 64 installed to make up 320.

Do you know how big the factory stick was supposed to be? How old is the machine? 64's haven't been installed in a long time.

It's possible some of the memory is being shared with a video card, and thus not being reported as available for the OS....but this is out of my forte.

If you need continued support for the memory, you may want to ask the folks in our Hardware forum.

As far as malware goes, we're done.

Your logs appear clean.You should be good to go. We still have a few items to address.

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programs if you don't have them already:

SpywareBlaster to help prevent spyware from installing in the first place.
- Install & update SpywareBlaster with the latest definitions.
  After you have updated, click the button - enable protection for all unprotected items
SpywareGuard to catch and block spyware before it can execute.
SPYBOT - SEARCH & DESTROY
Download and install Spybot - Search & Destroy with its TeaTimer option. This will provide realtime spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with the program on a regular basis just as you would an antivirus software. A tutorial on installing & using this product can be found here

IE-SpyAd - IE/Spyad places more than 4000 dubious websites and domains in the IE Restricted list. This severely impairs attempts to infect your system. It basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites. An installation tutorial is available here.
MVPS HOST FILE
The MVPS Hosts file replaces your current HOSTS file with one that will restrict known ad sites form serving you unsolicited advertisements. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is the IP of your local computer.
- Download Host.zip to your desktop.
- From your Desktop right-click (hosts.zip) and select:
  Extract All from the menu.
- Click Next, click Next, select the option:
  "Show Extracted files", click Finish
- This will open the newly created hosts folder on your Desktop.
- Double-click on the included mvps.bat file, this will rename the existing HOSTS file to HOSTS.MVP, then it will copy the included updated HOSTS file to the correct location on your machine.
- Once updated you should see another prompt that the task was completed.
See this link for a listing of some online antivirus scanners:

Anti-Spyware Tutorial
FIREWALL
If you do not have a firewall, here are a couple of great free ones available for personal use. Using a third-party firewall will allow you to give/deny access for applications that want to go online. Select one of these, or another of your choice:

Do not install more than one firewall program because they will conflict with each other.

In light of your recent troubles, I'm sure you'll like to avoid any future infections. Please take a look at these well written articles

If you want to fight back the Malware Writers that have made your life a misery, please take a look here and read what you can do against it.

Please respond to this thread one more time so we can mark this thread as resolved.

stellar · 10-08-2007, 08:21 PM

i think i will go over to the hardware section...

...as for your continuous support and computer smarts, thank you kindly!

-andrea b.

10-08-2007, 07:15 PM	#21 (permalink)
stellar Registered User Join Date: Oct 2007 Location: oklahoma Posts: 13 OS: windows xp service pack 2	Re: popups; Trj/Downloader.OZB, Generic Malware, Trj/Downloader.PCQ oh, ok. it's uninstalled.

10-08-2007, 07:16 PM	#22 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,483 OS: 2000 Pro; XP Pro; XP Home	Re: popups; Trj/Downloader.OZB, Generic Malware, Trj/Downloader.PCQ Cheers. Now, what's this about the RAM? What's now reporting 192? How many sticks are installed? __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009

10-08-2007, 07:26 PM	#23 (permalink)
stellar Registered User Join Date: Oct 2007 Location: oklahoma Posts: 13 OS: windows xp service pack 2	Re: popups; Trj/Downloader.OZB, Generic Malware, Trj/Downloader.PCQ there are 2 memory sticks, one is the factory stick, the other is a 128 mb stick. when i was trying to make sure they were secure i guess i actually loosened it, b/c it said 192 when i started the computer back up. i went back and re-secured it, and now it's back at 320.

10-08-2007, 07:38 PM	#24 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,483 OS: 2000 Pro; XP Pro; XP Home	Re: popups; Trj/Downloader.OZB, Generic Malware, Trj/Downloader.PCQ That's an odd configuration for 2 sticks if one is 128. Seems like you would have a 256 and a 64 installed to make up 320. Do you know how big the factory stick was supposed to be? How old is the machine? 64's haven't been installed in a long time. It's possible some of the memory is being shared with a video card, and thus not being reported as available for the OS....but this is out of my forte. If you need continued support for the memory, you may want to ask the folks in our Hardware forum. As far as malware goes, we're done. Your logs appear clean.You should be good to go. We still have a few items to address. Now that you are clean, to help protect your computer in the future I recommend that you get the following free programs if you don't have them already: SpywareBlaster to help prevent spyware from installing in the first place. Install & update SpywareBlaster with the latest definitions. After you have updated, click the button - enable protection for all unprotected items SpywareGuard to catch and block spyware before it can execute. SPYBOT - SEARCH & DESTROY Download and install Spybot - Search & Destroy with its TeaTimer option. This will provide realtime spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with the program on a regular basis just as you would an antivirus software. A tutorial on installing & using this product can be found here IE-SpyAd - IE/Spyad places more than 4000 dubious websites and domains in the IE Restricted list. This severely impairs attempts to infect your system. It basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites. An installation tutorial is available here. MVPS HOST FILE The MVPS Hosts file replaces your current HOSTS file with one that will restrict known ad sites form serving you unsolicited advertisements. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is the IP of your local computer. Download Host.zip to your desktop. From your Desktop right-click (hosts.zip) and select: Extract All from the menu. Click Next, click Next, select the option: "Show Extracted files", click Finish This will open the newly created hosts folder on your Desktop. Double-click on the included mvps.bat file, this will rename the existing HOSTS file to HOSTS.MVP, then it will copy the included updated HOSTS file to the correct location on your machine. Once updated you should see another prompt that the task was completed. See this link for a listing of some online antivirus scanners: Anti-Spyware Tutorial FIREWALL If you do not have a firewall, here are a couple of great free ones available for personal use. Using a third-party firewall will allow you to give/deny access for applications that want to go online. Select one of these, or another of your choice: Do not install more than one firewall program because they will conflict with each other. Comodo Personal Firewall ZoneAlarm In light of your recent troubles, I'm sure you'll like to avoid any future infections. Please take a look at these well written articles HOW DID I GET INFECTED IN THE FIRST PLACE? THE ANTI-SPYWARE TUTORIAL MAKING INTERNET EXPLORER SAFER If you want to fight back the Malware Writers that have made your life a misery, please take a look here and read what you can do against it. Please respond to this thread one more time so we can mark this thread as resolved. __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009

10-08-2007, 08:21 PM	#25 (permalink)
stellar Registered User Join Date: Oct 2007 Location: oklahoma Posts: 13 OS: windows xp service pack 2	Re: popups; Trj/Downloader.OZB, Generic Malware, Trj/Downloader.PCQ i think i will go over to the hardware section... ...as for your continuous support and computer smarts, thank you kindly! -andrea b.