As I said, this morning I was in Firefox when AVG alerted me about a possible Trojan attack. I told AVG to kill the file, but apparently it had already installed itself. Thank God my work connection stayed stable, but some connections disappeared. I could get into my bank, my 1and1.com connection, and a couple of other things. Some websites came up blank and only came up if I reloaded, and reloaded, and reloaded, sometimes coming up in text format.

Once I finished up work, I attempted again to get AVG to update. It was saying it was missing a control file. So I uninstalled AVG, then reinstalled it, asked it to update—and it again said I was missing the control file.

Since Avast helped the time I had a Trojan on the laptop, I tried to download that. But whatever this thing was, it was keeping tight control on my web access. It kept saying I had a 404 (File not found) error. James finally had to download the file on his computer and put it on a thumb drive.

I installed Avast, ran its scan—and it found nothing!

I went looking around online and there was a suggestion to use Windows' scanner. Unfortunately, it only works in Internet Explorer (thanks a lot, Bill!) and I couldn't get that site to come up in Internet Explorer. IE couldn't even find microsoft.com. Gah.

In the meantime AVG did do its nightly scan, and found nothing. That told me these Trojans were brand new and were blocking the update of the virus definitions so I wouldn't be able to kill them.

One more solution presented itself: on a blog I found a reference to this problem. It directed you to go to AVG's website and find the two .bin files that were missing, manually download them, and then direct AVG to update using a directory rather than online. So I downloaded them via the laptop and saved them on my computer via the network connection, told it to update via directory...and it did.

When I ran the scan again, I found ten instances of Trojan infection, including the one AVG had warned me of this morning. There were two .exe files in Windows, Id09.exe and freddy(some number).exe, and something with the name of BIUK and one with ALYW at the end. With its new update, AVG killed them all, or at least it looks like it when I rebooted. Firefox appears to be working again. I didn't try IE.

I just hope this thing wasn't able to harvest any info from the sites I could get to, like my bank!

I wonder where it came from. James said just because it triggered in Firefox doesn't mean the file came from Firefox; he went to the same website (Comics.com) and wasn't affected. It's possible it was something downloaded from e-mail. My sister-in-law sends me these cute little e-mails with singing and dancing graphics...I wonder if the trigger was hidden there. I'd better warn her tomorrow about what happened.

Labels: computers

----------------------------------------------------------------
. . . . . noted and logged by Linda at 10:42:00 PM

Comments:

Not to be alarmist, but if you think you PC has malware of any type, it is not a good idea to go to your online bank via your PC until the malware is removed.

# posted by  FiveAcres : 8:08:00 AM

 

Yeah, I know. I actually checked online banking before I knew there was malware on my computer. Ever since my account got hacked into five years ago, I check it first thing every morning.

# posted by  Linda : 9:53:00 AM

 

If you have malware1 bytes installed, the I909.exe does not prevent it from updating.

I simply updated the dat files and ran a quick scan and was able to remove it.

For people who do not use malwarebytes I recommend downloading and installing it. It's free and much better than most ones you pay for.

# posted by  Anonymous : 12:40:00 PM

 

Sorry about the typos in the last post - lord I need to read first before submitting.

malwarebytes is what I used to clean out Id09.exe

Sorry about that. :)

# posted by  Anonymous : 12:42:00 PM

 

Post a Comment