trojan found

[Dra1003]

Ok i just scanned my computer with avg today.. it found two trojans in my ventrillo mix 3.0 program. Without really thinking i just deleted the program because the program was to large and i couldnt move it to the virus vault.

The thing is ive had this program for about a month and a half i havent used it it didnt do anything and my computer hasn't acted weird. So is AVG being weird or was i right to delete it?


The trojan was called Trojan horse Delf.KLO. I googled and wikied this and couldn't find anything

---

Ive had enough of disco for now. I might be back at the next mod release.

The Master of all things cyborg

Bio Extensive Research

[Format C:]

Removing the program didn't necessarily remove the trojan. Have you thought about scanning with AVG again to see if it still finds the trojan?

Just a thought.

[Dra1003]

i deleted then removed the program.. i dont even use it that much.

I scanned it 3 times

---

Ive had enough of disco for now. I might be back at the next mod release.

The Master of all things cyborg

Bio Extensive Research

[Internity]

I found information about your trojan on McAfee site it does exist but has a long name .
Click the link for more information about it.
You see > scrool down the page and in the 2nd Table look for AVG name it is mentioned that AVG finds the trojan under Delf.KLO nickname.

http://vil.nai.com/vil/content/v_156899.htm

---

LNS Ithaca

[Boss]

Get Rootkit Revealer and MalwareBytes' Anti-Malware.

Scan with both and post the results please.

---

Just go play the game and have fun dammit.

all in all the conclusion is that disco doesn't need antagonist factions, it doesn't need phantoms, it doesn't need nomads, it doesn't need coalition and it doesn't need many other things, no AIs, the game is hijacked by morons to confuse the game with their dickwaving generic competition games mixed up with troll-of-the-day.

[Dra1003]

HKU\S-1-5-21-1229272821-115176313-682003330-1004\Software\Skype\Toolbars\Firefox\ExtensionVersion 6/12/2009 7:49 AM 9 bytes Data mismatch between Windows API and raw hive data.
HKLM\SECURITY\Policy\Secrets\SAC* 5/22/2009 6:07 PM 0 bytes Key name contains embedded nulls (*)
HKLM\SECURITY\Policy\Secrets\SAI* 5/22/2009 6:07 PM 0 bytes Key name contains embedded nulls (*)
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher\TracesProcessed 6/24/2009 1:01 PM 4 bytes Data mismatch between Windows API and raw hive data.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\17B29809d01 6/24/2009 1:07 PM 20.36 KB Hidden from Windows API.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\2A1CDEA3d01 6/24/2009 1:07 PM 20.62 KB Hidden from Windows API.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\2B6EC3C1d01 6/24/2009 1:05 PM 22.39 KB Hidden from Windows API.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\5BC84486d01 6/24/2009 1:07 PM 30.38 KB Hidden from Windows API.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\5DCE6E08d01 6/24/2009 1:07 PM 82.24 KB Hidden from Windows API.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\71B6EFD1d01 6/24/2009 1:07 PM 34.90 KB Hidden from Windows API.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\75541CAAd01 6/24/2009 1:06 PM 57.97 KB Hidden from Windows API.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\851C5238d01 6/24/2009 1:07 PM 19.17 KB Hidden from Windows API.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\86D8B00Ad01 6/24/2009 1:07 PM 29.00 KB Hidden from Windows API.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\87C37326d01 6/24/2009 1:07 PM 40.17 KB Hidden from Windows API.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\8BB47C03d01 6/24/2009 1:07 PM 76.69 KB Hidden from Windows API.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\9408385Cd01 6/24/2009 1:07 PM 33.68 KB Hidden from Windows API.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\9876C0BEd01 6/24/2009 1:05 PM 127.89 KB Hidden from Windows API.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\A0E08940d01 6/24/2009 1:05 PM 167.97 KB Hidden from Windows API.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\A645D113d01 6/24/2009 1:07 PM 22.12 KB Hidden from Windows API.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\ADB12CECd01 6/24/2009 1:05 PM 17.21 KB Hidden from Windows API.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\B1C0CCF6d01 6/24/2009 1:07 PM 57.72 KB Hidden from Windows API.
C:\Documents and Settings\chris\Local Settings\Application Data\Mozilla\Firefox\Profiles\iarjf3mr.default\Cache\F79E3691d01 6/24/2009 1:05 PM 337.69 KB Hidden from Windows API.
C:\System Volume Information\_restore{A21F69AF-7862-4B1F-88C1-7B42A69760F6}\RP55\A0026440.old 6/24/2009 12:11 PM 1.27 KB Hidden from Windows API.

thats with rootkit the other one picked up nothing

---

Ive had enough of disco for now. I might be back at the next mod release.

The Master of all things cyborg

Bio Extensive Research

[Boss]

Did you update MalwareBytes to the latest version?

If not, do so, and run a full scan.

Those API mismatches are all normal, though I'd clear the Firefox cache out of principle.

---

Just go play the game and have fun dammit.

all in all the conclusion is that disco doesn't need antagonist factions, it doesn't need phantoms, it doesn't need nomads, it doesn't need coalition and it doesn't need many other things, no AIs, the game is hijacked by morons to confuse the game with their dickwaving generic competition games mixed up with troll-of-the-day.

[Dra1003]

it was updated still showing nothing.

Its sorta looking like avg is just weird.

But to be safe ill just wont use that program

---

Ive had enough of disco for now. I might be back at the next mod release.

The Master of all things cyborg

Bio Extensive Research