GAMEBOOMERS provides you with all the latest PC adventure computer games information, forum, walkthroughs, reviews and news.
GB Reviews Latest & Upcoming Adventure Games GB Annual Game Lists GB Interviews

BAAGS

GB @ acebook

GB @ witter

About Us
Walkthroughs free games galore Independent Games World of Adventure Patches Game Publishers & Developers GameBoomers Store
The Adventure Shop Big Fish Games Homepage
Page 1 of 2 1 2 >
Topic Options
#905719 - 08/04/13 11:07 AM I think I got a trojan virus
Mary Offline
Addicted Boomer

Registered: 11/02/99
Posts: 3653
Loc: New York
Yesterday after I started up my computer I had all sorts of problems: I would click on a site, AOL for example, and the computer would try and try to open until I finally got an "AOL is not responding" notice on the top of the page. Same thing with MSN, or anything I tried. If I tried to click on a page that was already open, the page would get an opaque white "film" (for want of a better word) all over it, and I couldn't do a thing.
Hours later, still working on the computer, I finally got Norton started, but it just stopped after a while without completing. Same with Malwarebytes: started but couldn't finish. Kept trying with Malwarebytes. Though it stopped again, by a stroke of luck, it automatically upgraded itself (I have the PRO version) and that somehow got the scan going again and it finally got all the way through. Near the end of the scan, it found "Trojan.FakeAlert.RRE; it was on my external hard drive!
I tried to find some info on this but couldn't find anything on this Trojan with the "RRE" extension.

So far today, I'm getting around okay but I'm curious how this Trojan produced my symptoms. Or how I got it. Or how I picked it up on my external and not my main hard drive.

Is it possible to pick up a virus from an email that I opened? It had no links of any kind in it, only a plea for money.
_________________________
The answer is....chocolate! Who cares what the question is.....

Top
#905723 - 08/04/13 11:34 AM Re: I think I got a trojan virus [Re: Mary]
traveler Online   content
Addicted Boomer

Registered: 01/14/10
Posts: 3203
Loc: Rivellon
Mary,

I found quite a bit about the fake alert trojan, though nothing about it targeting an external hard drive, though I didn't really search far.
Here's an explanation of the trojan from Sunbelt.
The first notice of this on their website appears to have been in 2006, so this trojan is obviously far from new and I'm surprised Norton didn't pick up on it instantly.

No, you can't get a virus from just reading an email.
Not yet, anyway.


Gil.
_________________________
"Best not to think about it. I don't want to fall to bits 'cos of excess existential thought."

Top
#905726 - 08/04/13 11:41 AM Re: I think I got a trojan virus [Re: Mary]
Draclvr Online   content
BAAG Specialist

Registered: 06/03/05
Posts: 9671
Loc: In Missouri near St. Louis
If your computer is running better, run at least one more full scan with Malwarebytes and definitely a full scan with Norton. From what I read about the FakeAlert virus, it might take more than one pass with at least two different programs to get rid of it.

It's hard to know how it got there - it could have simply been a "drive-by" download from visiting an infected website. I saw several references to getting this virus after visiting a social website. While they always say NEVER open up emails from someone you don't know, I got one of those emails asking for money from my sister-in-law. Someone had hacked her Facebook account.
_________________________
Gardening is better than therapy. Plus you get tomatoes.

Top
#905731 - 08/04/13 11:53 AM Re: I think I got a trojan virus [Re: Mary]
Mary Offline
Addicted Boomer

Registered: 11/02/99
Posts: 3653
Loc: New York
Draclvr,
The email that I opened was from a woman I used to work with. I forwarded her the bogus email using her correct address and she said that it delivered a very quick moving virus when she opened it, but I never heard of getting a virus from just opening an email.
The virus supposedly tries to get you to go to other sites to clear up the "security problem", but I didn't see anything like that.

I ran Malwarebytes twice yesterday; I'll run Norton right now. I do READ FaceBook once in a while, but rarely post anything, so I don't know if my catching the virus came from there.

Gil,
Thanks for the link; I was trying to find a definition of the specific version of the Trojan I managed to get. I'll keep looking.
_________________________
The answer is....chocolate! Who cares what the question is.....

Top
#905732 - 08/04/13 11:53 AM Re: I think I got a trojan virus [Re: Mary]
traveler Online   content
Addicted Boomer

Registered: 01/14/10
Posts: 3203
Loc: Rivellon
A good browser, a good AV and/or Malwarebytes will generally stop you from visiting a dubious website.
Sometimes mistakenly and irritatingly but most often they're probably right.

Your SIL's FaceBook account was hacked, Draclvr? No, really? I am astounded.

Gil.
_________________________
"Best not to think about it. I don't want to fall to bits 'cos of excess existential thought."

Top
#905741 - 08/04/13 12:14 PM Re: I think I got a trojan virus [Re: Mary]
Draclvr Online   content
BAAG Specialist

Registered: 06/03/05
Posts: 9671
Loc: In Missouri near St. Louis
Yes, Gil, I too was simply shocked.. shocked I say! I can't tell you how many people I've helped get their Facebook accounts back from hackers. Usually a simple change of password does it, but in her case the hacker actually got into her Hotmail account and trashed it plus was carrying on Facebook conversations with other family members. It was very creepy.

Mary, there are a gazillion variations of this virus, so it's pointless to look for a specific one. It's been around for several years.
_________________________
Gardening is better than therapy. Plus you get tomatoes.

Top
#905742 - 08/04/13 12:19 PM Re: I think I got a trojan virus [Re: Mary]
traveler Online   content
Addicted Boomer

Registered: 01/14/10
Posts: 3203
Loc: Rivellon
Mary,

Kioskea.net has some information on this trojan. I had a little difficulty figuring out what they meant exactly since the website is French though written in English (Kioskea gets a Safe rating from Norton and others, I checked since tortured English, even a little bit, always raises a red flag for me); however, it looks as if the infection is passed through a removeable drive.

Gil.
speaking of tortured English grin


Edited by traveler (08/04/13 12:19 PM)
_________________________
"Best not to think about it. I don't want to fall to bits 'cos of excess existential thought."

Top
#905770 - 08/04/13 03:08 PM Re: I think I got a trojan virus [Re: Mary]
Jenny100 Offline
GB Reviewer Glitches Moderator
Sonic Boomer

Registered: 10/24/00
Posts: 35199
Loc: southeast USA
Originally Posted By: Mary
Draclvr,
The email that I opened was from a woman I used to work with. I forwarded her the bogus email using her correct address and she said that it delivered a very quick moving virus when she opened it, but I never heard of getting a virus from just opening an email.

Infection by email was one of the earliest methods of infection (though not as early as infection by floppy disks). When I first started using computers years ago, we were warned never to open emails we weren't expecting. The infamous "I Love You" worm from year 2000 spread by email.
http://en.wikipedia.org/wiki/ILOVEYOU
It wasn't the first, but it was one of the most well-known email worms. Strictly speaking it was a "worm" rather than a "virus," but few people bother distinguishing between virus and worm -- especially since modern malware can be both.

As others have said, don't rely on one anti-virus or anti-malware program to get rid of it all. If you only get rid of one part, the parts you didn't find can easily replace what you removed.

Modern malware often uses multiple methods of infection. So you could have gotten the virus by email and had it spread to your external drive, where it's all set to infect any computer you plug the external drive into. I wouldn't be too surprised if it was also sending out infected emails without your knowledge.

Top
#905780 - 08/04/13 04:04 PM Re: I think I got a trojan virus [Re: Mary]
traveler Online   content
Addicted Boomer

Registered: 01/14/10
Posts: 3203
Loc: Rivellon
Jenny,

The article on the I Love You worm may have been badly written, but, as it is, it indicates to me that you had to open "the attachment" in the email to become infected, not simply open and read the email itself.

Gil.
_________________________
"Best not to think about it. I don't want to fall to bits 'cos of excess existential thought."

Top
#905785 - 08/04/13 04:19 PM Re: I think I got a trojan virus [Re: Mary]
Mary Offline
Addicted Boomer

Registered: 11/02/99
Posts: 3653
Loc: New York
There was no attachment in the suspicious email I got. Maybe that email just happened to come in at the same time a website dumped the virus on me. I just really have no clue how I got it.
_________________________
The answer is....chocolate! Who cares what the question is.....

Top
#905787 - 08/04/13 04:25 PM Re: I think I got a trojan virus [Re: Mary]
Jenny100 Offline
GB Reviewer Glitches Moderator
Sonic Boomer

Registered: 10/24/00
Posts: 35199
Loc: southeast USA
I may have been thinking of a different virus, Traveler. But there were some that would infect when you opened the email -- not an attachment -- and this isn't a recent thing. As long as emails have been sent using html rather than plain text, there have been viruses that were embedded using scripting in the html of the body of the email. So all you had to do to be infected was open the email. Or if you had a "preview pane" open in your email client, the virus could infect through that.

Top
#905791 - 08/04/13 04:36 PM Re: I think I got a trojan virus [Re: Jenny100]
traveler Online   content
Addicted Boomer

Registered: 01/14/10
Posts: 3203
Loc: Rivellon
Oh, boy. Hallelujah for a good AV.
I think I'd be giving Norton the boot for not catching that, particularly given how old it is.

Gil.
_________________________
"Best not to think about it. I don't want to fall to bits 'cos of excess existential thought."

Top
#905796 - 08/04/13 04:50 PM Re: I think I got a trojan virus [Re: Mary]
Jenny100 Offline
GB Reviewer Glitches Moderator
Sonic Boomer

Registered: 10/24/00
Posts: 35199
Loc: southeast USA
The virus may have been "updated" to change its signature. Polymorphic viruses change their signature with every infection, which is one reason why antivirus that work by signatures alone aren't very effective any more.
http://en.wikipedia.org/wiki/Polymorphic_virus

Top
#905811 - 08/04/13 05:29 PM Re: I think I got a trojan virus [Re: Mary]
Mary Offline
Addicted Boomer

Registered: 11/02/99
Posts: 3653
Loc: New York
Yes, I'm not too happy that I paid dearly for Norton and it just let this virus right in. Then I've got to clean up the mess.
_________________________
The answer is....chocolate! Who cares what the question is.....

Top
#905830 - 08/04/13 06:21 PM Re: I think I got a trojan virus [Re: Mary]
Mary Offline
Addicted Boomer

Registered: 11/02/99
Posts: 3653
Loc: New York
After getting a "clean" Malwarebytes scan (my second scan) and a "cleaned" Norton scan (it removed some cookies), can I assume that I can exhale now? Computer seems to be running fine.
_________________________
The answer is....chocolate! Who cares what the question is.....

Top
Page 1 of 2 1 2 >

Moderator:  InlandAZ, Jenny100 

Who's Online
Key: Admin Global Mod Mod Staff  )
12 registered (Space Quest Fan, Marian, BrownEyedTigre, RebKean, Draclvr, kingpin, Pandora, flutist, 2 invisible), 98 Guests and 131 Spiders online.
Newest Members
GreenBoat, Spidermna133, kamoj, RebKean, gerald
8493 Registered Users