Trojan! ?

Trojan! ?

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Trojan! ? @((( 08-14-2006
---> Re: Trojan! ? Sharon Franks08-14-2006
Posted by on August 14, 2006, 9:52 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I downloaded and ran Pest Patrol. It found PeopleOnPage.AproposMedia,
which the website says is adware and/or a backdoor trojan.

I'd like the MD5 for it. Does anybody know a website where I can get
the MD5?

Does anybody know how bad PeopleOnPage.AproposMedia really is?



Posted by Sharon Franks on August 14, 2006, 11:56 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453077925
http://www.tenebril.com/src/info.php?id=119754905
http://research.sunbelt-software.com/threatdisplay.aspx?name=AproposMedia&threatid=14978

--

Sharon Franks
MCC group
Microsoft Certified Solutions Developer (MCSD)
Microsoft Certified Trainer (MCT).



>I downloaded and ran Pest Patrol. It found PeopleOnPage.AproposMedia,
> which the website says is adware and/or a backdoor trojan.
>
> I'd like the MD5 for it. Does anybody know a website where I can get
> the MD5?
>
> Does anybody know how bad PeopleOnPage.AproposMedia really is?
>
>



Posted by on August 15, 2006, 2:35 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Thank you for the page references. I'll see if Pest Patrol Free
version can get rid of it. If not, I'll remove it manually by
deleting any of the listed files.

I notice that one description refers to Apropos-Media, PeopleOnPage as
part of a Rootkit. Should I check for something else?

I just got this new laptop, preloaded with software. Would Toshiba
have allowed this to be a part of the preinstalled software?

I've also been loading up my own software. That's software that I
used on another computer, and malware checks never revealed the
existence of Apropos-Media, PeopleOnPage.

One of the descriptions said Apropos-Media, PeopleOnPage can be
installed as part of Grokster. I've never had that.

I'm concerned? curious? about where it came from.

<*(((><



On Mon, 14 Aug 2006 20:56:03 -0700, "Sharon Franks" <-> wrote:

>http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453077925
>http://www.tenebril.com/src/info.php?id=119754905
>http://research.sunbelt-software.com/threatdisplay.aspx?name=AproposMedia&threatid=14978
>
>--
>
>Sharon Franks
>MCC group
>Microsoft Certified Solutions Developer (MCSD)
>Microsoft Certified Trainer (MCT).
>
>
>
>>I downloaded and ran Pest Patrol. It found PeopleOnPage.AproposMedia,
>> which the website says is adware and/or a backdoor trojan.
>>
>> I'd like the MD5 for it. Does anybody know a website where I can get
>> the MD5?
>>
>> Does anybody know how bad PeopleOnPage.AproposMedia really is?
>>
>>
>


Posted by David H. Lipman on August 15, 2006, 4:31 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Thank you for the page references. I'll see if Pest Patrol Free
| version can get rid of it. If not, I'll remove it manually by
| deleting any of the listed files.
|
| I notice that one description refers to Apropos-Media, PeopleOnPage as
| part of a Rootkit. Should I check for something else?
|
| I just got this new laptop, preloaded with software. Would Toshiba
| have allowed this to be a part of the preinstalled software?
|
| I've also been loading up my own software. That's software that I
| used on another computer, and malware checks never revealed the
| existence of Apropos-Media, PeopleOnPage.
|
| One of the descriptions said Apropos-Media, PeopleOnPage can be
| installed as part of Grokster. I've never had that.
|
| I'm concerned? curious? about where it came from.
|
| <*(((><

The MD5 checksum won't help you as there are always new variants to malware and
the cahnces
are the checksum won't match what already exists in a database.

Please use Swandog46's Apropos Adware/RootKit remover
http://swandog46.geekstogo.com/aproposfix.exe

Then follow that up with the following...

Please download, install and update the following software...

* Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/
http://www.lavasoft.de/ms/index.htm

* SpyBot Search and Destroy v1.4
http://security.kolla.de/
http://www.safer-networking.org/microsoft.en.html

* SuperAntiSpyware
http://www.superantispyware.com/superantispywarefreevspro.html

After the software is updated, I suggest scanning the system in Safe Mode.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by on August 16, 2006, 11:10 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Thank you, David. I have a few questions before I complete your
instructions regarding APROPROS.

I went to the SWANDOG site by following your link and downloaded the
exe. Normally I would consider following a link to be risky.

There was no url in my browser window. Normally, I would consider a
site with a blank url to be risky.

The exe says to run the batch in safe mode. Normally I would consider
running any exe to be risky. I did scan the files with AVG -- no
virus. I also used notepad to read the BATCH file. I found that the
fix looks in the registry for APRPS and ADCHAN1, ADCHAN2, ADCHAN3. I
looked in the registry but did not fine any entries containing those
words.

Normally, I consider messing with the registry to be risky.

QUESTION #1:
Please do not take offense, but how am I to know that the link
you gave me and the program I downloaded is safe to use?

QUESTION #2:
I tried to boot to safe mode. No luck. I chose "restart" and
hit F12 -- no safe mode option. I chose "restart" and hit F2 -- it
took me to BIOS. This is a new laptop. I don't know how to boot to
SAFE MODE.

If you would, please consider my concerns and respond with your advice
and suggestions. Thank you.

<*(((><


==============
===============
================


On Tue, 15 Aug 2006 16:31:03 -0400, "David H. Lipman"

>
>| Thank you for the page references. I'll see if Pest Patrol Free
>| version can get rid of it. If not, I'll remove it manually by
>| deleting any of the listed files.
>|
>| I notice that one description refers to Apropos-Media, PeopleOnPage as
>| part of a Rootkit. Should I check for something else?
>|
>| I just got this new laptop, preloaded with software. Would Toshiba
>| have allowed this to be a part of the preinstalled software?
>|
>| I've also been loading up my own software. That's software that I
>| used on another computer, and malware checks never revealed the
>| existence of Apropos-Media, PeopleOnPage.
>|
>| One of the descriptions said Apropos-Media, PeopleOnPage can be
>| installed as part of Grokster. I've never had that.
>|
>| I'm concerned? curious? about where it came from.
>|
>| <*(((><
>
>The MD5 checksum won't help you as there are always new variants to malware and
the cahnces
>are the checksum won't match what already exists in a database.
>
>Please use Swandog46's Apropos Adware/RootKit remover
>http://swandog46.geekstogo.com/aproposfix.exe
>
>Then follow that up with the following...
>
>Please download, install and update the following software...
>
>* Ad-aware SE v1.06
> http://www.lavasoft.de/
> http://www.lavasoftusa.com/
> http://www.lavasoft.de/ms/index.htm
>
>* SpyBot Search and Destroy v1.4
> http://security.kolla.de/
> http://www.safer-networking.org/microsoft.en.html
>
>* SuperAntiSpyware
> http://www.superantispyware.com/superantispywarefreevspro.html
>
>After the software is updated, I suggest scanning the system in Safe Mode.
>
>--
>Dave
>http://www.claymania.com/removal-trojan-adware.html
>http://www.ik-cs.com/got-a-virus.htm
>


Similar ThreadsPosted
Trojan August 2, 2005, 8:42 pm
Trojan August 19, 2005, 6:31 pm
trojan by icq November 4, 2005, 6:40 am
Trojan November 7, 2005, 3:45 pm
trojan November 8, 2005, 3:46 pm
Trojan.moo December 18, 2005, 3:23 pm
ssu.exe is it trojan ??? March 21, 2007, 5:49 pm
Possible trojan??? April 30, 2007, 12:40 pm
What is this Trojan August 3, 2007, 6:15 pm
Anything on this Trojan? September 7, 2008, 7:16 am

The site map in XML format XML site map

Contact Us | Privacy Policy