aol virus

The technical section

Moderator: Global Moderators

nelmit
Posts: 4002
Joined: Wed Dec 15, 2004 11:49 pm
Location: Scotland

aol virus

Post by nelmit » Tue Feb 23, 2010 3:03 pm

Hi all,

I know a couple of you have aol as your isp so - a warning.

I had a message supposedly from aol (uk) to update my spyware. It appeared as a window from my aol icon on the taskbar. I did have a browse round the aol site but I find it very user unfriendly so.......after much deliberation and googling I decided it was legit and went ahead. #-o. I now have a lovely Trojan called SHeur3 on my computer which I can only think came from the download of the 'spyware update'.! :x

As far as I can gather I'm going to have to re-format (well the other half will).

You have been warned!!

Regards,
Annette

Tracey
Global Moderator
Posts: 2617
Joined: Fri May 13, 2005 10:27 am
Location: England

Re: aol virus

Post by Tracey » Tue Feb 23, 2010 9:46 pm

I had a pop up a few weeks ago and i cant remember if i clicked anything or not- i dont usually just out of pure *cant be botheredness* and anything to do with aol is usaully connected ot McAfee which i dont get on with. aol are usually very good at not letting anything past them - or mine set up is.
How do you know if you have this virus ? or would i just not be talking to you now if i did ! :roll:
Scotland - Donaldson / Moggach / Shaw / Geddes / Sim / Gray / Mackie / Richards / Joel / Coull / Mckimmie / Panton / McGregor
Ireland and Scotland - Casey / McDade / Phillips / McCandle / Dinely / Comaskey + various spellings

nelmit
Posts: 4002
Joined: Wed Dec 15, 2004 11:49 pm
Location: Scotland

Re: aol virus

Post by nelmit » Wed Feb 24, 2010 12:32 am

Hi Tracey,

Things were not quite right so I ran a full AVG scan ( I have professional but had my link scanner turned off ) and the Trojan showed up almost immediately attached to my AOL software. It had also found a way in to my registry.

AVG moved all 3 threats to the vault and I'm now running a full scan again with my ethernet cable detached from my PC (I'm using my laptop just now) and so far so good.

Once that's done I'll run AVG again with the ethernet plugged in and see what happens.

Fingers crossed.

Regards,
Annette

Currie
Posts: 3924
Joined: Fri Jun 22, 2007 3:20 am
Location: Australia

Re: aol virus

Post by Currie » Wed Feb 24, 2010 12:40 pm

Hello Annette,

This blog from 2007 and later comments has reports of false positives.
http://www.shanktified.com/archives/tro ... oksquickin

This fellow was fiddling around with a similar problem last year.
http://forums.malwarebytes.org/lofivers ... 12448.html

If AVG doesn’t get rid of it you could try Malwarebytes available as a free trial here.
http://www.snapfiles.com/reviews/malwar ... bytes.html

You could always get a second opinion or more from a free online virus scanner such as these.
Panda. http://www.pandasecurity.com/homeusers/ ... ctivescan/
Trend http://housecall.trendmicro.com/au/

Best of luck,
Alan

nelmit
Posts: 4002
Joined: Wed Dec 15, 2004 11:49 pm
Location: Scotland

Re: aol virus

Post by nelmit » Fri Feb 26, 2010 10:08 am

Thanks Alan,

I have run and re-run AVG who assures me they have been moved to the vault but my PC is still not too happy. I ran Spybot and it found 3 Trojans. I keep getting a pop up (from AOL spyware) telling me it has found and blocked Kollah but I have a horrible feeling if I click on it it will plant another one. I also cannot find the AOL spyware programme on my computer now and the shortcut has vanished from my desktop.

I think I'll stick to my laptop for any financial stuff for the moment and will probably re-format when I get organised for it. :x

Regards,
Annette