No-Subject - Free Antivirus Forum

No-Subject

BullGuard Antivirus Forum > Virus > Virus Questions > No-Subject

Forum Quick Jump

[ << Previous Thread | Next Thread >> ]

bobbias
New Member

Date Joined Jun 2004
Total Posts : 4

Posted 7-1-2004 11:48 (GMT +1)

anyone here been infected by the tjspec trojan? i've been looking for an antivirus program to get rid of it, since my fully updated norton 2004 still doesn't see it, and found this: Sophos Antivirus. (google for it, it's not hard to find) but i was wondering if anyone else had been infected by this (and yes, it was prolly stupid for me to post this almost blatant advertisement in the Virus questions section) apparently this trojan allows people into your system, and so if someone here is infected by this virus would they please get rid of it ASAP, you should notice your system become VERY sluggish and almost non-responsive for a couple minutes at a time, and if you check, SERVICES.EXE sould be taking all the processor's power. that is an effect of this program, i believe.

bobbias
New Member

Date Joined Jun 2004
Total Posts : 4

Posted 7-1-2004 12:09 (GMT +1)

here's my log:

//-----------------------------------------------------------------
//
// BullGuard report file
//
// Created on: 01/07/2004 05:36:13
//
//-----------------------------------------------------------------

Summary:

C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-222b5bf4-6ee68eaf.class Infected Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-222b5bf4-6ee68eaf.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-2b7648d4-394c3997.class Infected Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-2b7648d4-394c3997.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-6fc4ee1b-37457110.class Infected Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-6fc4ee1b-37457110.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-7e80d0ed-398bab95.class Infected Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-7e80d0ed-398bab95.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-1d59cbfc-1e66e4fc.class Infected Trojan.Java.ClassLoader.Dummy.C
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-1d59cbfc-1e66e4fc.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-35388218-42cfcf60.class Infected Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-35388218-42cfcf60.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-498f6d05-54e66eba.class Infected Trojan.Java.ClassLoader.Dummy.C
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-498f6d05-54e66eba.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-5dcdb4ec-19011074.class Infected Trojan.Java.ClassLoader.Dummy.C
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-5dcdb4ec-19011074.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-6b5281ff-2f4d44d0.class Infected Trojan.Java.ClassLoader.Dummy.C
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-6b5281ff-2f4d44d0.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-774d513b-5778bad0.class Infected Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-774d513b-5778bad0.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-783b4de4-7b8a8102.class Infected Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-783b4de4-7b8a8102.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-78c57ee4-743ae655.class Infected Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-78c57ee4-743ae655.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-78c57fa2-4b7ab8fa.class Infected Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-78c57fa2-4b7ab8fa.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-78d46bca-427327b5.class Infected Trojan.Java.ClassLoader.Dummy.C
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-78d46bca-427327b5.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ok.class-50ac52d4-65ef74d8.class Infected Java.Trojan.Nocheat.A
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ok.class-50ac52d4-65ef74d8.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ok.class-602522d-7f732890.class Infected Java.Trojan.Nocheat.A
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ok.class-602522d-7f732890.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ok.class-6401e368-7523a9db.class Infected Java.Trojan.Nocheat.A
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ok.class-6401e368-7523a9db.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ok.class-648c1468-3f534758.class Infected Java.Trojan.Nocheat.A
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ok.class-648c1468-3f534758.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ok.class-648c1526-31dce2e8.class Infected Java.Trojan.Nocheat.A
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ok.class-648c1526-31dce2e8.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-10160520-442fd1dc.class Infected Trojan.Exploit.Java.Bytverify
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-10160520-442fd1dc.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-11f54855-24fa2aa8.class Infected Trojan.Exploit.Java.Bytverify
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-11f54855-24fa2aa8.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-559f225b-36cea4eb.class Infected Trojan.Exploit.Java.Bytverify
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-559f225b-36cea4eb.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-598ba102-346a0c6a.class Infected Trojan.Exploit.Java.Bytverify
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-598ba102-346a0c6a.class Deleted
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-5aad7e12-698d80a3.class Infected Trojan.Exploit.Java.Bytverify
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-5aad7e12-698d80a3.class Deleted
C:\Program Files\Internet Explorer\eujcqtho.exe Infected Backdoor.Jeemp.C
C:\Program Files\Internet Explorer\eujcqtho.exe Deleted
C:\Program Files\Internet Explorer\fyrtvhwj.exe Infected Backdoor.Jeemp.C
C:\Program Files\Internet Explorer\fyrtvhwj.exe Deleted
C:\Program Files\Internet Explorer\Iesearch.exe Suspect Trojan.Downloader.Small.Gen
C:\Program Files\Internet Explorer\Iesearch.exe Deleted
C:\Program Files\Internet Explorer\nkyfvirn.exe Infected Backdoor.Jeemp.C
C:\Program Files\Internet Explorer\nkyfvirn.exe Deleted
C:\Program Files\Internet Explorer\pfzrlvje.exe Infected Backdoor.Jeemp.C
C:\Program Files\Internet Explorer\pfzrlvje.exe Deleted
C:\Program Files\Internet Explorer\vgejhwnc.exe Infected Backdoor.Jeemp.C
C:\Program Files\Internet Explorer\vgejhwnc.exe Deleted
C:\Program Files\Internet Explorer\werxxgny.exe Infected Backdoor.Jeemp.C
C:\Program Files\Internet Explorer\werxxgny.exe Deleted
C:\Program Files\Internet Explorer\xptjtfmv.exe Infected Backdoor.Jeemp.C
C:\Program Files\Internet Explorer\xptjtfmv.exe Deleted
C:\WINNT\biprep.exe Infected Trojan.Spy.BI
C:\WINNT\biprep.exe Deleted
C:\WINNT\Downloaded Program Files\CONFLICT.1\bridge.dll Infected Trojan.Spy.Briss.B
C:\WINNT\Downloaded Program Files\CONFLICT.1\bridge.dll Deleted
C:\WINNT\optimize.exe Infected Trojan.Downloader.Dyfuca.AK
C:\WINNT\optimize.exe Deleted
C:\WINNT\prntsvr.dll Suspect Win32.Dumaru.Gen@mm
C:\WINNT\prntsvr.dll Deleted
C:\WINNT\pup.exe Infected Trojan.Downloader.VB.Revop
C:\WINNT\pup.exe Deleted
C:\WINNT\system32\Intf32S.exe Infected Trojan.Downloader.VB.Revop
C:\WINNT\system32\Intf32S.exe Deleted
C:\WINNT\system32\iskcopyd.exe Infected Trojan.Downloader.VB.Revop
C:\WINNT\system32\iskcopyd.exe Deleted
C:\WINNT\system32\Microsoft\root\winserv.exe Infected Backdoor.Iroffer.1213.C
C:\WINNT\system32\Microsoft\root\winserv.exe Deleted
C:\WINNT\system32\ndrec32s.exe Infected Trojan.Downloader.VB.Revop
C:\WINNT\system32\ndrec32s.exe Deleted
C:\WINNT\system32\rmv2cltd.exe Infected Trojan.Downloader.VB.Revop
C:\WINNT\system32\rmv2cltd.exe Deleted
C:\WINNT\system32\rnr.dll Suspect Trojan.Downloader.Gen
C:\WINNT\system32\rnr.dll Deleted
C:\WINNT\system32\sdtcprxm.exe Infected Trojan.Downloader.VB.Revop
C:\WINNT\system32\sdtcprxm.exe Deleted
C:\WINNT\system32\sfolderd.exe Infected Trojan.Downloader.VB.Revop
C:\WINNT\system32\sfolderd.exe Deleted
C:\WINNT\system32\system.exe Infected Trojan.Proxy.Mitglieder.Gen
C:\WINNT\system32\system.exe Deleted
C:\WINNT\system32\TDetectC.exe Infected Trojan.Downloader.VB.Revop
C:\WINNT\system32\TDetectC.exe Deleted
C:\WINNT\system32\tiiiexxa.exe Infected Trojan.Downloader.VB.Revop
C:\WINNT\system32\tiiiexxa.exe Deleted
C:\WINNT\system32\vifilea.exe Infected Trojan.Downloader.VB.Revop
C:\WINNT\system32\vifilea.exe Deleted
C:\WINNT\system32\wind.exe Infected Trojan.Proxy.Mitglieder.Gen
C:\WINNT\system32\wind.exe Deleted
C:\WINNT\system32\xfauxt.exe Infected Trojan.Downloader.VB.Revop
C:\WINNT\system32\xfauxt.exe Deleted

Statistics

Scan path : C:\
Folders : 4230
Files : 14380
Archives : 0
Packed files : 0
Identified viruses : 11
Infected files : 48
Warnings : 0
Suspect files : 3
Disinfected files : 0
Deleted files : 51
Copied files : 0
Moved files : 0
Renamed files : 0
I/O errors : 2
Scan time : 00:12:03
Scan speed (files/sec) : 19

eagle
Senior Member

Date Joined May 2004
Total Posts : 805

Posted 7-3-2004 5:32 (GMT +1)

Bobbias,

send your scan log to bullguard at support@bullguard.com they will be able to help.

Eagle

eagle
Senior Member

Date Joined May 2004
Total Posts : 805

Posted 7-3-2004 5:36 (GMT +1)

one other Question,

Did you turn off restore and do a disk clean (XP)?

Eagle

Forum Information

Currently it is Tuesday, December 02, 2008 11:31 PM (GMT +1)
There are a total of 64.507 posts in 15.908 threads.
In the last 3 days there were 17 new threads and 84 reply posts. View Active Threads