Strange New Trojan

Strange New Trojan

Re: Strange New Trojan Posted by Juim on Sun Jul 8th 2007 at 7:33pm
Juim
726 posts
Posted 2007-07-08 7:33pm
Juim
member
726 posts 386 snarkmarks Registered: Feb 14th 2003 Occupation: Motion Picture Grip Location: Los Angeles
I have a new and interesting problem as of this morning. Whenever I try to run HL2DM, I get a Virus warning. Seems a Trojan has infected my system, and when I follow all the steps recommended by Norton it does'nt seem to help. So far it only happens when I try to open up HL2DM. I actually have to disable Norton to run it. Very frustrating. Heres the message I get:

C:\DOCUME~1\ADMINI~1\L...\~32.TMP

This is the address of the Trojan, but I can't seem to find it based on this abbreviation. I have updated virus protection, re-scanned the entire system, with no errors, looked in the steam folders for something out of the ordinary, and still nothing. HL2DM runs fine when I disable Norton, but I would really love to find this little bugger and delete it. BTW Every time I get the message the number at the end (32.Tmp) increases. Any suggestions?
Quote from Nietzsche....God is dead
Quote from God....Nietzsche is dead
Re: Strange New Trojan Posted by Crono on Sun Jul 8th 2007 at 8:21pm
Crono
6628 posts
Posted 2007-07-08 8:21pm
Crono
super admin
6628 posts 700 snarkmarks Registered: Dec 19th 2003 Location: Oregon, USA
You're running as the user "Administrator" ? That's not a good idea, once you get this solved I would strongly suggest making a new user with admin rights and using that instead. It isn't as pertinent to guard your admin account as in Linux or something, but it still has quite a bit of power that a normal admin-able account does not.

Strange. You could try deleting all the temp files in the temp folder (%temp%) none of those are needed. If the hl2.exe has been infected I'm sure someone can send you a copy of theirs. If the cache isn't infected, you could try deleting the hl2 folder under your steam games (go ahead and grab all the unique stuff, though, like your maps, sounds, and things like that, that you have downloaded personally), run HL2 again and it will unpack all those things again.

Go through the other usual methods at virus removal. Check your processes for something weird, google is your friend there, just look up the names of the processes. If you find that you can't delete anything, run msconfig and select diagnostic startup. The bad side of doing that is you'll have to reconfigure your selective startup (if you were using that).

It will re-boot with nothing but the base utensils for Windows and you can do all the stuff you can't do in Safe Mode. (It basically turns off all startup items and services). You'll be able to catch it that way.
Blame it on Microsoft, God does.
Re: Strange New Trojan Posted by RedWood on Sun Jul 8th 2007 at 8:28pm
RedWood
719 posts
Posted 2007-07-08 8:28pm
RedWood
member
719 posts 652 snarkmarks Registered: Sep 13th 2006
Delete Norton form your computer, hope it doesn't crash it, and download Avast.
Re: Strange New Trojan Posted by OtZman on Mon Jul 9th 2007 at 10:25am
OtZman
1890 posts
Posted 2007-07-09 10:25am
OtZman
member
1890 posts 218 snarkmarks Registered: Jul 12th 2003 Occupation: Student Location: Sweden
I'm with RedWood, Norton is worse than virus.
What the Snarkpitters listen to!