Thread View: aol.techchat
3 messages
3 total messages
Started by Frank Sconzo
Wed, 15 Apr 1998 00:00
Another Trojan Horse?
Author: Frank Sconzo
Date: Wed, 15 Apr 1998 00:00
Date: Wed, 15 Apr 1998 00:00
53 lines
2942 bytes
2942 bytes
Greetings! I visited my cousin's house yesterday after he pleaded with me to help him restore his AOL 3.0 software to working order. He downloaded (>>eek<<) something from someone he didn't know... (>>>>super-eek!!!<<<<) and ended up screwing up his account. He said that after an execution of a download, (not sure what the executable's name was) he could no longer type in his password at the sign-on screen. He has since erased all his downloaded files and run a newly purchased copy of McAfee to NO AVAIL. Well, this is not surprising since he was probably infected by a trojan horse. What I am interested in finding out... has anyone heard of this particular trojan horse? When he executes AOL 3.0, the sign-on screen appears, then he chooses his account name, or any account name for that matter (including the master account name), but cannot type in his password. Hitting tab or selecting the password box yields no results. The cursor does not appear in the text box... He MUST sign on as guest or enter his password under Members:Preferences:Passwords in order to get online. He is sure that someone has already used his account because his Profile has been changed once. So..... I wiped out his AOL directories (2.5 and 3.0), emptied his recycle bin, and reinstalled AOL 3.0 with a fresh disk. And.... walla.. NOT. As soon as we configured the new installation of AOL, he STILL couldn't type in his password. Perhaps AOL utilizes DLLs in a system directory which I didn't wipe out... and the trojan horse replaced those DLLs with custom-hacker programmed DLLs? But, a new Installation of AOL should have written over any DLLs in any system directories. ...Or... Has his account somehow been tampered with on AOL's server? (I doubt the latter could happen... lol) Anyway, this is getting long winded. Sorry. Has anyone heard of this circumstance happening to someone? The next step would be for me to do a fresh install of AOL on a different computer with his account and see if it happens again. If so, then he should cancel his account. If not, then indeed, there is still some corrupted program on his computer... and if I don't find out what it is, we'll have to slick the disk and start all over with a fresh disk and a fresh operating system, etc.... See ya! Thanks!
Re: Another Trojan Horse?
Author: LynMik
Date: Fri, 17 Apr 1998 00:00
Date: Fri, 17 Apr 1998 00:00
9 lines
938 bytes
938 bytes
I was infected when the same virus on AOL. My husband downloaded a file that was supposed to be someone's picture, and it turned out to be a "scrap" file. This file affected the system "win" file and made it so we could not enter out passwords. There is information about this password stealer virus all over AOL. I used Dr. Solomon's Anti-virus, and it worked great!! After removing the virus, be sure to change ALL passwords for your screen names. If you go to Members Helping Members, you will get all the detailed info you need. Hope this helps
Re: Another Trojan Horse?
Author: FLY
Date: Sat, 18 Apr 1998 00:00
Date: Sat, 18 Apr 1998 00:00
4 lines
643 bytes
643 bytes
Check the win.ini for any odd RUN or LOAD statements. Anything that looks or sounds fishy, put REM in front of that line and save win.ini. Reboot and see if you have nuked the trojan.
Thread Navigation
This is a paginated view of messages in the thread with full content displayed inline.
Messages are displayed in chronological order, with the original post highlighted in green.
Use pagination controls to navigate through all messages in large threads.
Back to All Threads