Shoutbox

Trojan Downloader - Printable Version

-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Messenger Plus! for Live Messenger (/forumdisplay.php?fid=4)
+---- Forum: WLM Plus! Bug Reports (/forumdisplay.php?fid=7)
+----- Thread: Trojan Downloader (/showthread.php?tid=28176)

Trojan Downloader by KillahInstinct on 07-05-2004 at 12:51 PM

First of all, I'm really thankfull for the one making this program, and its really helpfull to me, so thanks.
Downloaded and installed the new Messenger Plus! 3.
Asks me if I regret installing some adaware, offcourse not, if the maker of this program can make some money out of this, I don't care.
But there is a difference between adaware(ie popups) and install a trojan downloader. Immediately after installing it tells me a Virus has been found in MsgPlusSetupFile-A.tmp ---> A trojan downloader :S
It's not a problem, I know how to remove it and keep MSN Messenger and Messenger Plus still working, I'm just wondering why a trojan downloader?

Note : I don't use some kind of free antivirus program but the best program at the moment.
I will post more details later.
It IS a trojan, and not some bad heurastic detected sponsor thing.


RE: Trojan Downloader by Kryptonate on 07-05-2004 at 12:55 PM

Plus! does not contain a trojan, some av's tell this but they been told already that it's not a virus. Update your av.


RE: Trojan Downloader by Dane on 07-05-2004 at 01:03 PM

Out of curiosity, what AntiVirus Program is it?


RE: Trojan Downloader by KillahInstinct on 07-05-2004 at 01:50 PM

To Kryptonate :
Updated. Same error message.
To eXoenDo :
AntivirusKit 12 Pro, I've been testing for a proffesional company several AntiVirus-Progs (with several I mean 24) this one came out as the best. The proffesional company was the Dutch Rail Company (Nederlandse Spoorwegen)

File : MsgPlusSetupFile-A.tmp
Location : C:\Documents and Settings\Local Settings\Temp
Engine : KAV-Engine and RAV Engine
Virus : TrojanDownloader.Win32.Swizzor.ag
Virus Information : "TrojanDownloader.Win32.Swizzor.ag is no trojan itself, but this program is able to download a trojan silently from the internet."

The good thing is it removes itself, the tmp file I mean. The trojan is still active and trying to download/install other Trojans.


RE: Trojan Downloader by Patchou on 07-07-2004 at 01:54 AM

Your antivirus probably detected the setup of the sponsor program. It's not a virus nor a trojan and should not be detected as is. Norton and McAfee don't report it themselves.


RE: Trojan Downloader by matty on 07-07-2004 at 02:14 AM

quote:
Originally posted by KillahInstinct
To Kryptonate :
Updated. Same error message.
To eXoenDo :
AntivirusKit 12 Pro, I've been testing for a proffesional company several AntiVirus-Progs (with several I mean 24) this one came out as the best. The proffesional company was the Dutch Rail Company (Nederlandse Spoorwegen)

File : MsgPlusSetupFile-A.tmp
Location : C:\Documents and Settings\Local Settings\Temp
Engine : KAV-Engine and RAV Engine
Virus : TrojanDownloader.Win32.Swizzor.ag
Virus Information : "TrojanDownloader.Win32.Swizzor.ag is no trojan itself, but this program is able to download a trojan silently from the internet."

The good thing is it removes itself, the tmp file I mean. The trojan is still active and trying to download/install other Trojans.
Not to go against what Patchou is saying, but the Sponsor app is a stripped down version by Patchou's demand. I bet they use the same installer as they would with their normal package causing the error message.
RE: Trojan Downloader by Patchou on 07-07-2004 at 05:45 AM

It's true, but it's still a fact that even the full 'normal' package of lop.com doesn't contain any trojan or virus, just more ads :).


RE: Trojan Downloader by fluffy_lobster on 07-07-2004 at 09:26 AM

And spyware, I would imagine :P


RE: Trojan Downloader by sonec on 02-02-2005 at 11:33 AM

Hi, my name is nathan dermot and i work for wellingborough solicitors agents.

after reading your post i have seen that you have admitted to adding ad ware, and spy ware to you program.

now you  must realise that this is ILLEGAL and is a punishable offence.

my computer is now affected by a win32.trojandownloader.swizzor.br

i have the appropriate means for a case in which your web site will be shut down.

i would like to know how to remove this trojan downloader from my PC immediatly. or the case will go ahed.


RE: Trojan Downloader by user27089 on 02-02-2005 at 11:45 AM

Hello Nathan,

It is illegal to install software on a computer without your consent, but there is no trojan in the software at all... and the mere fact that it has adware, which is optional rules out everything that you have just said.

The sponsor software is optional, therefore, when accepting to install such things, it was on your own accord, you should've chose not to install it, which you can. Without being so naive.

To be honest, you can just try and shut down msgplus.net, you probably don't have the correct knowledge about such a thing in any case, there isn't a single trojan in it, certain 'back doon' antivirus' detect messenger plus! as a trojan, one of which is AVG. I can assure you that it contains nothing apart from the optional sponsor.

If you would like to remove the optional sponsor from you computer, simply uninstall messenger plus! then you can reinstall messenger plus! and when it comes to a screen that has a silver toolbar on it, then press 'i refuse, do not install etc.'...

traxor.

ps. I'm guessing that you are using a less reliable Antivirus, such as BullGuard or AVG... If you would use something like Norton Antivirus or one of the 'upbrand' pieces of virus removal software, then you would see that it does not detect the sponsor software as a trojan.


RE: Trojan Downloader by Menthix on 02-02-2005 at 11:56 AM

quote:
Originally posted by sonec
my name is nathan dermot and i work for wellingborough solicitors agents
Good for you.

quote:
Originally posted by sonec
after reading your post i have seen that you have admitted to adding ad ware, and spy ware to you program.
Adware

quote:
Originally posted by sonec
this is ILLEGAL and is a punishable offence.

says who? You got prove for that?


quote:
Originally posted by sonec
i have the appropriate means for a case in which your web site will be shut down.

Really? Go for it... we'll see.

quote:
Originally posted by sonec
i would like to know how to remove this trojan downloader from my PC immediatly.
Get some kind of real virusscanner which atually detects and removes viruses from your PC.


So your research before talking legal bullshit.
- The trojan you saw is not comming from Plus! or it's a false report
- If you installed the sponsor and you want to remove it, go here
- http://www.msgplus.net/getthefacts.php
- Messenger Plus! has over 6 million users and a verisign certification and you think you the right to let this site shut down? I would say bring it on if you wish really :s.
RE: Trojan Downloader by user27089 on 02-02-2005 at 12:04 PM

oh yeah and...

http://mpsupport.toastednet.org

If you would like to take your time reading that, as I'm sure a solicitor would do to find any flaws etc. or anything that could in the end prove you right, therefore being able to 'close msgplus.net'

:lol:.


RE: Trojan Downloader by ~INVASION~ on 02-02-2005 at 12:21 PM

quote:
Originally posted by sonec
Hi, my name is nathan dermot and i work for wellingborough solicitors agents.
you would think that they would have their own site if they were so important to anything :dodgy:
http://www.google.com/search?sourceid=mozclient&i...+solicitors+agents
RE: Trojan Downloader by user27089 on 02-02-2005 at 12:24 PM

The only agents in wellinborough i can get are estate agents, and they have nothing to do with the legal side of things...