Not sure what malware this is...

AnAngelsDeath

AnAngelsDeath

Gawd
Joined
Feb 6, 2006
Messages
813
I found this during a scan, and AVG classifies it as a Trojan - PSW.Onlinegames.BJEN - has anyone seen this, and know exactly what it is and where it comes from, i also get some malware that pops up in a warning window whenever i open WoW, and the main news/update splash screen comes up. It says its in: App Data\Local\Microsoft\Windows

and the one that pops up with WoW will go away after i run some scans and remove the malware with Ad Aware and Malware Bytes, but after a couple days, it comes back, so I'm not quite sure what to do. I've always been able to figure out reoccurring malware threats, and get rid of them permanently, but cant seem to figure out this one, so any help would be appreciated !

here's the two i keep getting whenever I open WoW:

File = josh's laptop\AppData\Roaming\Microsoft\Windows\Cookies\josh's_laptop@fastclick[1].txt

Infection = Found Tracking Cookie.Fastclick

and

File = josh's laptop\AppData\Roaming\Microsoft\Windows\Cookies\josh's_laptop@fastclick[2].txt

Infection = Found Tracking Cookie.Atdmt

they wont friggin go away, and i dont like that popping up when i open WoW, i've already had my account hacked/jacked 3 times, and now that I have an authenticator on it, it shouldn't happen again, but I'm still worried that something could happen, and plus i just dont want any malware on my PC anyways, ya kno.
 
Last edited:
tracking cookies are not really a virus but they do enable people to track your use of the web
 
looks to be a keylogger (which would explain your accounts getting "hacked") that may behave like a rootkit. i would advise running ccleaner, superantispyware, tdsskiller and eset's online scanner from safe mode with networking, in that order. i would also uninstall WoW before doing so and then reinstall after you run the scans from a freshly downloaded installer from blizzard's site.
 
demografik said:
looks to be a keylogger (which would explain your accounts getting "hacked") that may behave like a rootkit. i would advise running ccleaner, superantispyware, tdsskiller and eset's online scanner from safe mode with networking, in that order. i would also uninstall WoW before doing so and then reinstall after you run the scans from a freshly downloaded installer from blizzard's site.
Click to expand...

yea that's what i was worried it was, i knew that was the reason my account got hacked twice last summer, but is it really neccessary to uninstall WoW, cause then I have to repatch and everything, cause right now I only have Classic and BC, i haven't gotten the other expansions yet. and I already have CCleaner (been using it for years) and Ad Aware, AVG, Malware Bytes and Spybot - Search & Destroy, so do i really need all those other ones that were listed, the people at blizzard recommend malwarebytes (not saying that they are qualified to recommend anything, but I also heard good things from hard forums when i first got last year, and also from some other review sites like PCMag and Cnet/Download.com) but if you really recommend i get the other ones then i guess i will. I've been building computers for a long time as well as repairing them, but I'm only novice when it comes to everything about Malware/Spyware/Viruses tho I've been learning a lot more since i got hacked (tho that was on a different PC then i use now) and I guess i should try something new since i've ran everything and i managed to get rid of everything except the two that pop up when i open WoW like i described, I just cant get rid of them, even tried searching for them in the root directory they are listed under when my scanner shows them, and they keep coming back.
 
ok so i ran most of those you guys recommend, and finally after running CCleaner it got rid of those two warning i explained, when i first open WoW, but then after about an hour they came back. So the only one I haven't tried yet was Combo fix and superantispyware, so thats the two i'm bouts to install, but first I have to remove AVG, cause when i first tried installing ComboFIX, it said it couldn't install with AVG already installed, cause AVG targets some of ComboFIX's files and processes, and it said it could apparently be dangerous for my system. So I will do all that, and run CCleaner again, and hopefully it will stay away now. I got rid of everything except those two warning when i open WoW, so i was almost completely succesful, i just need those two to go away. Oh and the only other thing I didn't try was uninstalling WoW and running all these cause i really didn't want to have to do that since it takes like 2hours or better, even tho I have really really good Xfinity Comcast Speedboost internet, but if I cant get them to stay away after trying all this, then I guess I will just have to do that :( Fucking people and their malware/spyware and viruses, why do people wanna infect other peoples systems, i mean i understand why people would want to use key-loggers and stuff like that so they can steal personal info, which is hella messed up and wrong, but at least theres a point to it, they gain nothing from it, but people who make viruses that just ruin peoples systems so they have to completely re-format their drives and reinstall their OS, is completely pointless, they just do it to be assholes, and i don't get why people are like that. This world is so messed up ya kno. people need to stop trying to steal peoples stuff to make money, and actually be a MAN and go out and get a job instead of trying to be a leech on society, its people like that, that are making this world not a good place to live in


tronmaster said:
If you are playing WoW and getting hacked twice, you should really consider an authenticator http://us.blizzard.com/store/search.xml?q=authenticator. If you are in the US it's only $6.50! There is if you have an iphone an authenticator app for the iphone or ipod. I am not sure if the authenticator is for any other mobile device.
Click to expand...

and i do have an authenticator (believe i said that in one of my posts, got one one right after i got hacked last summer, put it on my iPod touch originally, but i just recently switched it to my Droid X, cause I always have that on my, and I tend to leave my iPod in my car mostly. ,and like i said, I only got hacked those two times last summer, I'm not worried about getting hacked again, but that doesn't mean i still dont want any keylogger or other types of malware on my system.
 
Last edited:
Another question, so combofix and the other virsus ones i was recommended are all one time use, like they dont actually seem to install and stay installed like avg or avast, etc etc, does, so what would you guys recommend for a permanant Anti-Virus solution. I've been using AVG for 6yrs now, and I'm ready to try something else, and I've been reading reviews of course but I was wondering about some opinions here. so Suggestions please ?

Ranma_Sao said:
The last project I worked on before becoming a Consultant:

http://www.microsoft.com/security/scanner/en-us/default.aspx

Give this a try, it definitely sounds like you have another infection hiding somewhere.

This posting is provided "AS IS" with no warranties, and confers no rights.
Click to expand...
I've used that before, works pretty well
 
AnAngelsDeath said:
Another question, so combofix and the other virsus ones i was recommended are all one time use, like they dont actually seem to install and stay installed like avg or avast, etc etc, does, so what would you guys recommend for a permanant Anti-Virus solution. I've been using AVG for 6yrs now, and I'm ready to try something else, and I've been reading reviews of course but I was wondering about some opinions here. so Suggestions please ?


I've used that before, works pretty well
Click to expand...

Well, I always recommend Microsoft Security Esentials, but some might call me biased. ;)

This posting is provided "AS IS" with no warranties, and confers no rights.
 
demografik said:
looks to be a keylogger (which would explain your accounts getting "hacked") that may behave like a rootkit. i would advise running ccleaner, superantispyware, tdsskiller and eset's online scanner from safe mode with networking, in that order. i would also uninstall WoW before doing so and then reinstall after you run the scans from a freshly downloaded installer from blizzard's site.
Click to expand...
I would add this, turn off the system restore while running these scans
.
 
superantispyware did the trick, thanks Demografik for the recommendation. But I still need to find a good permanent anti-virus program. Something similar to AVG for its quality (at least it used to be the best, not so much anymore) and the the fact that its free. So any other suggestions on that ? Combofix, and the other ones i try, dont actually stay on your computer after you use them apparently, which i find weird.
 
AnAngelsDeath said:
superantispyware did the trick, thanks Demografik for the recommendation. But I still need to find a good permanent anti-virus program. Something similar to AVG for its quality (at least it used to be the best, not so much anymore) and the the fact that its free. So any other suggestions on that ? Combofix, and the other ones i try, dont actually stay on your computer after you use them apparently, which i find weird.
Click to expand...

Hi, AnAngelsDeath,

I suggest you try Microsoft Security Essentials.

Hope this helps.

Chuklr
 
combofix really shouldn't be used by anyone who isn't well versed in malware/virus removal. many of the programs suggested here aren't virus preventing programs, they're virus removal programs. that's why they don't monitor. for monitoring i would also recommend security essentials or avira.

i would still suggest performing all the steps i recommended, in the order i said, to be sure you're not infected.
 
demografik said:
combofix really shouldn't be used by anyone who isn't well versed in malware/virus removal. many of the programs suggested here aren't virus preventing programs, they're virus removal programs. that's why they don't monitor. for monitoring i would also recommend security essentials or avira.

i would still suggest performing all the steps i recommended, in the order i said, to be sure you're not infected.
Click to expand...

i am aware of that fact, except comobfix, it was misinformed and thought it was a monitoring program as well, but with everything, i was aware of that fact, but since I got rid of everything that was on my computer and stopped the keyloggers attached to my WoW launcher, i would like to find something good that is meant for staying active and monitoring for Viruses, already got two good ones for Malware and what not, but I need a virus one, and I wanted to try something new besides AVG, but I cant seem to get anyone to recommend me anything except that microsoft security, But thats not qutie what I'm looking for
 
I know it's not free but ESET is always my preferred AV/Firewall software. Also, TrojanRemover is a great tool and has a free 30 day trial.
 
I've personally seen eset miss viruses that once i uninstalled it MSE picked them up and cleaned without a hitch. I've also seen viruses ursurp MSE and disable it. There is no win-win anti-virus/malware software.

I do at least 15 virus removals a month and I use a myriad of tools - and my only advice to people regarding prevention are 3 simple tasks, no free porn sites, no paid porn sites, and enable TeaTimer in Spybot S&D, click no on everything.

Most people are back within a month or two.
 
Tried installing MSE, for one, that link given doesn't go to the correct place anymore, and then i found a download for it from Cnet, but I didn't notice it was 32bit, so when i tried to installed, a window popped up saying i was trying to install a 32bit app on a 64bit OS and that i needed to correct the problem by downloading the correct program. Which I thought Win 7 was both 64 and 32bit, i was pretty sure I was able to install both types of programs. But anyways, anyone got a proper link for a 64bit version of MSE ?
 
AnAngelsDeath said:
Tried installing MSE, for one, that link given doesn't go to the correct place anymore, and then i found a download for it from Cnet, but I didn't notice it was 32bit, so when i tried to installed, a window popped up saying i was trying to install a 32bit app on a 64bit OS and that i needed to correct the problem by downloading the correct program. Which I thought Win 7 was both 64 and 32bit, i was pretty sure I was able to install both types of programs. But anyways, anyone got a proper link for a 64bit version of MSE ?
Click to expand...

I'm confused. If you google "Microsoft Security Essentials" the first link it gives is http://www.microsoft.com/security_essentials/. Microsoft would be the most trustworthy place to download it. I don't know why anyone would download it from anywhere else - especially a SECURITY tool.
 
right, download it from microsoft. be advised that it checks that windows is genuine. if your OS is not genuine, i would suggest using Avira. i would also suggest using either chrome or FF with adblock/noscript as your browser to help avoid getting malware. i generally advise only using ONE monitoring tool - don't have AVG, MSE, Avira, spybot, etc etc all running at once. they'll interfere with each other.
 
You must log in or register to reply here.
Back
Top