Forum Home
Press F1
 
Thread ID: 54665 2005-02-18 19:47:00 earthlink spy audit trojan scan mark c (247) Press F1
Post ID Timestamp Content User
326250 2005-02-18 19:47:00 www.earthlink.net

That's the url above.

I did a scan there on what i thought was my squeaky clean comp and they say i have a trojan. "medium serious" but no details at all.

Anyone familiar with this site? I got it from a link The Register, a uk online IT site, so thought it would be kosher.

Would they give a false positive to get you to buy the package?

Can't believe it myself but preferable to having a trojan on this machine I can't find. Yes I've updated and run AdAware and Spybot - nothing.
TIA Mark c
mark c (247)
326251 2005-02-18 20:27:00 According to this site (www.spywarewarrior.com), Earthlink Spy Audit is a legitimate clone of Webroot's (http://www.webroot.com/) product. The fact it would not tell you the name of the trojan is a worry though. Does it offer to remove this trojan or do you need to buy the product for this step?

Spybot and Adaware possibly would not detect this trojan. If you had the name of the trojan, you would be able to search for traces of it on your system to verify the scan result. I would get a second opinion from a different program that detects trojans and run it over your system to confirm this finding.
Jen (38)
326252 2005-02-18 20:32:00 Grab a2 from here that should find it for you.
www.emsisoft.com
hth
johnboy (217)
326253 2005-02-18 20:33:00 After seeing that it is listed as a "trustworthy" app on Spyware Warrior's site (www.spywarewarrior.com) I have just given it a run. It took all of three seconds to tell me that I have the following:

Adware
1. ABC KeyLogger
2. Spy #a9580 -- Research In Progress

Adware Cookies
1. 2o7.net Cookie
2. Spy #ec5aa -- Research In Progress
3. DomainSponsor Cookie

Have just given Adaware a run also which detected "4 Critical data miner cookies", none of which are on the above list.

Maybe I will download and give the Microsoft AntiSpyware Beta a run, just out of interest, but I don't think I will get too excited by the Earthlink's results. In your case, however, I think I would be seeking a second opinion, just to be sure. Go to the Spyware FAQ for a link to an online trojan scan and let us know how you get on.
FoxyMX (5)
326254 2005-02-18 20:39:00 Will run another one see what happens. Thanks for all that.

Jen. Yes Earthlink says I've got a trojan - no further details - If you want to get rid of it only $39.95 etc.,
mark c (247)
326255 2005-02-18 21:45:00 Well thanks to all.

johnboy I got a2 and ran it.

At.......c:\windows\Downloaded program Files\HDPlugin1101.dll
was found...Win32Gator.1101
removed it and will now check at Earthlink again after this interwebbotnet customer.Thanks. m
mark c (247)
326256 2005-02-18 23:58:00 Ran WindowSecurity.com trojan scan after removing the Gator that a2 picked up and WindowSecurity and a2 say the machine is clean but back at earthlink for a fresh scan they say the same thing. A "medium serious" trojan is still resident.

*sigh*

Think I'll leave it for the moment. Can't run every trojan scan in the universe trying to get a clean report.

Thanks for all the replies and the reference to the FAQs was a good idea too. Should've thought of that.

Have a nice lives.
mark c (247)
326257 2005-02-19 01:26:00 Maybe I will download and give the Microsoft AntiSpyware Beta a run, just out of interest, but I don't think I will get too excited by the Earthlink's results. In your case, however, I think I would be seeking a second opinion, just to be sure. Go to the Spyware FAQ for a link to an online trojan scan and let us know how you get on.
before you do that go to
today.reuters.co.uk
and read a bit more about ms antispyware
sambaird (47)
1