I have a Trojan :( - Page 5

BBx · 14-06-2009, 13:16

Am having to DL MalwareBytes now.

Been scanning for 2hrs and superantispyware found 800something threats, went to process and disinfect and got this:

ARRGGHH!

BB x

BBx · 06-07-2009, 22:19

Got a call from IT Manager today.

"Hi ML er what were you doing accessing the network on sunday morning?"

I is confused

... I don't remember doing the VPN thingybob, but I checked for someone's number on my webmail as was meeting her at the Race for Life ... so told her.

But am thinking, webmail isn't linked to the network? more specifically the H: Drive - my personal drive?

After thinking about it for the rest of the day. I realised what could have happened - don't know if I should come clean though

she is probably ****ting herself that the firewalls aren't doing their job.

BB x

Burble · 06-07-2009, 22:24

Webmail will be linked to your network account and therefore linked to your H: drive but accessing webmail wouldn't access your H: drive.

BBx · 06-07-2009, 22:31

Ooo... you gave me another idea Burbs... my personal folders are saved in my H: Drive, but saying that, I can never access those personal folders on webmail...

My thinking is that I synced my phone to my laptop and them 'charged' my phone via usb connection at work... doh!

That means there's a Trojan on my Diamond?

BB x

Burble · 06-07-2009, 22:40

Personal folders as in email personal folders? It'd make sense that you can't access them by webmail since webmail will only give you access to stuff stored within the Exchange server - everything outside it (archives, PST files, OST files and so on) won't be available.

It's possible that there is a Trojan ON the Diamond but not possible (as far as I know) that the Diamond HAS a Trojan. What I mean by that is that the Diamond can act as a USB hard drive so if you plugged it into your PC then the Trojan could be copied onto the Diamond but the Diamond itself isn't infected. Does that make sense? I did a crap job of explaining it.

Mark · 06-07-2009, 22:40

Yes, a trojan could store the files it needs to run there, just like some trojans do with USB drives now. In that case, your phone is a 'carrier' that can allow the trojan to pass from one PC to another, but it's not 'infected' itself.

BBx · 06-07-2009, 22:50

Oh **** my friend put a new ROM on the Diamond the other day :/ better email him!

BB x

Edit: so Mark, do you mean I don't have to copy/paste any files from my phone to the computer to transfer the Trojan?

Mark · 06-07-2009, 23:04

Very unlikely it would be a result of an upgrade to the ROM. It's much more likely the trojan simply copied some files to the phone.

As for the other question - Not necessarily, no. When you put a CD into a computer, the software on the CD can start automatically. I think USB storage devices (including phones) can do the same, which is how the trojan would get out.

Best thing you can do is to get your IT bod to unplug your computer from the network, boot it into Safe Mode, and perform a full virus scan. There's nothing to stop them performing a virus scan on your phone too - just be a bit careful about what it deletes.

BBx · 06-07-2009, 23:17

Quote:

Originally Posted by Mark

Very unlikely it would be a result of an upgrade to the ROM. It's much more likely the trojan simply copied some files to the phone.

Nah, didn't mean that sorry... meant that my friend might have received the trojan while my phone was connected to both his lappy and desktop... oops

BB x

Mark · 06-07-2009, 23:42

Oops indeed!

I do wonder why AntiVirus software isn't catching it, however. Is it that new?

06-07-2009, 22:40	#46
Mark Screaming Orgasm Join Date: Jul 2006 Location: Newbury Posts: 15,194	Yes, a trojan could store the files it needs to run there, just like some trojans do with USB drives now. In that case, your phone is a 'carrier' that can allow the trojan to pass from one PC to another, but it's not 'infected' itself. Last edited by Mark; 06-07-2009 at 22:43.

14-06-2009, 13:16	#41
BBx Reverse SuBo Join Date: Jul 2006 Location: London Posts: 8,673	Am having to DL MalwareBytes now. Been scanning for 2hrs and superantispyware found 800something threats, went to process and disinfect and got this: ARRGGHH! BB x

06-07-2009, 22:19	#42
BBx Reverse SuBo Join Date: Jul 2006 Location: London Posts: 8,673	Got a call from IT Manager today. "Hi ML er what were you doing accessing the network on sunday morning?" I is confused ... I don't remember doing the VPN thingybob, but I checked for someone's number on my webmail as was meeting her at the Race for Life ... so told her. But am thinking, webmail isn't linked to the network? more specifically the H: Drive - my personal drive? After thinking about it for the rest of the day. I realised what could have happened - don't know if I should come clean though she is probably ****ting herself that the firewalls aren't doing their job. BB x

06-07-2009, 22:24	#43
Burble Rocket Fuel Join Date: Jul 2006 Posts: 7,826	Webmail will be linked to your network account and therefore linked to your H: drive but accessing webmail wouldn't access your H: drive.

06-07-2009, 22:31	#44
BBx Reverse SuBo Join Date: Jul 2006 Location: London Posts: 8,673	Ooo... you gave me another idea Burbs... my personal folders are saved in my H: Drive, but saying that, I can never access those personal folders on webmail... My thinking is that I synced my phone to my laptop and them 'charged' my phone via usb connection at work... doh! That means there's a Trojan on my Diamond? BB x

06-07-2009, 22:50	#47
BBx Reverse SuBo Join Date: Jul 2006 Location: London Posts: 8,673	Oh **** my friend put a new ROM on the Diamond the other day :/ better email him! BB x Edit: so Mark, do you mean I don't have to copy/paste any files from my phone to the computer to transfer the Trojan?

06-07-2009, 23:04	#48
Mark Screaming Orgasm Join Date: Jul 2006 Location: Newbury Posts: 15,194	Very unlikely it would be a result of an upgrade to the ROM. It's much more likely the trojan simply copied some files to the phone. As for the other question - Not necessarily, no. When you put a CD into a computer, the software on the CD can start automatically. I think USB storage devices (including phones) can do the same, which is how the trojan would get out. Best thing you can do is to get your IT bod to unplug your computer from the network, boot it into Safe Mode, and perform a full virus scan. There's nothing to stop them performing a virus scan on your phone too - just be a bit careful about what it deletes.

06-07-2009, 23:42	#50
Mark Screaming Orgasm Join Date: Jul 2006 Location: Newbury Posts: 15,194	Oops indeed! I do wonder why AntiVirus software isn't catching it, however. Is it that new?