trojan downloader:win32/cutwail.ba HELP!

[CorneliusM]

Good catch Corrine on the other software! The keygen programs prey on people wanting to get something for free. and are hosted at sites that allow such things. This is the shadier side of the internet. They are a perfect opportunity to get a virus and they have a program they know they can hide in.....the program you want the keygen for.

But Gimp's free to download? And I validated my Windows 7 over Christmas It was only Office 2010 I tried to cheat

 

[Corrine]

Hi, CorneliusM.

As I said, your Windows 7 license does indeed appear valid. However, according to the information I see, there are a lot of cracks you have downloaded, most likely via torrents, most likely how your computer got infected in the first place.

 

[CorneliusM]

Hi, CorneliusM.

As I said, your Windows 7 license does indeed appear valid. However, according to the information I see, there are a lot of cracks you have downloaded, most likely via torrents, most likely how your computer got infected in the first place.

Oh I don't use torrents after I had XP 3 years ago, all those files that said crack on them were Gimp brushes/effects I just looked at the folders seems that CKScanner may have just scanned for files that had crack in the titles :s

 

[Corrine]

Good. I'll pass that along to the developer. What about Photoshop & ImageLine, since both of those programs are licensed programs?

 

[Thorsen]

Regardless of where you get the keygen from, it is inviting trouble. You could find it on google. doesn't mean its safe. Best to stay away. I meant no offense toward you in my post earlier, just to be clear. I just wanted you and others who might have the same issue to be aware of the danger.

 

[CorneliusM]

Good. I'll pass that along to the developer. What about Photoshop & ImageLine, since both of those programs are licensed programs?

Oh Photoshop was bought for me because I do a lot of designing for friends and, Imageline Fruityloops was installed by my friend as I had no access to my amplifier and It had Hardcore (cracked tube amp being what The Kinks band created for their sound) so their all legitimate

 

[CorneliusM]

Regardless of where you get the keygen from, it is inviting trouble. You could find it on google. doesn't mean its safe. Best to stay away. I meant no offense toward you in my post earlier, just to be clear. I just wanted you and others who might have the same issue to be aware of the danger.

Sorry If I seemed grouchy, It was getting really late here and, I wanted sleep and, to get that virus removed both at the same time, when it comes to programs, I always pay for them or get open source versions of them, I know a lot of people who just get cracked programs and even OS's and I see it as pointless- the only thing stopping me from having the new Ubuntu OS is that my built in ATI Radeon card isn't compatible with it.

Again, I have to say thank you to everyone for all the help last night! I'd of ended up reinstalling Windows 7 again and lost 40GB of CDs that I don't have with me and movies I don't have with me!

 

[CorneliusM]

I would have to say in case anyone isn't sure they got the virus, check your system configuration>startup and check for items like syncman and regedit32 being in there with files like ("letters and numbers") and what I did was uncheck them but, this stoops you finding them in the registry if you dare go near it.
The virus will prevent allow you on MSE's site and definition download site but, when you click to download your 32/64bit version, you'll be told you have no internet connection or in Google Chrome you'll be told it cannot find the website. The virus will prevent Windows Update as well.
I expect that even if you get the MPAS.exe definition update from someone on a memory stick, this thing may prevent the installation of that into MSE too!

 

[Thorsen]

Im glad your system is doing good now and thanks for the details on this virus.

I too have seen plenty of people pirate and I myself years ago had done so. It is more problematic than it seems and people get viruses that don't make themselves known. I also understand that the "crack" brushes listed were false positives and am glad you are using a legal non-pirated version of these programs. As for "cracked" brushes... I haven't seen much done with this type of brush?

If you are making wallpapers, you should post some of your work here: http://www.sevenforums.com/customization/21076-custom-made-wallpapers.html

or post in this thread. we all love digital art.

 

[Thorsen]

Oh one more thing.... you were worried about losing all your data. If you dont have a backup plan in place.... make one.

My backup plan:
I have system restore enable so it is available, a system image on an external drive, a recovery partition (from OEM), and the external HDD is a 500G so I manually copy over all files that are important. this way if something happens, I have multiple ways of reverting errors, re-imaging, or completely re-installing from recovery and then getting all my files off the external.


If you get a external HDD, it is well worth the money, you wont be worried about loosing all your data. If its all on one HDD in your comp, and your comp dies, then you are SOL (&*%$ Out of Luck)

 

[CorneliusM]

Oh one more thing.... you were worried about losing all your data. If you dont have a backup plan in place.... make one.

My backup plan:
I have system restore enable so it is available, a system image on an external drive, a recovery partition (from OEM), and the external HDD is a 500G so I manually copy over all files that are important. this way if something happens, I have multiple ways of reverting errors, re-imaging, or completely re-installing from recovery and then getting all my files off the external.


If you get a external HDD, it is well worth the money, you wont be worried about loosing all your data. If its all on one HDD in your comp, and your comp dies, then you are SOL (&*%$ Out of Luck)

Cheers for the link, I do mess around with paint programs when I get the chance, I use to use them to make icons and some wallpapers and occasionally edit an .msstyle I find on deviantart (rather than standard aero msstyles!)
The original installed OS was Vista (no comment) so all I have is my Windows 7 disc and I have been looking into getting an external HDD for the past month as I move a lot and loads of discs would murder the space in my bags!
I do, however, keep original setup programs that I like on memory sticks in case of emergencies.
I even use the Windows Live Skydrive to save a lot of documents and pictures, videos and music I couldn't live without

 

[CorneliusM]

Update on the virus situation;
I've been running TrendMicro's HouseCall program and, it has found, so far found 33 Rootkits and 1 more trojan.
When it comes to MSE scanning beforehand, it picked up nothing and the same with June's MSRT which said my computer was clean.
When HouseCall spotted the trojan, MSE alerted me to say it found two trojans where HouseCall was scanning.
MSE automatically removed the trojans after 10 minutes while I was waiting for HouseCall to finish its scan (I didn't want HouseCall to have an error trying to remove them after MSE had cleaned them) so I will be trying several more standalone scanners to see if the problem/s really been dealt with!

 

[CarlTR6]

Rootkits are serious and often very difficult to git rid off. If I had 33 rootkits, I would format and do a clean install.

 

[CorneliusM]

Rootkits are serious and often very difficult to git rid off. If I had 33 rootkits, I would format and do a clean install.

I was about to but, its only this Malware bytes program that spotted them MSE continually says everything's fine and, I've tested to see if it picks up any more and it has done every time, I will do a clean install but at the moment I need to back up my media otherwise I'll lose way too much!

 

[Jacee]

Can you save and post the log from MBam? MSE and MBam should on the same "thought-wave"

 

[CarlTR6]

Certainly you should save your files; but be sure to scan them once you have them backed up.

 

[CorneliusM]

Can you save and post the log from MBam? MSE and MBam should on the same "thought-wave"

Yeah no problem, i constantly update Mbam and MSE and run scans whenever possible but the next time I do I'll get a log of the scans

 

[CorneliusM]

Certainly you should save your files; but be sure to scan them once you have them backed up.

Oh I definitely will be scanning them before any backup. I have SUPERantispyware and Malware Bytes which are all set to manual so there shouldn't be any conflict between them and MSE.
Hopefully this month's MRT will be available to give my laptop the once over as well!