kissa182 Posted January 19, 2013 ID:636495 Share Posted January 19, 2013 Help, i scanned my parent's computer, and it found backdoor.bot virus.Is this serious, they use the computer for bank things etc..(but many years this same setup and no money lost for no reason)The computer has never been scanned and avast! has been protecting it, but i decided to scan with Malwarebytes today and those found. Are they bad if there has been nothing bad happened for computer and probably nothing personal information stolen as nothing weird hasnt happened to their bank account, so nothing stolen from their bank accounts so everything is fine there.Is it enough that i deleted them, done a full scan and deleted all what was found? The PC is running Windows XP Link to post Share on other sites More sharing options...
kissa182 Posted January 19, 2013 Author ID:636497 Share Posted January 19, 2013 I mean that everything is fine on things where personal information is used, so should i be worried if i removed those? Link to post Share on other sites More sharing options...
MrCharlie Posted January 19, 2013 ID:636504 Share Posted January 19, 2013 Welcome to the forum, you should read this about the type of infection you mention:BACKDOOR WARNING------------------------------One or more of the identified infections is known to use a backdoor.This allows hackers to remotely control your computer, steal critical system information and download and execute files.I would advice you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.Though the infection has been identified and because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?http://www.dslreports.com/faq/10451When Should I Format, How Should I Reinstallhttp://www.dslreports.com/faq/10063I will try my best to clean this machine but I can't guarantee that it will be 100% secure afterwards.Let me know what you decide to do. If you decide to go through with the cleanup, please proceed with the following steps.-----------------------------------------Welcome to the forum, please start at the link below:http://forums.malwar...?showtopic=9573Post back the 2 logs here.....DDS.txt and Attach.txt<====><====><====><====><====><====><====><====>Next.......Please remove any usb or external drives from the computer before you run this scan!Quit all running programs.Please download and run RogueKiller to your desktop.For Windows XP, double-click to start.For Vista or Windows 7, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.Click Scan to scan the system.When the scan completes > Close out the program > Don't Fix anything!Don't run any other options, they're not all bad!!!!!!!Post back the report which should be located on your desktop.MrCPlease don't run any other scans, download, install or uninstall any programs while I'm working with you.Please stick with me until I give you the "all clear".------->Your topic will be closed if you haven't replied within 3 days!<--------(If I don't respond within 24 hours, please send me a PM) Link to post Share on other sites More sharing options...
MrCharlie Posted January 22, 2013 ID:637820 Share Posted January 22, 2013 How are we doing??Do you still need help or can I close this post??MrC Link to post Share on other sites More sharing options...
Maurice Naggar Posted January 23, 2013 ID:638265 Share Posted January 23, 2013 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts