Is this a new kind of virus infection?

Discussion in 'Software' started by Wisewiz, Sep 29, 2004.

  1. Wisewiz

    Wisewiz Apprentice's Sorcerer

    A client of mine has asked me to help her clean up her machine, and I'm not sure where to begin, because the virus seems to be attacking her CLIPBOARD in XP, for cryin' out loud!

    When she copies and pastes, instead of getting what she copied, she gets an enormously long one of those URLs that many sites use to code traffic in various ways. Please try this URL at your own risk only: You might wind up with the bug she's got.

    http://master.mx-targeting.com/mx/servlet/MXTarget?adcontext=http://us.f131
    .mail.yahoo.com/ym/ShowLetter?MsgId%3D9102_135885253_70599_2182_759_0
    _24934_1271_1179640308%26Idx%3D196%26YY%3D82130%26inc%3D200%26or
    der%3Ddown%26sort%3Ddate%26pos%3D0%26view%3D%26head%3D%26box%
    3DInbox&contextpeak=0&contextcount=0&countrycodein=US&lastAdTime=109
    6425929|1096235823|1096404822|0|1096405314|0|0|0|0|&la stAdCode=1&cookie1
    =capdate%3D2822%26capdatedy%3D0928%26lupgtry%3D
    1%26lupgid%3D173%26lupgdt%3D1095431438899%26lflshdt%3D1089480203
    %26lstkywd%3D+"Family+T%26lstlogdt

    Has anybody here seen anything like this? I'd just like a suggestion or two about what to go after, other than our usual suspects, and I guess other than our usual tools: Updated good a-v, Ad-Aware, Spybot, and the other stuff that MA mentions in
    http://forums.majorgeeks.com/showthread.php?t=35407

    I just haven't heard of a copy-and-paste trojan before. :confused:
     
  2. PhilliePhan

    PhilliePhan Guest

    Hi Wise,

    I've been in a slump lately regarding advice and this post isn't likely to change that ;) but have you tried Karen's URL Discombobulator?

    http://www.karenware.com/powertools/ptlookup.asp

    Sorry, M.A. if you've got it here :)

    Best,

    PP
     
  3. Wisewiz

    Wisewiz Apprentice's Sorcerer

    Well, Phan, the problem is that she has the virus sitting over her clipboard, and Karen's URL discombobulator (mind you, I like Karen's utilities, and I correspond with the secluded Kenworthy workshop now and then) does nothing for that problem. We might be able to trace the source of the URL, but that might mean that we get the same danged parasite that came in to my client's machine when she hit that site (and I'm assuming a BIG assumption here: I think that the site in the looooong URL she gets every time she pastes is the villain that did this to her machine).
     
  4. PhilliePhan

    PhilliePhan Guest

    Sorry, Wisewiz.
    Looks like my streak continues. I'll keep my eyes open for similar problems.

    Good luck,

    PP
     
  5. PhilliePhan

    PhilliePhan Guest

    I should have added that I assumed that you had searched the web for other problems regarding mx-targeting. Out of curiosity, I just did that and there are many people with similar problems out there. With luck, there may be an easy solution out there as well :)

    http://www.pestpatrol.com/pestinfo/m/mx-targeting.asp

    Regards,

    PP
     
  6. Vonnie

    Vonnie Sergeant

  7. Wisewiz

    Wisewiz Apprentice's Sorcerer

    You guys are the greatest! NOW I know where to start (and mebbe where to stop).

    Thanks to both of oyu.
     
  8. PhilliePhan

    PhilliePhan Guest

    Happy to help :)

    Good luck eradicating this bugger!

    PP
     
  9. bigbazza

    bigbazza R.I.P. 14/12/2011 - Good Onya Geek

    Another good reason to have Pest Patrol in your arsenal to combat baddies. I run it, with others, nearly every day.

    Pest Patrol (6mb in size if you are on dialup)
    http://www.majorgeeks.com/download.php?det=1187

    Free version will identify baddies but not remove them.
    Paid version will identify and remove. Bazza
     
  10. krazykrl

    krazykrl Sergeant Major

    I find Ad-aware to find the same things Pest Petrol does except that Ad-aware also removes them. :p
     
  11. bigbazza

    bigbazza R.I.P. 14/12/2011 - Good Onya Geek

    Because PestPatrol is quicker than AdAware, I usually run PestPatrol first in front of Spybot S&D and AdAware SE as part of my daily cleaning routine. I will reverse this and see what happens. I recommend PP as well as the others, though. Bazza

    ===

     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds