wingspar
Premium
join:2002-11-09
Brookings, OR
| trojandropper iuj
Has anyone ever heard of this? Once in a while, I will find about 60 files in my temp folder with a .iuj extension. They clean up just fine. I've only seen them 3 or 4 times recently.
What would one use to clean this if it is a Trojan that I have.
Win XP SP2, updated, and ran SpyBot and Norton Anitivirus 2009, and neither find anything.
--
Gary
Will Fly for Food |
|
rfhar
The World Sport, Played In Every Country
Premium
join:2001-03-26
Buicktown,Mi
clubs:  | »What Is An IUJ file?
Other than finding the above post I know nothing about them. |
|
Smokey Bear
veritas odium parit
Premium
join:2008-03-15
Annie's Pub
1 edit | reply to wingspar
Technical info regarding the trojan: »www.threatexpert.com/report.aspx···b31d30e1 |
|
wingspar
Premium
join:2002-11-09
Brookings, OR
| Ok. I need to update this since the other thread has been locked. In the first place, the files did not have a .iuj extension. The files were named iuj_xxxxx.tmp. The x's representing numbers. I didn't even catch my mistake of saying the files ended in .iuj when I started this thread.
I have found that the files are created when I use the Java Uploader to upload photos at a site I use to sell photos. Tech support suggested I rename one of the files to jpg, and open it in Photoshop. I did, and it opened one of the photos I was uploading. Neither tech support at the photo place, nor the place that provides the Java Uploader are familiar with the iuj_xxxxx.tmp files.
At lilhurricane's suggestion, I downloaded and ran MBAM. Here is the results. I don't know what those "Security Center" things are, but some other program kept finding them, SpyBot I think, and I was told to just have SpyBot ignore them. What are these "Security Center" items?
Malwarebytes' Anti-Malware 1.39
Database version: 2514
Windows 5.1.2600 Service Pack 2
7/27/2009 1:53:29 PM
mbam-log-2009-07-27 (13-53-08).txt
Scan type: Quick Scan
Objects scanned: 97454
Time elapsed: 1 minute(s), 10 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 3
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
--
Gary
Will Fly for Food |
|
lilhurricane
Crunchin' For Cures
Premium,Mod
join:2003-01-11
Purple Zone
clubs:
 ·Comcast
Host:
TV over IP
Software
RCN
Inside Insight
Team Discovery
| We need you to start a new thread (following the FAQ referenced in Software) and post to the CleanUp forum
Please? 
»Re: What Is An IUJ file?
The FAQ will guide you thru what we need you to run and what logs we need you attach. |
|
