Cab caught a cold

[Burchman82]

hey guys, thought id let you know my cab got a virus yesterday. My fault as its the only machine on my network that hasnt got a virus scanner (want no memory resident stuff) however as it has a direct net connection it picked up the pe_tenga.a malware. Interesting thing is that it only infected the gameex files!!!!! so yeah, managed to get rid of it easily over the lan with my other machine but still goes to show that its easily picked up.

[hansolo77]

Any idea how you got it? Was it hiding in an emulator-related torrent?

[headkaze]

hey guys, thought id let you know my cab got a virus yesterday. My fault as its the only machine on my network that hasnt got a virus scanner (want no memory resident stuff) however as it has a direct net connection it picked up the pe_tenga.a malware. Interesting thing is that it only infected the gameex files!!!!! so yeah, managed to get rid of it easily over the lan with my other machine but still goes to show that its easily picked up.

What do you mean by "direct net connection"... although there have been viruses in the past that can get through ports I don't think there are many with this capability even if your not behind a firewall/NAT etc. Viruses can't just jump through a port... you must have downloaded something and executed it on your machine.

[Adultery]

What do you mean by "direct net connection"... although there have been viruses in the past that can get through ports I don't think there are many with this capability even if your not behind a firewall/NAT etc. Viruses can't just jump through a port... you must have downloaded something and executed it on your machine.

If he's executing programs from the LAN, couldn't he have piggy-backed it when he installed something?

I'm no expert on this sort of thing, so I hope I don't sound stupid.

[Ricci]

Hola..what virus is it?? That will help us to narrow it down...

[Adultery]

Hola..what virus is it?? That will help us to narrow it down...

Further Info On pe_tenga.a from Trend Micro:

This virus spreads via network shares. It collects and generates a certain number of octets of a host machine's IP address, then scans the whole network for writable shared folders.

It either appends or inserts its code into the .EXE files it finds in all of the infected system's folders. This file infector executes at every system startup if the file it infects has autostart capabilities.

Upon execution, this virus downloads a malicious file from the Web site utenti.lycos.it/vx9. Trend Micro detects the said file as TROJ_TENGADL.A. This downloaded Trojan, in turn, downloads another malicious file, which Trend Micro detects as PE_TENGA.A-O.

In people terms... It attached itself onto GameEx through your network. Better scan your PC.

[gerble1000]

whats the best antivirus out there and adware

gerble1000

[shbon]

whats the best antivirus out there and adware

gerble1000

If you're talking free stuff, I'd recommend the following:

Firewall - Zone Alarm

Anti-virus - Avast! 4.7 Home edition

Spyware - combination of:

Spybot Search & Destroy

SpywareBlaster

HijackThis

Autoruns

This has kept me clean for quite a while (touches wood quickly).

Shaun

[Burchman82]

well im using pc-cillin and that got rid of it after an update. As for downloading. the only thing that computer downloads is gameex. which is why i posted. My other computers are all safe and have no trace of anything on there. so i assumed that the cab managed to get it itself from somewhere. so yeah interesting stuff. just goes to show that even "idle" computers are easily infected.

interesting that it hit gameex straight up though.

[hansolo77]

Perhaps you should send Tom a quick PM and let him know. His file may be infected and he doesn't even know.

[Adultery]

well im using pc-cillin and that got rid of it after an update. As for downloading. the only thing that computer downloads is gameex. which is why i posted. My other computers are all safe and have no trace of anything on there. so i assumed that the cab managed to get it itself from somewhere. so yeah interesting stuff. just goes to show that even "idle" computers are easily infected.

interesting that it hit gameex straight up though.

Like I said before...

If you have that virus, it can mold itself into any exe on your computer and run itself. If your cab is on the same network as your master computer, it spreads to every shared folder it finds. If you can make changes in GameEx through a remote computer, there's an in for the virus.

I'm assuming that's your scenario since you mentioned that you executed the program through another computer.

Hope that helps!

[Tom Speirs]

Like I said before...

If you have that virus, it can mold itself into any exe on your computer and run itself. If your cab is on the same network as your master computer, it spreads to every shared folder it finds. If you can make changes in GameEx through a remote computer, there's an in for the virus.

I'm assuming that's your scenario since you mentioned that you executed the program through another computer.

Hope that helps!

I'm pretty sure it did not come from me, but I'm doing a a hardcore scan now on my entire network just to be sure.

[Burchman82]

i didnt run gameex remotley or any portion of gameex remotley i simply removed the virus remotley and thats all the contact my machine has had with it. My master computers stopped it from reaching themselves quite effectivly. I dont doubt that its been contracted from somewhere else online, but i thought it wise to let Tom know. And it seems he is doing a scan anyway.

anyway no harm no foul.