Comments on: Tubeplayer.ver.6.exe — Fakealert Downloader Sites http://blog.threatfire.com/2009/01/tubeplayerver6exe-fakealert-downloader-sites.html ThreatFire™ AntiVirus protects when others can't Wed, 10 Mar 2010 11:00:47 -0600 http://wordpress.org/?v=2.8.4 hourly 1 By: ThreatFire Blogger http://blog.threatfire.com/2009/01/tubeplayerver6exe-fakealert-downloader-sites.html/comment-page-1#comment-116 ThreatFire Blogger Tue, 13 Jan 2009 18:33:00 +0000 http://newblog.threatfire.com/2009/01/tubeplayerver6exe-fakealert-downloader-sites/#comment-116 David J-<br/><br/>If you ran the downloader discussed in this post from one of the listed domains, you most likely would be seeing all sorts of popups and problems already. <br/>You can find help to evaluate your system on the "Spyware, Adware and Malware Discussion" board at PC Tools' community forums:<br/>http://www.pctools.com/forum/index.php<br/><br/>You may want to install Spyware Doctor and give it a run, if you don't already have ThreatFire installed. David J-

If you ran the downloader discussed in this post from one of the listed domains, you most likely would be seeing all sorts of popups and problems already.
You can find help to evaluate your system on the “Spyware, Adware and Malware Discussion” board at PC Tools’ community forums:
http://www.pctools.com/forum/index.php

You may want to install Spyware Doctor and give it a run, if you don’t already have ThreatFire installed.

]]> By: David J http://blog.threatfire.com/2009/01/tubeplayerver6exe-fakealert-downloader-sites.html/comment-page-1#comment-115 David J Tue, 13 Jan 2009 13:49:00 +0000 http://newblog.threatfire.com/2009/01/tubeplayerver6exe-fakealert-downloader-sites/#comment-115 There is a tubeplayer icon on my desktop but it appears to be a non existent file... The file size says 0 (Zero) and I can't find anything with any of the latest tools such as windows defender...<br/>Would tubeplayer normally appear after a scan? <br/>How do I know that It's been removed? There is a tubeplayer icon on my desktop but it appears to be a non existent file… The file size says 0 (Zero) and I can’t find anything with any of the latest tools such as windows defender…
Would tubeplayer normally appear after a scan?
How do I know that It’s been removed?

]]> By: ThreatFire Blogger http://blog.threatfire.com/2009/01/tubeplayerver6exe-fakealert-downloader-sites.html/comment-page-1#comment-114 ThreatFire Blogger Mon, 12 Jan 2009 21:02:00 +0000 http://newblog.threatfire.com/2009/01/tubeplayerver6exe-fakealert-downloader-sites/#comment-114 Thanks for the note Rao. ThreatFire so far was not built to be a cleanup tool, but it is effective against the installs from current tubeplayer.ver.6 infections. In the lab on an infected system, we see that the user is prompted to kill four of the components and cleans them up properly. Some non-functional items are left behind by ThreatFire (they won't run or perform any malicious task): some system tasks that attempt to run files that have been deleted (you can find the "Tasks" applet in your control panel), and a tmp file in the temp directory. <br/>We'll explore its cleanup further. Thanks! Thanks for the note Rao. ThreatFire so far was not built to be a cleanup tool, but it is effective against the installs from current tubeplayer.ver.6 infections. In the lab on an infected system, we see that the user is prompted to kill four of the components and cleans them up properly. Some non-functional items are left behind by ThreatFire (they won’t run or perform any malicious task): some system tasks that attempt to run files that have been deleted (you can find the “Tasks” applet in your control panel), and a tmp file in the temp directory.
We’ll explore its cleanup further. Thanks!

]]> By: RaoSunshine http://blog.threatfire.com/2009/01/tubeplayerver6exe-fakealert-downloader-sites.html/comment-page-1#comment-112 RaoSunshine Sat, 10 Jan 2009 17:55:00 +0000 http://newblog.threatfire.com/2009/01/tubeplayerver6exe-fakealert-downloader-sites/#comment-112 Was this from youtube?<br/>Or a movie/video site? I have been going to both and was trying to figure where I got it so I won't go there again. And how to be sure it is no longer in my computer! Was this from youtube?
Or a movie/video site? I have been going to both and was trying to figure where I got it so I won’t go there again. And how to be sure it is no longer in my computer!

]]> By: RaoSunshine http://blog.threatfire.com/2009/01/tubeplayerver6exe-fakealert-downloader-sites.html/comment-page-1#comment-111 RaoSunshine Sat, 10 Jan 2009 17:53:00 +0000 http://newblog.threatfire.com/2009/01/tubeplayerver6exe-fakealert-downloader-sites/#comment-111 How did you get the tubeplayer.ver.6 trojan horse out of your computer? I think I already did, but I'm not sure and want to try everything I can to make sure.<br/>Thanks.<br/>-cp How did you get the tubeplayer.ver.6 trojan horse out of your computer? I think I already did, but I’m not sure and want to try everything I can to make sure.
Thanks.
-cp

]]>