locked
Trojandownloader as a gift from Microsoft ? RRS feed

  • Question

  • Some time ago I used the Windows Live OneCare (free scan) on my PC, for which purpose I had to install IE8 (usually I use Firefox). The scan was done, and no malware was found. However, after that the computer started to show some abnormal behaviour, i.e. the mouse stuck often for a moment and the PC gave a "ping" sound. I scanned the PC with A-Squared Free, and it found TrojalDownloaderSmall in Windows/ie8/. The A^2 (a very good tool !) was obviously able to remove the virus. I have now also unistalled IE8 plus the Live OneCare, and will never repeat the above process. Thus, Microsoft was very "helpful", because the process obviously offered a route for the TrojanDownloader to infect my computer.
    Wednesday, September 23, 2009 4:59 PM

Answers

  • Note, first of all, that this forum is not for discussing the free OneCare scanner that runs via the ActiveX control at the web site. It is for the full installed subscription product - http://onecare.live.com
    The forum for the free scanner is here -  http://boards.live.com/safetyboards/board.aspx?BoardID=225 - though you don't need that since you had no problem with the scanner.
    Secondly, if you ran the free scanner, you scanned the PC at that time and that time only. It did not protect your computer from that point forward.
    You did *not* receive the Trojan from Microsoft or via any route exposed by installing IE8 or using the free scanner. You did receive the infection by visiting an infected site (directly or via an embedded advertisement) or by opening an infected email or attachment without having adequate protection installed on the PC.
    I strongly recomemend that you update Internet Explorer to IE8 and/or use a different web browser that is up to date and more secure than IE6 or even IE7. And, I urge you to purchase security software or install a free product such as Avast or Avira that includes real time protection. The free product you installed does not include real-time protection and will not prevent infection. http://www.emsisoft.com/en/software/compare/

    -steve


    Microsoft MVP Windows Live / Windows Live OneCare, Live Mesh, & MS Security Essentials Forums Moderator
    Wednesday, September 23, 2009 6:26 PM
    Moderator

All replies

  • Note, first of all, that this forum is not for discussing the free OneCare scanner that runs via the ActiveX control at the web site. It is for the full installed subscription product - http://onecare.live.com
    The forum for the free scanner is here -  http://boards.live.com/safetyboards/board.aspx?BoardID=225 - though you don't need that since you had no problem with the scanner.
    Secondly, if you ran the free scanner, you scanned the PC at that time and that time only. It did not protect your computer from that point forward.
    You did *not* receive the Trojan from Microsoft or via any route exposed by installing IE8 or using the free scanner. You did receive the infection by visiting an infected site (directly or via an embedded advertisement) or by opening an infected email or attachment without having adequate protection installed on the PC.
    I strongly recomemend that you update Internet Explorer to IE8 and/or use a different web browser that is up to date and more secure than IE6 or even IE7. And, I urge you to purchase security software or install a free product such as Avast or Avira that includes real time protection. The free product you installed does not include real-time protection and will not prevent infection. http://www.emsisoft.com/en/software/compare/

    -steve


    Microsoft MVP Windows Live / Windows Live OneCare, Live Mesh, & MS Security Essentials Forums Moderator
    Wednesday, September 23, 2009 6:26 PM
    Moderator
  • Thanks, Steve,
    Yes, I have no objections. I just want to add that I do have Avast, i.e. real-time protection. A-squared is a good software to run from time to time just to check if something has gone through after all.
    Thursday, September 24, 2009 5:03 AM