Hell you aint KIDDING....I got HIT by it and its hard to get it off the computer....I am still working to get rid of it.

I thought I got it on gardenweb and now this proves it.. THIS PISSES ME OFF!

I just found it too...its a malware Trojan virus...

I tell you what, this internet is getting to be something else. What happen to the good ole days when people treated you with respect.

Rob-let me know how you get rid of it. I emailed Spike yesterday morning to tell him my virus scan detected it. So far, I don't think I have it on my computer.
Robin

Robin....I just found it by running housecall online virus scan. I had been using adware programs and Hijackthis program and found the files that it was putting on my computer. The adware program missed the malware. Once I ran house call, I found it in 6 places on my computer. It has a back file and several others.

The malware is called TROJ Revop A and it has several other things that help it out, one called ADW Scanport A.

I cleaned it all up and so far no ads pop up.

Whats scary is that NOW, we all have to be careful of Ads, because they can cause problems too. I HOPE someone will start listening now that this has become a problem too. IF something had happen to my computer...I would have sued.

I remember when it happen. I had just finished placing a thread on the greenhouse side. I remember my computer loading something and I had no way to stop it. I wish there was a button you could push to stop installs. That trojan malware loaded and took over in less than 2 minutes. It was unreal.

I think I am ok now. :-)

Nortan caught it here, but every time I opened a new GW page there was an onslaught of popups and godknowswhat.

Lisa you might want to get some adware software and run it. There are some free programs that catch malware. I bet you have lots. Malware are programs that like to track you and spyware is watching your every move. Its amazing what gets on the computer just by looking at a webpage.

Rob

I use hijackthis(you must know what you are doing to use this) and ad aware (this one is good, gets all kinds of stuff)

I have McAfee virus scan and it gave me an alert as to the virus on Sunday. I also have a pop up blocker. I ran my virus scan and nothing came up so I think McAfee blocked it.

Well hell! Norton didn't catch it, Spybot didn't catch it
--- Ad-aware removed tons of malware, but it keeps coming back!!!!
This is about a PITA!

I know Lisa...I still have something putting up an ad everytime I come to garden web. I wonder if there is a trigger or something. We are going to have to talk to Spike about this if it doesnt stop, or stop coming to the site all together.

I think my next purchase is a firewall.

Rob

Housecall found and deleted 7 uncleanable virus things! 4 were the 'trojan revop a' you found.
Let's see if this does any better.
I still wouldn't know it was a virus if I hadn't stumbled across Spike's post.
Wonder how many folks got hit and don't know it?

Lisa, thanks for posting this!! I'm pretty sure that this is what got our computer at home. We can get and send emails, but can't get out on the internet web sites at all. Have got to call Dell and get this mess fixed!! Think that maybe there were some other problems just prior to this, so with both of these issues, our computer is "sucking dead air".....LOL

On a brighter note: OUR OLDEST SON RETURNED FROM IRAQ MONDAY MORNING!! Thank you for all your prayers and thoughts during this past year.

Mary and Ronnie

Hey Mary

Good to hear the son returned home. That is good news when alot of them are not returning alive.

Rob

Lisa...try SpyKiller...its free and I bet you will be surprised at what it finds.

After the virus scan, the ad scan I still found

1 infected Registry key
2 infected Folders
78 spyware
12 live spyware processes

Lisa...the above software wont let you clean but you can see what you have.

I tried another one called spybot S&D and it will clean also. You might try it.

I am testing to see if I get any pop ups.....

Mary! That's wonderful news! I'm so happy for you all.
Tell him "Thanks! and WELCOME HOME!!" from me :)

Rob, Spybot is what didn't find trojan revop a .
I installed AVG also, lol! It didn't find any spyware or virus things. I don't know how this one is different except it's always running.
Since Housecall got rid of those last virus things, I haven't had any more popups. But I do have these annoying things that show back up on my 'start menu' and have to be cancelled/deleted when I reboot. I don't know what the heck they are or how to get rid of them!
So I have that last annoyance to straighten out.
I guess SpyKiller is next on the list...
Ah, a milestone in my computer experience --- I got a virus. Now I understand the importance of protection!

Lisa...I have been fighting this thing all afternoon and you are correct, it keeps running. I think there is something in the registery that keeps this *itch running. I am going to check out housecall webpage and read up on registy editing. I remember something about the removal of the file above.

I would really like to email the guy who made this.

Lisa you might find this website of interest if you still get pop ups. It might be the ezula thingy

http://www.whirlywiryweb.com/q/ezulasurf.asp

I give up...I will have to call someone to get this d*** thing off.

I got it all off but the popups still come back. There is something hiding somewhere that does it.

I may just reformat and start over.

Rob,
These folks know how to tell you how to get rid of trojan revop a.
wilderness security
They ask you to run spybot s&d or ?, then hijackthis and when you have to log of virus things, post back with the info and they can tell how to get rid of it.

Then after you do that you can walk me thru it.
Mine is in C:/DO.exe trojanhorse downloader.rovop.A

I just deleted it AGAIN, this time might be charmed.
I'll let know in a sec.

Mary-Thank God your son returned home safely. :-)

As far as the pop up virus-I read that if you are a contributing member you won't get the pop ups.

Hi Robin...Long time since I have seen you around!! Yes, I thank the good Lord every day for keeping our son, and others, safe. We're going up this week to visit.
Mary

Lisa...I just dug down deep and grabbed this thing by the roots.

It was tough but I might have got it all.

Here are some files you might want to see if you have and delete them.

btiein.dll
morze1.ink
nsupdate.dll
nsupd9x.inf
lycos_ss.exe
sbinstall.exe
powerscan.exe

So far no pop ups while I typed this in. I am going to restart my computer and hope I come back. LOL

I used 3 programs to hunt this stuff down. I hope that its it.

You can try spyhunter too see all the bad cookies you have. I deleted those too.

I restarted and I am back...so far so GOOOOOOOOOOOOOOOOOODD!

I might be cured.....no pop ups yet.

I am so happy....

I will check back and let you know later...

Welll....I just got one. Back to the old drawing board.

Lisa....I tried the site but found it closed.

Go Rob! Go Rob!

I fought the trojan and....

I WON!

I bit the bullet and went looking for it in my c drive, found it, blasted it. I don't know why the virus checky programs were finding it but not deleting it.

So far so good here. No popups, no virus warnings, no more trojan.
I'll just chalk it up as a lesson.

I found the wildernessecurity site by googling that trojan thing. I know it's running because I clicked the link and there is a new message since I posted the link.
Here's the addy of the thread about revop.a
http://www.wilderssecurity.com/index.php?board=30;action=display;threadid=24829

See if it works better by c&p.

Hello everyone....anyone still come on this site? I rarely do, but I still remember our fun conversations on the gh forum convo side!
Robin