TROJ_QDOWN.L and this forumFollow

Why is your site/forums ( or sites advertising ) trying to install Wintools Search bar onto my system? I logged into here from work and within 30 seconds I got a Officescan Real-Time warning that TROJ_QDOWN.L was trying to be installed form the current site you are viewing. Its trying to insert the file Qdow_as2.cab into my Profiles temporary internet files every time I visit the site.

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_QDOWN.L


Thanks

P.S. in the time I it took me to write this my work scanner has popped up twice more. So obviously its one of you advertisers is trying to install a malicious data miner Trojan. Sure it is minor compared to most viruses but still it is classified as a virus.

Or just use Firefox. :)

moz roxx

That will only work for so long... as to the topic, I can't comment if it's happening to me; I know I don't have WinTools on my machine (******* piece of spyware, holy christ I hate it). I also have a paid account here, so I don't get any advertising, but that was just recently.

If this site is being played as a host for advertisers who want to trojan-drop adware, I think Alla should be quick to change advertising companies. Frankly there's nothing seedier on the internet than these rogue marketing-inspired creations and it does nothing but ruin a website's reputation if they're found to be abetting such filth.

I'd be interested in hearing what happens...

You DO NOT need service pack 2. Don't let people tell you otherwise. It doesn't fix anything related to this; it installs an annoying firewall which interferes with almost everything (that, and it breaks several hundred technologies).

Bitdefender works great for this, as it stops/blocks things the second they try to install themselves... but your best bet is to constantly flush your temporary internet files, as I find an occasional trojan.*downloader in there as well. Purge temp internet files, then do a full scan. Chances are 90 out of 100 times you do this, the downloader will be gone. If you have a program sitting active watching for this stuff (like bitdefender) then all you do is use some program that automatically empties your temp internet files upon exiting IE (tweakui does this).

Sorry I didn't just tell you what my favorite browser is, but I thought I'd actually TRY to help you.

Edited, Wed Dec 1 16:43:08 2004 by kroeg

Yeah, of course that'll help... but as that is kind of a time-drain, simply installing Bitdefender will stop it (and tell you where it's coming from).

As a technical contractor, I've always made it a point to investigate where it's coming from, how it started in the first place and all.. but I tried bitdefender out and found that I was spending a lot less time trying to figure out how I suddenly have adware on my system (and those pesky little trojan downloaders). Note: this is not an advertising plug for bitdefender =P