Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Win32.Magania.ctfo, what is this, and should I be concerned?


  • Please log in to reply
1 reply to this topic

#1 Benie

Benie

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:02:55 PM

Posted 06 June 2013 - 12:20 AM

So I did a complete Clean Reinstall of Windows 7 Home Premium 64-bit, SP1. The reason was to remove two trojans, and serious computer glitches (BSOD's/crashes). Both have been murdered. :woot:  (Sorry, it's just I've been forced to deal with these issues for a week, and I'm so happy to see them gone, and so easy as reinstalling)

 

Anyway, I got Spybot Search and Destroy installed, did a scan. It found nothing, but couldn't check for this "Win32.Magania.ctfo" thing. Yet it claims no threats were found.

 

I searched the web, only found one instance which had no info of this "virus". Should I be concerned?

It shows up as;

Error during check!

Win32.Autorun.cfto [1 - $95CE1D85] (TRegExpr(comp): *+ Operand Could Be Empty (pos 1))
 

I'll try other Antivirus programs that I haven't installed yet (Avast!, Malwarebytes). See if they also detect this thing.



BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,428 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:02:55 PM

Posted 06 June 2013 - 12:46 PM

Hello Benie, The main purpose of the trojan is to steal logons and passwords from users who play on-line games, provided by Gamania.


Lets run these and see.

Please run the F-Secure Online Scanner
Follow the Instruction here for installation.
Accept the License Agreement.
Once the ActiveX installs,Click Full System Scan
Once the download completes, the scan will begin automatically.
The scan will take some time to finish, so please be patient.
When the scan completes, click the Automatic cleaning (recommended) button.
Click the Show Report button and Copy&Paste the entire report in your next reply.


Please download AdwCleaner by Xplode onto your desktop.
Close all open programs and internet browsers.
Double click on adwcleaner.exe to run the tool.
Click on Delete.
Confirm each time with Ok.
You will be prompted to restart your computer. A text file will open after the restart.
Please post the contents of that logfile with your next reply.
You can find the logfile at C:\AdwCleaner[S1].txt as well.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users