Thread: win32/olmarik.AJL trojan

  1. #16
    Banned
    Join Date
    Aug 2010
    Location
    Ontario Canada
    Posts
    9,547
    On your win7 disk is a folder called "Boot"... in that folder is a program called bootsect... you will have to run this from a console in safe mode, but just follow the instructions it gives and it should be able to get rid of this last remnant...

    If not, it may come down to replacing your hard disks...

    Next stop using nod32... try the emergency kit I linked you to in a previous message. The Kit installs on a flash drive (so it cannot be infected) and run a full scan of your system once a week and when you think there may be aproblem. Many AV softwares do not check boot sectors ... the EK does.

  2. #17
    (?<!re)tired Mario F.'s Avatar
    Join Date
    May 2006
    Location
    Ireland
    Posts
    8,446
    I'm pretty sure if I were to catch a trojan like this today, I'd be clueless about what to do. I don't think I've had a virus on my system for the past 10 years, probably more. I can't even say when or what it was. I'm not trying to say I'm special. On the contrary; that my long experience of a virus free system somehow makes me feel more vulnerable, if I indeed one day catch one for whatever reason.

    An unexpected consequence; Concentrate too much in defending yourself -- and become successful enough -- and you'll be a sitting duck if something nasty eventually gets through.
    Originally Posted by brewbuck:
    Reimplementing a large system in another language to get a 25% performance boost is nonsense. It would be cheaper to just get a computer which is 25% faster.

  3. #18
    Banned
    Join Date
    Aug 2010
    Location
    Ontario Canada
    Posts
    9,547
    Yeah, Mario... it happens... and that's just about when one does hit...

    There's some truly nasty code out there... Was a time I used to remove most of it manually. These days it's just not possible. It's become so sophisticated that you just end up chasing it around in circles as it continuously re-creates itself.

    He's got most of that thing out of there now... He should just need to repair the MBR on his disks and he should be good to go... *Usually* wiping out the partitions does that for you, when you create a new boot partition, but apparently not this time.

  4. #19
    Banned
    Join Date
    Aug 2010
    Location
    Ontario Canada
    Posts
    9,547
    Quote Originally Posted by arian View Post
    Hi,
    PS as I was tired of installing different programs, I didn't reinstal NOD32 again and I am working with Avira.
    Do you know which of is better?
    Actually your best bet is Windows Defender, that installs as part of Win7 ...

  5. #20
    (?<!re)tired Mario F.'s Avatar
    Join Date
    May 2006
    Location
    Ireland
    Posts
    8,446
    Microsoft Security Essentials is currently pretty much the best free antivirus software on the market. I don't suggest Windows Defender, since it only protects against spyware and adware. MSE will turn off Windows Defender anyway, so you shouldn't worry if you have it installed.

    But I do suggest you get rid of Avira or any other 3rd party free antivirus. MSE pretty much brought us back to the years of no nonsense, small, fast and highly efficient antivirus we enjoyed a decade ago before these companies started to bloat their antivirus.
    Originally Posted by brewbuck:
    Reimplementing a large system in another language to get a 25% performance boost is nonsense. It would be cheaper to just get a computer which is 25% faster.

  6. #21
    ... kermit's Avatar
    Join Date
    Jan 2003
    Posts
    1,534
    Quote Originally Posted by Mario F. View Post
    Microsoft Security Essentials is currently pretty much the best free antivirus software on the market.
    Hey Mario, how would MSE stand up in comparison of Norton AV? Just curious - I run Norton, cause that is all I have ever used, but if something like MSE would work just as well, I would consider using it instead.

  7. #22
    Banned
    Join Date
    Aug 2010
    Location
    Ontario Canada
    Posts
    9,547
    Quote Originally Posted by kermit View Post
    Hey Mario, how would MSE stand up in comparison of Norton AV? Just curious - I run Norton, cause that is all I have ever used, but if something like MSE would work just as well, I would consider using it instead.
    I hope you don't mind if I pop in on this one...

    Norton (Symantec) is probably the second worst software on this planet. I've seen it totally cripple a Pentium4 2.8ghz system ... 5 minutes to boot it up. Take out everything Norton or Symantec and it boots up in under 25 seconds.

    Norton is totally system invasive, it messes with everything and you take one horrific performance hit using it... Then just to rub salt in the wound, free standing (and free) AV kits like the Emisoft Emergency Kit will go in right behind a fresh Norton scan and find dozens, even hundreds of things norton missed...

    My two favorite words of advice to computer users: DUMP NORTON.

  8. #23
    (?<!re)tired Mario F.'s Avatar
    Join Date
    May 2006
    Location
    Ireland
    Posts
    8,446
    Quote Originally Posted by kermit View Post
    Hey Mario, how would MSE stand up in comparison of Norton AV? Just curious - I run Norton, cause that is all I have ever used, but if something like MSE would work just as well, I would consider using it instead.
    Toe to toe, I would say. Norton AV has been the cause of too many crashed PCs. No doubt. However, not everyone has a similar experience. Invariably, if you have been using it for so long, it's safe to assume you haven't been having... too many problems. It needs to be said that much of Norton's flak is more the result of unsubstantiated word-of-mouth than actual experience with the software. I'm not trying to be offensive, really. Just that much has happened since the early 2000's when Norton's security suits did indeed deserve all the badmouthing they were getting. It's a typical example of how hard is to regain a reputation after you lost it.

    Still, Norton AV is a complete AV suite. It's bot and rootkit protection are among the best. MSE is mostly a detection suit only with marginal deletion/cleaning abilities on infected systems, while Norton AV has very good protocols for deletion and cleaning of all sorts of malware. This distinction is very important, as I see it.

    But this also means that Norton AV has a larger memory footprint and takes its tool also on processor usage. Assuming you take a pro-active approach to virus in your computer, meaning you put a lot of emphasis on safe computer usage and malware detection, there's no reason for you to use Norton when you have MSE in the market for free. Both compare in virus detection quality and sane heuristics. This is even more true if you are using Windows Vista/7 with UAC enabled because right there you already have yet another very strong line of defense against infection. With no risk of running into an infected system, there's no reason to use Norton. You won't be taking advantage of Norton's excellent cleaning protocols and MSE comparable excellent detection heuristics are all you need.

    But... if you find yourself being sloppy sometimes, or absolutely must guarantee a safe(r) environment , say because this computer has a link to your workplace, Norton's added functionality comes as a must. In fact, for office environments I cannot recommend anything other than a complete antivirus suit and Norton has been making some of the best for the past... oh, 4 or 5 years.
    Originally Posted by brewbuck:
    Reimplementing a large system in another language to get a 25% performance boost is nonsense. It would be cheaper to just get a computer which is 25% faster.

  9. #24
    Banned
    Join Date
    Aug 2010
    Location
    Ontario Canada
    Posts
    9,547
    Not to be overtly argumentative Mario... but... (and you know where that always leads)... this was only last week...

    How would you explain a 35% performance hit --things taking more than half again as long as they should-- right after installing Norton on an AMD Quad Core system that previously flew like it's tailfeathers were on fire?

    When I removed Norton... the previous level of performance was restored.

    The thing is that people who *always* install Norton AV, Firewall and whathaveyou... don't actually know what their machines can do without it.

  10. #25
    (?<!re)tired Mario F.'s Avatar
    Join Date
    May 2006
    Location
    Ireland
    Posts
    8,446
    Well, I don't know how to explain it. As I said not everyone has experienced all these troubles with Norton AV. For some the application just cruises along with them on their machines. I do know however, as well as you I'm sure, that bad rep travels faster and more broadly on the tubes. And when I see everyday a whole company running Norton's suit on 5 year old machines with Windows XP, without any problems whatsoever I can only take one conclusion: It's not as bad as people paint it. Maybe the ones for whom Norton works just fine aren't so vocal? Don't know. But our perceptions of what is good and what is bad are often mislead by exactly the imbalance of opinions. My experience with it is vastly different...

    Still, that's the extent of my praise on Norton (and the fact that it boosts a much better security in case of infection). One other aspect I forgot to mention that irks me about Norton and pretty much every other security suit out there is that they make a point of remembering us they are running. Everything serves as an excuse to launch a popup. MSE is a sweet. It really only bothers you if it catches anything. Even if you don't setup scheduled scans (which I don't), the only thing it does is turn its taskbar icon red after a week of no scans. Not even a text balloon. For someone like me, that's just gold. That and the no nonsense UI; another area were the competition seems bent on driving everyone nuts with sometimes almost surreal interfaces (as if an anti-virus had to be a thing of beauty).

    But not on performance. Sorry, don't know what the problem on those machines is (and I bet you are going to tell me on every machine you've seen it running. You wouldn't be the first...). Those days of Norton's antivirus woes are pretty much over. Anyone experiencing problems should probably look elsewhere for the cause.


    Edit: the top selling position for several years of Norton's suits also betray that things may not be just as bad as sometimes they are painted. Surely, such a crap anti-virus software would have been by now entirely displaced by the "much better" competition. It's not even that it can be claimed Norton's marketing is particularly aggressive. It's not.
    Last edited by Mario F.; 02-13-2011 at 01:00 PM.
    Originally Posted by brewbuck:
    Reimplementing a large system in another language to get a 25% performance boost is nonsense. It would be cheaper to just get a computer which is 25% faster.

  11. #26
    Banned
    Join Date
    Aug 2010
    Location
    Ontario Canada
    Posts
    9,547
    It looks like we'll have to agree to disagree about Norton... But in your favour I will point out that it's only, maybe, one machine in 5 where the newest releases of Norton cause problems... and I have no idea what's causing it, hense I can't fix it, hense I can't recommend it. In point of fact I do not like it for just that reason.

    And oh yeah... I know all about just how far and how fast crap travels on the net.

    MSE, we agree on. I like it and recommend it in situations where Defender isn't enough. Although for hard core virus catching I usually recommend the Emergency Kit it's the one you pull out when you're in real trouble... Run it from a flash drive, with windows in Safe mode... works great!

  12. #27
    and the hat of int overfl Salem's Avatar
    Join Date
    Aug 2001
    Location
    The edge of the known universe
    Posts
    39,663
    If you want to make a disk clean - really clean, then use something like Darik's Boot And Nuke | Hard Drive Disk Wipe and Data Clearing
    Your windows install will just see a HD as if it had just come out of the anti-static bag.
    If you dance barefoot on the broken glass of undefined behaviour, you've got to expect the occasional cut.
    If at first you don't succeed, try writing your phone number on the exam paper.

  13. #28
    Registered User
    Join Date
    Apr 2011
    Posts
    3

    Red face Sorry to bring this up again

    But I also have ESET telling me I have the olmarik.ajl trojan.

    I had a bunch of other issues with the system because I let my gf use it but I managed to wipe out everything to the point that ESET, malwarebytes, ccleaner, TrendMicro House-Call, Spybot S&D and Adaware are all reporting clean logs.

    Yet at start up ESET still says olmarik.ajl is on my system but cannot clean it. Quarantine is not an option offered.

    I JUST finally got this system to run the way I like it and am really dreading having to format. I find it amazing that there are malicious programs out there so powerful that no one can get rid of it and that a format may not even get rid of it!

    I know this will sound stupid but is this trojan that bad that I can't just live with it?

    I know what trojans are suppose to do but what if I installed a firewall? Wouldn't the malware then not ever be able to become active? And even if it were, why would anyone want to infiltrate my system? To get my lolcats pictures? My mp3s? ... its not like I have anything that important on there. Worst thing I could imagine is someone installing a keylogger when I'm doing my online banking.

    I run malwarebytes, spybot and ccleaner everyday and I use NoScript on Firefox so could I get away with keeping this little bugger in my system and begin relatively safe (I could install a firewall if need be)?

    Thanks

  14. #29
    and the hat of int overfl Salem's Avatar
    Join Date
    Aug 2001
    Location
    The edge of the known universe
    Posts
    39,663
    I would suggest you head over to here -> Viruses, Spyware and other Nasties
    Post your message and wait for crunchie or jholland1964 to respond.
    If you dance barefoot on the broken glass of undefined behaviour, you've got to expect the occasional cut.
    If at first you don't succeed, try writing your phone number on the exam paper.

  15. #30
    Registered User
    Join Date
    Apr 2011
    Posts
    3
    I will go seek help there but I just came across this and it seems to have been effective.
    Olmarik.ajl Trojan detected - Geeks to Go Forums
    Before I bother people on Daniweb, does anyone think the solution suggested there does in fact work?

Popular pages Recent additions subscribe to a feed

Similar Threads

  1. Trojan in Notepad++ False Positive?
    By mike_g in forum Tech Board
    Replies: 6
    Last Post: 06-14-2008, 10:25 AM
  2. Can't get rid of a Trojan
    By shano in forum Tech Board
    Replies: 12
    Last Post: 09-06-2003, 08:40 PM
  3. Trojan?
    By Brian in forum A Brief History of Cprogramming.com
    Replies: 11
    Last Post: 04-09-2003, 09:18 PM
  4. Kazaa supplied trojan? Yes!
    By Betazep in forum A Brief History of Cprogramming.com
    Replies: 21
    Last Post: 05-31-2002, 07:26 AM