[SOLVED] Trojan.Dropper.BCMiner help

Corrine · Oct 24, 2012

Hi, Lisa.

It is not uncommon that uninstalled programs retain the icon in the Notification Area. The Notification Area icons can be reset with a regedit, simplified by the script created by Ramesh Srinivasan at How to Clear Customize Notifications (System Tray) Icons in Windows 7/Vista and XP - The Winhelponline Blog.

Script to Automate

Here is a VBScript (runs in Windows XP/Vista/7) that can automate the above task for you. Download clear-notification-items.zip, unzip and run clear-notification-items.vbs file. It clears Customize Notifications items and restarts Explorer shell automatically.

lisamorton · Oct 24, 2012

Okay Corrine I did that and all that stuff is gone. Is there anything else that you recommend?

Corrine · Oct 24, 2012

Hi, Lisa.

Yes, I recommend that you keep your son from using your computer. :r1: Seriously, you already have A/V and Firewall covered and will be working with niermiro to solve the BITS problem. If you tend to be forgetful about updating third-party software (Adobe, Java), you may want to consider Secunia PSI, a program that automatically scans your computer for applications with security updates and automatically updates them for you. An alternate is the Secunia Online Software Inspector. Additional information about both is available at Free Computer Security - Personal Software Inspector (PSI) - Secunia.

lisamorton · Oct 24, 2012

Oh trust me he is not using it anymore, he use to say my computer ran minecraft better. He has his own laptop at school so let the IT department worry now. lol I went to run the secunia online scanner and it says I need java thought that was funny. I want you to know that I really appreciate you taking the time to help me and I do take notes and always try to learn from this. My friend John told me about this site and said it was a great group of people and again he was right. I'm sure I'll be back because I monitor my husband and daughters computers and one day I'll have to go thru them. Yuk. Thank You again Corrine.

Corrine · Oct 24, 2012

You are very welcome, Lisa. John (Carrona) is included as one of the great people! He has extensive knowledge and has helped countless thousands of people.

Whether its a malware/security type question or a general Windows question, don't hesitate to ask. That is why we are here.

(I don't have Java on my computer and haven't missed it (see Do You Need Java?). You may have missed the link for the latest version of Java early on in the process. It is available from here: Java SE.)

niemiro · Oct 25, 2012

Hello Lisa :)

I have attached a small .zip file to this post which will hopefully resolve your BITS problem.

Can you please download it and open the small .reg file within, and when prompted whether to import the data, choose Yes.

If this completely resolves your problem, there is no need to create any additional threads. If, however, the problem is not completely resolved or you would like additional assistance, be it help with performing the necessary actions, or any curiosity questions about the processes you may have, can I ask you to please create a new thread in the Windows Update forum here: https://www.sysnative.com/forums/forumdisplay.php/88-Windows-Update

and I we will work with you from there.

Thank you very much, and good luck!

Richard

lisamorton · Oct 25, 2012

Well I had a lot of brain farts today. Never used 7 zip before so I clicked on the zip folder and who knows what happened, then I realized how to unzip it, clicked on that and it installed. Then my next moment was when I checked to see if BITS was there and I was disappointed until I went back and realized the word I was looking for was Background not bits duh. So after all this yes it is there and hopefully we are back in business. Thank You Richard for giving me that folder and taking the time. I have one question from either Corrine or Richard. I decided to try the Secunia PSI and it says Microsoft xml core services needs to be updated. Should I do it?

niemiro · Oct 25, 2012

lisamorton said:
Well I had a lot of brain farts today. Never used 7 zip before so I clicked on the zip folder and who knows what happened, then I realized how to unzip it, clicked on that and it installed. Then my next moment was when I checked to see if BITS was there and I was disappointed until I went back and realized the word I was looking for was Background not bits duh. So after all this yes it is there and hopefully we are back in business. Thank You Richard for giving me that folder and taking the time. I have one question from either Corrine or Richard. I decided to try the Secunia PSI and it says Microsoft xml core services needs to be updated. Should I do it?

I am very glad to have been of assistance :)

Yes...service names and display names (here: BITS vs Background Intelligent Transfer Service) cause a lot of headaches. Half the time you need one, and half the time the other!

I will let Corrine answer your question, please...

Take care, and have a great day!

Richard

Corrine · Oct 25, 2012

Nice job as usual, Richard! :thumbsup2:

Hi, Lisa.

I believe the latest update to Microsoft XML Core Services was MS12-043: Vulnerability in Microsoft XML Core Services could allow remote code execution: August 14, 2012. It is a critical security update and definitely needs to be installed. However, if you haven't installed all of the previous updates yet, I suggest you start with them first. Don't try to do them all at once, especially if the update indicates it is for .NET Framework as some people tend to have problems with .NET updates.

On the other hand, if you thought you had caught up with the backlog, check for updates again and see what is offered.

lisamorton · Oct 25, 2012

I double checked all my windows updates and I am current. I did the update that PSI said to do and that is 100%. So I guess I got rid of all the nasty stuff, got my file back and am current with all updates. Perfect. Thank you again Corrine, and Thank you Richard. I'm sure I'll be back again.:wave:

Corrine · Oct 25, 2012

You are most welcome, Lisa. Please don't hesitate to stop back any time you have a question about your computer -- security, Windows Update or something completely different. There are experts in hardware, programming, networking -- you name it and there's someone here who can help!

Search

Search

[SOLVED] Trojan.Dropper.BCMiner help

Corrine

Administrator,
Microsoft MVP,
Security Analyst

lisamorton

Member

Corrine

Administrator,
Microsoft MVP,
Security Analyst

lisamorton

Member

Corrine

Administrator,
Microsoft MVP,
Security Analyst

niemiro

Senior Administrator, Windows Update Expert

Attachments

lisamorton

Member

niemiro

Senior Administrator, Windows Update Expert

Corrine

Administrator,
Microsoft MVP,
Security Analyst

lisamorton

Member

Corrine

Administrator,
Microsoft MVP,
Security Analyst

[SOLVED] Trojan.Dropper.BCMiner help

Administrator, Microsoft MVP, Security Analyst

Member

Administrator, Microsoft MVP, Security Analyst

Member

Administrator, Microsoft MVP, Security Analyst

Senior Administrator, Windows Update Expert

Attachments

Member

Senior Administrator, Windows Update Expert

Administrator, Microsoft MVP, Security Analyst

Member

Administrator, Microsoft MVP, Security Analyst

Administrator,
Microsoft MVP,
Security Analyst

Administrator,
Microsoft MVP,
Security Analyst

Administrator,
Microsoft MVP,
Security Analyst

Administrator,
Microsoft MVP,
Security Analyst

Administrator,
Microsoft MVP,
Security Analyst