What is the best way to detect this Trojan Pony Botnet?

---

Here's what one of the anti-virus/security companies says:

Once installed, Pony botnet will be configured to start automatically when you start Windows. Once started, the Pony botnet program will perform a scan, and when done, it will list a variety of legitimate or nonexistent files as infections that cannot be removed unless you first purchase the Pony botnet program. Pony botnet will try to intimidate the user by flooding him with popups and fake system notifications, which present him with a false message of infection. The Pony botnet parasite will try to reassure this claim by providing falsified system scan reports, which mark such files as explorer.exe and alg.exe as serious threats. Pony botnet will then execute a “scan” of your computer. This so-called “scan” will always have the same result: that your computer is heavily infected and compromised by malware and spyware. It is very critical to remove Pony botnet and all its components.

---

Bob Smith
Member of Seti PIPPS (Pluto is a Planet Protest Society)
Somewhere in the (un)known Universe?

Of course if you're not sure if you're clean or not.. I don't know what you have/use for anti-virus, but Avira has always worked well for me. However, that won't find a lot of things, so I end up pairing it with MBAM and Spybot Search & Destroy. The last two typically find and remove everything I've encountered, usually MBAM is the one that does the heavy lifting.. I just run Spybot as a follow-up to make sure no crumbs were left behind.

---

Linux laptop:
record uptime: 1511d 20h 19m (ended due to the power brick giving-up)

Of course if you're not sure if you're clean or not.. I don't know what you have/use for anti-virus, but Avira has always worked well for me. However, that won't find a lot of things, so I end up pairing it with MBAM and Spybot Search & Destroy. The last two typically find and remove everything I've encountered, usually MBAM is the one that does the heavy lifting.. I just run Spybot as a follow-up to make sure no crumbs were left behind.

Thanks I will try them windows defender says my system is clean.

---

Best to use offline defender before you run mbam & Sybot, then run combofix last, that will kill orphaned registry entries. Advanced System Care doesn't hurt in the virus murdering procedures

Val

---

And after the spanking comes...



Ni !