Techware Labs Header

Forums have moved

See this announcement for more details, or just go directly there.

  #1  
Old 04-14-2004, 04:31 AM
JohnE JohnE is offline
Techie
 
Join Date: Oct 2002
Location: Manchester, England
Posts: 116
Default Trojan.Downloader

My PC has become infected with the Trojan.Downloader trojan - in spite of having an up-to-date Norton Antivirus and Zone Alarm Pro installed. Norton Antivirus completely fails to detect it, although Symantec's site does contain instructions for removing the trojan manually. Unfortunately though.... the instructions don't work!

At least once per day my PC will try to access sites without me instigating anything. Fortunately, at least one of these is an ftp site so Zone Alarm kicks in as soon as ftp.exe gets launched (that's usually how I know it's happening). Either that, or a Windows popup appears telling me that vital system files have been replaced by unauthorised versions. It then asks for the Windows XP CD so that it can restore the files to their original versions but even that doesn't seem to fx the problem. A day or two later, it'll be back...!

Symantec's web site recommends turning off System Restore while dealing with this trojan. In my view this is bad advice because turning it back on again deletes any previous restore points - making it impossible to return to a previously known good state.

Does anyone have any definitive instructions for defeating this pest?
Reply With Quote
  #2  
Old 04-14-2004, 11:04 AM
Jason425 Jason425 is offline
Lab Master Techie
 
Join Date: Sep 2002
Location: The Matrix
Posts: 7,353
Send a message via AIM to Jason425 Send a message via Yahoo to Jason425
Default

i'd follow any instructions sites like symantec or microsoft give you. You could get adaware www.lavasoft.de and spybot search and destroy http://www.safer-networking.org/ and get maybe try deleting stuff like ftp.exe :/
__________________
Dell Inspiron 1420 in Midnight Blue - Intel Core2Duo T7300 2.0GHZ/4MB - 2GB Ram - Nvidia 8400 GS 128mb - DVD/RW - 160GB 7200RPM - 14.1" Antiglare - Intel 4965AGN - Bluetooth 2.0 - 2MP Webcam - Vista Home Premium
2005 Mazda3i in Strato Blue
http://www.jasondsmith.net

Reply With Quote
  #3  
Old 06-08-2004, 07:28 AM
Dragon Dragon is offline
Platinium Techie
 
Join Date: Mar 2004
Location: Quantico, VA
Posts: 908
Default Re: Trojan.Downloader

Quote:
Originally Posted by JohnE
My PC has become infected with the Trojan.Downloader
i hate that little bastard. clear out all but your most recent restore point.
__________________
-Semper Fi
Reply With Quote
  #4  
Old 06-08-2004, 09:34 AM
JohnE JohnE is offline
Techie
 
Join Date: Oct 2002
Location: Manchester, England
Posts: 116
Default

It took me forever to get rid of it but I eventually did. Then I got re-infected about 2 weeks ago. However, joy of joys, the latest virus updates for Norton Antivirus seem to have detected it and zapped it.
Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 04:35 PM. Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
Forum style by ForumMonkeys.