Re: Downloader Trojan

From: Bill Sanderson (Bill_Sanderson_at_msn.com.plugh.org)
Date: 11/14/03 

Date: Fri, 14 Nov 2003 14:26:24 -0500

What antivirus do you have in place?

On Windows 98, reading about some related trojans which use this same
executable, Symantec's recommendation is:

Restart in safe mode.

Run NAV and delete all files found infected.

Reverse the changes made to the registry by the virus.

This last bit is tricky, because you'll need to matchup your particular
virus to their articles, and I wasn't able to do that.

I would recommend restarting in safe mode and following their instructions
using whatever antivirus you have in place now--but tell us what it is?

You could also do an online scan from Symantec's site--this would give you
Symantec's name for the virus, which will allow you to find it in their
virus encyclopedia and get more precise removal instructions.

"Cathy" <anonymous@discussions.microsoft.com> wrote in message
news:07ed01c3aae2$32b465c0$a001280a@phx.gbl...
> I read the above message about downloader.Trojan. The file
> my computer says is infected is winlogon.exe. What do I
> do if it is an execute file like this? (I have Win 98)

Relevant Pages

  • Re: need smaller web page in safe mode
    ... Virus alert: a virus has been detected on your computer ... Restart your computer in safe mode with networking ... Scan your computer with the scanner available at Windows Live ...
    (microsoft.public.windowsxp.basics)
  • Re: Downloader.Zlob Trojan horse in system32 files
    ... When you restarted, did you restart into safe mode? ... this virus, but it had nothing. ... really want to avoid the system recovery disk! ...
    (microsoft.public.windowsxp.help_and_support)
  • Remote procedure call problem
    ... >Then the windows count down 30 sec then restart. ... it was caused by the msworm welchiab virus. ... restart windows in safe mode, ...
    (microsoft.public.windowsxp.general)
  • Re: A question for the group
    ... latest anti-virus software and run it on the suspect computer. ... run the virus scan, restart the PC in safe mode and run it again. ...
    (sci.electronics.design)
  • Re: Downloader Trojan
    ... >executable, Symantec's recommendation is: ... >Reverse the changes made to the registry by the virus. ... >I would recommend restarting in safe mode and following ... their instructions ...
    (microsoft.public.security.virus)
Loading