Re: iSearch Toolbar/downloader.trojan

From: Dave Meads (d.meads_at_worldnet.att.net)
Date: 04/07/04 

Date: Tue, 6 Apr 2004 22:59:50 -0700

I also seem to have found the Downloader.Trojan on my XP
system. This was after I found that IE's home page was
set to "homepage.com" (actual address is a lot of numbers
and percent signs). I did run Norton, but it seems there
are script errors in Norton and on the system as well.
This happened after Norton Auto-Protect detected
W32.Welchia.B.Worm on my system, and it was then removed
using a removal tool from Symantec, and I also updated
using LiveUpdate. The script errors that I have seen so
far were: 'g_navstatus' is undefined res://c:\Progra~1
\Norton~1\NAVUI.dll/navstats.htm: 289. Also I cannot
run Help & Support or System restore from the programs
menu in normal ops, Safe mode, or Safe mode with Command
Prompt; it just shows the hourglass for a few seconds and
then does nothing else. I ran norton and found that the
source of the virus was C:\WINDOWS\AddCLS.exe.

Here are the questions: Does the AddCLS file need to be
there or can I delete it? How can I run System restore,
or fix the VB script errors?

The questions

Relevant Pages

  • Re: Need some general purpose advice on how to handle viruses and noxious ad-ware
    ... > according to his Norton Antivirus. ... > in safe mode and a lot of registry editing. ... > I decided to tell him, INSTEAD, to use system restore to take the computer ... Symantec Online Virus and Security Scan: ...
    (microsoft.public.windowsxp.general)
  • Re: Restore cannot restore
    ... So System Restore was available in Safe Mode? ... Is a Norton or Kaspersky application installed? ...
    (microsoft.public.windowsxp.general)
  • Re: trojan.vundo.b
    ... With Norton ... | The microsoft website has nothing on search this adware trojan. ... Reboot your PC into Safe Mode and shutdown as many applications as possible. ... Re-enable System Restore and re-apply any System Restore preferences, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Need some general purpose advice on how to handle viruses and noxious ad-ware
    ... It is totally dependent on the virus in question. ... >I am trying to help a novice cope with his new PC, and yesterday, he>reported that he apparently had acquired a virus -- a downloader/Trojan,>according to his Norton Antivirus. ... > The instructions for removal provided by Norton for removal were obviously> written by an expert, to be implemented by an expert, and included> scanning in safe mode and a lot of registry editing. ... Among other things,> Norton wants to turn off System Restore temporarily -- I suppose to clear> system restore points which might include the trojan. ...
    (microsoft.public.windowsxp.general)
  • Re: System Restore not working?
    ... To boot into Safe Mode, ... As for Norton AV and System Restore, take a look at this web site. ...
    (microsoft.public.windowsxp.help_and_support)