Re: Downloader.Trojan

From: Craig Twist (tc_at_craigtwist.wanadoo.co.uk)
Date: 01/10/05 

Date: Mon, 10 Jan 2005 17:16:58 -0000

David,

How would I go about finding which process is running this file?

CTRL-ALT-DELETE obviously lists my processes, but where from here?

Regards,

TC
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:eeXkIxq9EHA.3820@TK2MSFTNGP11.phx.gbl...
> If you can't delete it, it is being used. You have to stop it from being
used, reboot and
> scan/delete or you have to shutdown the process running that loads the
file and scan/delete.
>
> --
> Dave
>
>
>
>
> "Craig Twist" <tc@craigtwist.wanadoo.co.uk> wrote in message
> news:OnG2NYq9EHA.3944@TK2MSFTNGP12.phx.gbl...
> | David,
> |
> | Thanks for your response.
> |
> | I have tried this sequence several times over already and unfortunately
> | Windows XP will just not let me delete the virus from the file
'ocWOC.dll'.
> | I have tried the sequence again to ensure I am not doing something wrong
and
> | windows will still not let me delete the virus or the file from my
computer.
> |
> | Perhaps I am missing something which is staring me in the face!!!!
> |
> | TC
> |
> | "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
> | news:OGSKM2n9EHA.2600@TK2MSFTNGP09.phx.gbl...
> | > 1) If you are using WinME or WinXP, disable System Restore
> | >
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
> | > 2) Reboot your PC into Safe Mode and shutdown as many applications
as
> | possible
> | > 3) Using your NAV software, perform a Full Scan of your platform
and
> | clean/delete any
> | > infectors found
> | > 4) Restart your PC and perform a "final" Full Scan of your
platform
> | > 5) If you are using WinME or WinXP,Re-enable System Restore and
> | re-apply any
> | > System Restore preferences, (e.g. HD space to use
suggested
> | 200 ~ 400MB),
> | > reboot your PC.
> | > 6) If you are using WinME or WinXP, create a new Restore point
> | > 7) Please report back your results
> | >
> | >
> | >
> | > --
> | > Dave
> | >
> | >
> | >
> | >
> | > "Craig Twist" <tc@craigtwist.wanadoo.co.uk> wrote in message
> | > news:uh8jKdd9EHA.208@TK2MSFTNGP12.phx.gbl...
> | > | I am currently running Norton AV 2004 on my PC (XP Home) and auto
detect
> | has
> | > | detected the 'downloader.trojan' virus.
> | > |
> | > | The infected file is located at C:\WINDOWS\System 32\oCwOC.dll
> | > |
> | > | At first NAV auto detect tells me that it is "unable to repair this
> | file"
> | > | and then it tells me "access to file denied". I have ran a full
system
> | scan
> | > | on NAV and fortunately this is currently the only virus that has
been
> | found
> | > | on my computer. However, once detected, the repair wizard displays a
> | status
> | > | of 'delete failed'.
> | > |
> | > | On selecting 'fix' NAV is unsuccessful. On selecting 'quarantine'
NAV is
> | > | unsuccessful. On selecting ' delete' NAV is unsuccessful. The
infected
> | file
> | > | remains on my computer.
> | > |
> | > | I have followed the link to the NAV information file
> | > |
> |
http://securityresponse.symantec.com/avcenter/venc/data/pf/downloader.trojan
> | > | .html but after following the instructions I still find that I
cannot
> | delete
> | > | this file.
> | > |
> | > | Can anybody help? It is becoming increasingly annoying to have auto
> | detect
> | > | continually flash up a virus alert and I would like to fix this
problem
> | > | without having to pay the ludicrous sums of money symantec ask for
via
> | the
> | > | technical help hotline (£1.50 per minute)!!!!
> | > |
> | > | Any help would be much appreciated. Thankyou in advance!!!
> | > |
> | > | TC
> | > |
> | > | (Sorry about the long post!!)
> | > |
> | > |
> | >
> | >
> |
> |
>
>

Relevant Pages

  • Re: Downloader.Trojan
    ... I have tried this sequence several times over already and unfortunately ... Windows XP will just not let me delete the virus from the file 'ocWOC.dll'. ... > | on NAV and fortunately this is currently the only virus that has been ...
    (microsoft.public.security.virus)
  • Re: update the same?
    ... If you have an antivirus program, keep it's virus definitons up to date, ... presence of a virus. ... Which version of Windows are you using and which update keeps trying to ... > worried about virus, David ...
    (microsoft.public.windowsupdate)
  • Re: Hibernation with over 1GB of memory on WinXP SP2
    ... And, we both know, Dell is going to be useless in this matter. ... > David, I highly urge you to contact MS on this issue. ... > MVP Windows - Shell / User ... >>> Check the amount of FREE space on your hard drive. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Inverse Harmonic Series
    ... David W. Cantrell wrote: ... David Cantrell's explanations here: ... Having changed the indexing as you did, ... talking about quite the same sequence as in the SeqFan mailing list, ...
    (sci.math)
  • Re: How do I fix task scheduler?
    ... David, ... Peter in Toronto, Canada. ... > Windows XP Home SP1 ... I did but not sure whether to do tell it do a full installation ...
    (microsoft.public.windowsxp.customize)
Quantcast