Re: Trojan.Dropper: tempms.exe

Thanks for your help. I have run the scan in safe mode with Symantec AV.
Nothing found.
I then reboot. Install and scan with SpyBot. There are several registry
entries found and destroyed. But the winxx.exe still got replicated like
crazy in my "\Documents and Settings\,user name>\local settings\temp folder.
I then installed Node32. I scanned the hard disk with Nod32. No threat was
found.

Now I keep having a dialog popping up from Nod32.

http://www.ucdq.com/k.exe
Probably unkonown NewHeur_PE virus

I chose to terminate it. But the dialog keeps coming up. I keeps killing it.

Have you heard of this virus?

I checked Google for www.ucdq.com. All the articles are in Chinese. It looks
like a Asian virus.



"Panda_man" <Pandaman@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B186D110-52F9-4CEE-87DE-8A4FB9BC4DE3@xxxxxxxxxxxxxxxx
"chuck" wrote:

My Symantec Antivirus always warns me of a Trojan.Dropper in
c:\Windows\System32\tempms.exe. But I could not find that file in that
folder.

Does anyone know what went wrong? Is it related to the replicating
winxx.exe
files in my temp folder as I post in a different post?




Hello .

Boot your computer in Safe Mode . Disable System Restore and perform full
scan with Symantec AV .

After you reboot , perform the Malware removal instructions here
http://pandaman.my.contact.bg

Let us know what happened :-)


--
Panda_man
Silver level Contributor





.

Relevant Pages

  • Re: cant kill iexplore even in safe mode
    ... After getting sp2 installed, winupdate said it had more updates to install, ... all the computer does is reboot continuously, even in safe mode. ... FireWall to allow it to download the needed AV vendor related files. ... Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC. ...
    (microsoft.public.windowsupdate)
  • Re: New XP system hangs after OSloader screen
    ... boot normally, which is the only way I could apply this bios update (can't ... install it in safe mode). ... After installing the last driver, you must reboot, so I restared the ... I have rebooted in safe mode and done system restore points back to before I ...
    (microsoft.public.windowsxp.setup_deployment)
  • Safe Mode not working & No Repair Installation option
    ... Safe mode hangs when trying to load drivers (last one displayed is ... to do a Repair Install as described on the microsoft site and other forums. ... All reboot choices do not ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Problem on booting up Windows 2000 Professional - ***Stop message
    ... Try rebooting in Safe Mode. ... change the option to not Restart on ... If you can reboot and do the above, then the problem is not with Windows ... install and ran this time? ...
    (microsoft.public.win2000.general)
  • Re: NPF 6 and Win XP
    ... >> you the blue screen error message. ... >> Reboot your machine into normal mode and wait for the blue screen to pop ... >> be fixed anytime soon unless you provide memory crash dumps to Symantec. ... unless I go into safe mode. ...
    (comp.security.firewalls)