Re: TrojanDownloader:Win32/Renos.DU



Mhaxx wrote:

On my Vista, Windows Defender alerted about a file download from P2P:

TrojanDownloader:Win32/Renos.DU

I removed manually, but Windows Defender goes on to ask to me to remove
it. Why?

Possibly because your manual removal wasn't thorough enough and the system
is still infected.

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do
all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://tinyurl.com/yoeru3 - download link and more instructions

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html
Or here: Malwarebytes malware removal guides - http://tinyurl.com/5xrpft

When all else fails, get guided help. Choose one of the specialty forums
listed at the first link. Register and read its posting FAQ. PLEASE DO NOT
POST LOGS IN THE MS NEWSGROUPS.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ

.



Relevant Pages

  • Re: =?ISO-8859-1?Q?=8020?= Euro reward if anybody can fix this.
    ... Include scanning with David Lipman's Multi_AV and follow instructions to do ... Please see the special Notes regarding using ... http://tinyurl.com/yoeru3 - download link and more instructions ...
    (microsoft.public.windows.vista.general)
  • =?iso-8859-1?Q?Re:_=3F20_Euro_reward_if_anybody_can_fix_this.?=
    ... Euro!= Pound Sterling. ... Include scanning with David Lipman's Multi_AV and follow instructions to do ... Please see the special Notes regarding using ... http://tinyurl.com/yoeru3 - download link and more instructions ...
    (microsoft.public.windows.vista.general)
  • Re: Worm?
    ... but with the "rogue" program (called that because it ... Include scanning with David Lipman's Multi_AV and follow instructions to do ... Please see the special Notes regarding using ... http://tinyurl.com/yoeru3 - download link and more instructions ...
    (microsoft.public.security.virus)
  • Re: Registry Problems
    ... Include scanning with David Lipman's Multi_AV and follow instructions to do ... Please see the special Notes regarding using ... http://tinyurl.com/yoeru3 - download link and more instructions ... Register and read its posting FAQ. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Explorer shutting down
    ... type 'regedit' and hit to open the registry editor. ... Include scanning with David Lipman's Multi_AV and follow instructions to do ... http://tinyurl.com/yoeru3 - download link and more instructions ... Register and read its posting FAQ. ...
    (microsoft.public.windows.vista.performance_maintenance)