Computing.Net > Forums > Security and Virus > Backdoor Trojan Nightmare

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Backdoor Trojan Nightmare

Reply to Message Icon

Name: Judy
Date: June 20, 2003 at 22:35:45 Pacific
OS: Windows XP
CPU/Ram: P4 512
Comment:

For 2 days now I've been troubleshooting why my high-speed internet connection is not working on my main computer, 2 other networked computers have internet conn but no file sharing or printing capabilities now. A new network card did nothing.

Norton anti-virus found:

windows\system32\installer_im.exe and
windows\system32\aupdate.exe

infected with the backdoor trojan virus. Now my guess is this is my problem? Isn't NAV supposed to take care of this for me. I did a "rapid restore" prior to running NAV and detecting the virus. That was the only way to restore internet conn and update NAV. lst run didn't find any virus. And connection only lasted 30 - 60 minutes.

I checked the register and those files aren't in HKEY_Localmachine...\run and my computer did not list HKEY...\runservices which is where NAV told me to find & delete those files.

Any advice would be greatly appreciated. Thanx!!



Sponsored Link
Ads by Google

Response Number 1
Name: wawadave
Date: June 20, 2003 at 23:14:24 Pacific
Reply:

try d/ling a trial verion of trojan hunter

free trojin scan
http://www.trojanscan.com/trojanscan/scanner.htm
panda scan
http://www.pandasoftware.es/activescan/
housecall
http://housecall.trendmicro.com/housecall/start_corp.asp
d/l mcafee,s stinger
http://vil.nai.com/vil/stinger/
test my sheilds grc
https://nanoprobe.grc.com/x/ne.dll?bh0bkyd2


0

Response Number 2
Name: Abnormal
Date: June 21, 2003 at 02:48:13 Pacific
Reply:

More things to try, get Spybot search and
Destroy or Ad-Aware.

Why?
http://www.doxdesk.com/parasite/ISTbar.html

Look into this, and run Rapidblaster killer.
http://www.wilderssecurity.net/specialinfo/rapidblaster.html

...and get SpywareBlaster.

Good luck


0

Response Number 3
Name: Hammermill
Date: June 21, 2003 at 10:42:59 Pacific
Reply:

Just mentioned this elsewhere on the site--AV programs do not always handle trojans as well as they do viruses. Like wawadave suggested--download a trail version of a trojan remover and also consider buying one if you have trojan problems "popping" up often.


0

Response Number 4
Name: wawadave
Date: June 21, 2003 at 11:14:27 Pacific
Reply:

Hi, thanks for the help. I tried trojanscan and housecall but they directly scan the computer you are on which in my case is not the infected computer. The infected computer has no internet connection yet all hardware (cable, network card, Linksys router, modem) all properly working.

Another wierd thing is connection is ok coming into my computer. Does this mean the hacker has hijacked my computer? These trojans sure are insidious. I'm so naive, I thought my Linksys router firewall and NAV protected my system. Then I find out about spyware, another totally detestable internet problem. In the short time I was able to get internet access, I downloaded Ad-Aware. There was a lot of junk that I quarantined.

The nanoprobe pandasoftware sites could not be displayed but I'll try again.

Judy


0

Response Number 5
Name: Judy
Date: June 21, 2003 at 14:17:33 Pacific
Reply:

I downloaded Trojan Remover 6.0.1, ran it and "NO active malicious files were found & no changes were made". Maybe NAV did delete those files and the backdoor trojan isn't my problem. I'm back to square one.

Totally confused. Thanks for all your advice.

Judy


0

Related Posts

See More



Response Number 6
Name: seawatch
Date: June 23, 2003 at 11:28:11 Pacific
Reply:

"I did a "rapid restore" prior to running NAV and detecting the virus. That was the only way to restore internet conn and update NAV..."

You have to turn off the "Restore' option and run your checks from the Safe Mode otherwise you're going to keep reinfecting your computer.

Scanners cannot delete the problem files from the Restore area.

Larry


0

Sponsored Link
Ads by Google
Reply to Message Icon

I'm confused Norton Antivirus 2002 - ...



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Backdoor Trojan Nightmare

backdoor.trojan www.computing.net/answers/security/backdoortrojan/265.html

backdoor trojan virus..help needed www.computing.net/answers/security/backdoor-trojan-virushelp-needed/4851.html

Backdoor.Trojan? Help! www.computing.net/answers/security/backdoortrojan-help-/12940.html