Name: s7m7r Date: March 9, 2005 at 18:16:04 Pacific Subject: Trojan Horse Dropper.Small.10.AN OS: Windows ME CPU/Ram: 750mhz AMD/512mb
Comment:
AVG has found a virus on my PC named Trojan Horse Dropper.Small.10.AN. I then started back up in Safemode, ran a system check and put the virus in the Virus Vault. I then Deleted the file thinking it would get rid of this virus, but the virus keeps reappering everytime I start my PC up again. What is this virus and how can I get rid of it permently? thanks for the help
trojan hunter has a 30 day trial, as does trojan remover. both list removal of that. and a scan at: http://housecall.antivirus.com wouldn't hurt. since it uses activex.
www, thanks for the reply. How do I clean the trojan so it is gone Permanently? I thought that was what i was doing by puting the virus in the AVG Virus Vault and then deleting the file. Why can't AVG clena out the trojan if thats the program that found it? thanks again
some antivirus programs don't find all of the files, including those that are in the restore folder. that are part of the trojan. I had to use tds-3 to find all of the files in a dialer trojan, and then I had to use regedit to delete the entry from the registry. to completely remove it. I've also used trojan hunter and remover successfully in the removal of trojans.
search for files and folders and right click and delete these files. zpfujj.exe FARMMEXT.exe wupdt.exe C:\Program Files\Ebates_MoeMoneyMaker<---This entire folder
Post another log after you reboot back to normal mode.
Ok, Abnormal. I finally got a chance to go through the steps you mentioned above in HijackThis and deleteing the other programs/files. Here is the latest log after doing everything you said to:
Logfile of HijackThis v1.99.1 Scan saved at 9:53:00 PM, on 3/26/2005 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Also a few other questiones for you. The same results keep coming up in both Spybot and Adaware even after i fix them in safe mode. How do I get rid of these problems in both programs permenantly. Also in AVG I have the virus mention in this post in the Virus Vault. What am I suppose to do with this? The first time AVG found it I deleted it out of the Vault and the next time I ran AVG it was back. How do I get rid of this one permenatly also. Thanks for all the help, I really appreciate you taking the time to help me learn and get my computer cleaned out finally.
Abnormal, thanks alot. Will try doing another search for ebates also and will try the temp folder thing. Last time I deleted the Virus out of the vault and it came back again next time I ran AVG. Wouldn't deleting it from the vault remove it completely? Also how do I get rid of the problems that Spybot and Adaware find, permenatly? Everything I run those programs it finds the same problems in the results even though i fix them everytime they are found. They always come back and never seem to be fixed. I just want these spyware problems off my PC for good. thanks again
OK, this is how I did it with AVG. It took me weeks.
Here goes:
Scan with AVG and move all to vault.
then run regedit
search for these terms and delete all folders containing entries with ebates stuff (ebmm and Ebate and Ebates). I'm not sure why it doesn't catch them all with one, but you gotta do all 3.
then run msconfig uncheck any ebatesmoneymaker type entries
then delete the ebates directory.
Run AVG again
Restart
Its not coming up anymore, but we'll see how long that lasts. Its not slow as balls anymore, which is nice for a change.
Sorry if this doesn't do it, I tried many things during the process, so I might have done an extra step without even knowing it. Good luck, this one's a bitch.
Thanks for the replys. Abnormal, What is the dso exploit? Not sure what you mean, but everytime I run Spybot & Adaware, the same results such as Gain, Alexa, IE Plugin, coolwwwsearch, apear even though I "fixed" them the last time I ran the programs. They seem to show up everytime i run weither Spybot or Adware and I am trying to figure out how I can get rid of these problems permenatly so they don't show up in the results anymore. Also, I went to the %Temp% folder and there alot of stuff in there. Can I safely delete everything that is in this temp folder or is that gonna created problems? thanks
Argh! Help me kill the trojan horse! I have the dropper.small.10.an virus and I've tried trojan remover, trojan hunter, avg, spybot, ad-aware, ccleaner - and still no luck. I'm a bit wary of deleting things manually incase I delete something important...Can anyone offer any help?
Pippa , what worked for mine is I ran AVG in Safe mode and at the end of the scan I put the dropper.small.10.an virus in the Virus Vault. Then i went into the virus vault and cleaned (deleted) the vault. Rebooted and ran AVG again and I have not seen the virus yet (knock on wood). How this works for yout too.
Abnormal, thanks again for all your help, I will try out those methods. You have been a ton of help, thanks
The information on Computing.Net is the opinions of its users. Such
opinions may not be accurate and they are to be used at your own risk.
Computing.Net cannot verify the validity of the statements made on this site. Computing.Net and Computing.Net, LLC hereby disclaim all responsibility and liability for the content of Computing.Net and its accuracy.
PLEASE READ THE FULL DISCLAIMER AND LEGAL TERMS BY CLICKING HERE
