Computing.Net > Forums > Security and Virus > Trojan program:Trojan.win 32 and backdoor.win

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Click here to start participating now! Also, check out the New User Guide.

Trojan program:Trojan.win 32 and backdoor.win

Reply to Message Icon

Name: Zerzeus
Date: October 27, 2009 at 08:54:59 Pacific
OS: Microsoft Windows XP Home Edition
CPU/Ram: 2.8 GHz / 1215 MB
Product: Acer / Aspire sa85
Subcategory: General
Comment:

My computer got infected again.This time it was from a download i downloaded a from yesterday afternoon.The file claimed to be clean but i noticed a symptom of the present of a computer virus (the red light flashing rapidly) and i scanned my computer with Kaspersky anti-virus with deeproot search option.(this was recommended by jdk who helped me overcome my last problem :D)

i found 3 virus

Trojan program Trojan.Win32.Delf.ojj at C:\Documents and settings\Zodax\local setting\temp\FZS.exe

another Trojan program Trojan.Win32.Delf.ojj at C:\Documents and settings\Zodax\local setting\temp\kentut.exe

the third one was Trojan program Backdoor.Win32.Poison.pg at C:\Documents and settings\Zodax\local setting\temp\PIS.exe.

I also did a scan using another program recommended by another guy to another guy with almost the same problem as me.the program was a-squared Anti-Malware and found the following

Virus.Win32.Poison!IK and Trojan-PWS.Agent!IK which i chose to remove but i suspect that it isn't completely removed as modern virus aren't going to let you easily remove them.And since one of the virus have "backdoor" in its name,i suspect this is a very serious virus as i heard of backdoor virus' bad reputation.

the security programs that im using are SuperAntispyware,Kaspersky Anti-virus,Malwarebytes' Anti-Malware

The computer i'm using now isn't very important to me as i'm going to get a new one soon but i am going to hand this one down to my little sister and i hope i can clear this viruses with your help but if i failed to or not completely,could you give me some suggestions to what to do like should my little sis get a new computer too or is it safe for her to continue using this one.

Thanks for your help in advance.And help me thank jdk if possible as i failed to thank him after i promised to due to exams.

Thanks again



Sponsored Link
Ads by Google

Response Number 1
Name: maksimog
Date: October 27, 2009 at 14:35:56 Pacific
Reply:

Try to scan with Malwarebytes' Anti-Malware
http://www.malwarebytes.org/mbam/pr...

or Scan with eset online Scanner
http://download.eset.com/special/eo...


0

Response Number 2
Name: Zerzeus
Date: October 28, 2009 at 07:24:32 Pacific
Reply:

thx for your advice.I scanned my computer on safe mode with Malwarebytes' Anti-Malware and this is the log

==============================================
Malwarebytes' Anti-Malware 1.28
Database version: 1267
Windows 5.1.2600 Service Pack 3

10/28/2009 6:51:31 AM
mbam-log-2009-10-28 (06-51-31).txt

Scan type: Full Scan (C:\|D:\|E:\|F:\|G:\|)
Objects scanned: 390182
Time elapsed: 1 hour(s), 7 minute(s), 25 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Installer\Products\568267acfc5644dab06f058006ddbae3 (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Installer\Features\9ee2330ae5f4470cac801baac83818c9 (Adware.Zango) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
============================================

even though no virus was found i still feel that there is a virus present.Is the a way for me to really make sure the virus was gone?

thanks for taking your time to help me i appreciates it :P


0

Response Number 3
Name: Zerzeus
Date: November 1, 2009 at 01:06:54 Pacific
Reply:

wad do i do after i scan?The spyware is still present in the registry


0

Response Number 4
Name: XpUser4Real
Date: November 1, 2009 at 09:15:56 Pacific
Reply:

Here is the link to combox tutorial from my bleeping computer.
http://www.bleepingcomputer.com/com...
ONLY download combofix from the link in the site that I gave you.
Follow the instructions and it should clean out your problems

Some HELP in posting on Computing.net plus free progs and instructions Cheers


0

Response Number 5
Name: Zerzeus
Date: November 2, 2009 at 06:55:36 Pacific
Reply:

thank you so much XpUser4Real you helped me removed the spyware that have been bugging me for way too long :D
now i can pass this computer to my little sis with peace in my mind :D.Thanks again

And thank you too maksimog

If a problem comes up again i'll ask again :)


0

Related Posts

See More



Response Number 6
Name: XpUser4Real
Date: November 2, 2009 at 07:05:44 Pacific
Reply:

Zerzeus, you are quite welcome and thanks for posting back!
It allows people with the same type of problem have at least
another solution that works.
Give threatfire a try, it's a really nice utility that works
alongside any anti-virus. It automatically updates 2 or more
times a day and keeps rootkits and other malware from
getting on your PC:
I had to shorten the url with tinyurl because it was too long for computing.net:
http://tinyurl.com/ykgkslq

This next link tells about threatfire:
http://antivirus.about.com/od/antiv...
Some HELP in posting on Computing.net plus free progs and instructions Cheers


0
Reply to Message Icon

Google Redirect to Centra... web search


Use following form to reply to current message:

Login or Register to Reply
LoginRegister


Sponsored links

Ads by Google


Results for: Trojan program:Trojan.win 32 and backdoor.win

Trojan win 32 www.computing.net/answers/security/trojan-win-32/24653.html

W32.Pinfi and Backdoor.Beasty www.computing.net/answers/security/w32pinfi-and-backdoorbeasty/4941.html

VIRUS?!!? www.computing.net/answers/security/virus/1207.html