Help with Trojan

Help with Trojan
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Anti-Virus Software    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Help with Trojan Mag 04-12-2008
Posted by Mag on April 12, 2008, 7:56 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I keep a PC for my kids to use which runs WinXP and Kaspersky Internet
Security. They were using Limewire and got a message from Kaspersky, after
downloading a file, detecting a Trojan called Downloader.WMA.GetCodec.a.
Kaspersky advised to delete it. When delete was clicked, Kaspersky gave the
message 'Cannot be deleted object is not found. Attempt of access to the
file will be blocked. File will not be changed or deleted'. I deleted the
offending file, emptied the recycle bin and ran a scan which did not find a
Trojan. Is it likely to still be on the PC? If so how can I check?



Posted by Kayman on April 13, 2008, 12:19 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Sat, 12 Apr 2008 23:56:14 GMT, Mag wrote:

> I keep a PC for my kids to use which runs WinXP and Kaspersky Internet
> Security. They were using Limewire and got a message from Kaspersky, after
> downloading a file, detecting a Trojan called Downloader.WMA.GetCodec.a.
> Kaspersky advised to delete it. When delete was clicked, Kaspersky gave the
> message 'Cannot be deleted object is not found. Attempt of access to the
> file will be blocked. File will not be changed or deleted'. I deleted the
> offending file, emptied the recycle bin and ran a scan which did not find a
> Trojan. Is it likely to still be on the PC? If so how can I check?

Kaspersky most probably has taken care of your problem.

To make sure, you could download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

Fora where you can get expert advice for HiJack This! (HJT) logs.

NOTE: Registration is required in any of the below before posting a log

http://www.theeldergeek.com/forum/index.php?s=2e9ea4e19d3289dd877ab75a8220bff6&showforum=29
http://www.thespykiller.co.uk/index.php?board=3.0
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://forums.tomcoyote.org/index.php?showforum=27
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://www.spywarewarrior.com/viewforum.php?f=5

Posted by Mag on April 13, 2008, 4:24 am
If you were  Registered and logged in, you could reply and use other advanced thread options
> Kaspersky most probably has taken care of your problem.
>
Thanks for the advice. I will follow it. What does Kaspersky mean by 'Cannot
be deleted object is not found'. It implies to me that the Trojan is still
present (which is what worries me).



Posted by Kayman on April 13, 2008, 6:43 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Sun, 13 Apr 2008 08:24:37 GMT, Mag wrote:

>> Kaspersky most probably has taken care of your problem.
>>
> Thanks for the advice. I will follow it. What does Kaspersky mean by 'Cannot
> be deleted object is not found'. It implies to me that the Trojan is still
> present (which is what worries me).

Well, I'm not sure why Kaspersky wouldn't be able to find/delete the object
but detecting it in the first place.
The helpful people at Kaspersky forum may be able to throw some light on
this.
http://forum.kaspersky.com/index.php?

In the meantime I'd update Kaspersky followed by a FULL computer scan in
'safe mode'; The scan result should give you a good idea as to the state of
your OS.
How do you boot to Safe Mode?
By pressing/tabbing F8 (or F5 on some keyboards) during re-boot.
Alternatively:
click onto Start==>Run, type "msconfig" (without quotation marks), click
OK. Then click onto BOOT.INI tab and 'check' /SAFEBOOT then OK and click
Restart. To go back to Normal Mode, you must access the System
Configuration utility again and click the General tab then click/check the
radio button 'Normal Startup'- load all device drivers and services'.
A description of the Safe Mode Boot options in Windows XP
http://support.microsoft.com/default.aspx?scid=315222

Good luck :)

Posted by Mag on April 13, 2008, 9:45 am
If you were  Registered and logged in, you could reply and use other advanced thread options
> In the meantime I'd update Kaspersky followed by a FULL computer scan in
> 'safe mode'; The scan result should give you a good idea as to the state
> of
> your OS.
I'll do it. Thanks for the advice. I'm learning all the time.



Similar ThreadsPosted
[NOD32] I get Java/ClassLoader.B trojan ..&.. Java/Exploit.Bytverify trojan June 13, 2005, 3:30 pm
Trojan Help August 9, 2005, 10:34 am
acl.exe...Trojan? August 16, 2005, 4:06 pm
Hit by a Trojan. November 6, 2005, 10:01 am
Trojan December 1, 2005, 6:30 pm
W32/Trojan.ATA December 29, 2005, 4:12 pm
Trojan April 18, 2006, 1:23 am
Trojan April 24, 2006, 2:44 pm
Trojan April 24, 2006, 2:45 pm
trojan May 8, 2006, 3:29 pm

The site map in XML format XML site map

Contact Us | Privacy Policy