Download.Trojan Can't delete files

Download.Trojan Can't delete files

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Download.Trojan Can't delete files TexasJ 01-23-2006
Posted by =?Utf-8?B?VGV4YXNK?= on January 23, 2006, 9:32 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I have the Download.Trojan on my computer and am unable to delete the files
that are infected and detected by Noton scans. The six files that are
infected have .dll extensions and are all in the Windows/System32 folder.
Norton can't delete the files in safe mode so I follow their directions to
restart and manually delete them, but I can't find the files to delete them.
The files do not appear in the directory, and searches fail to find them.
I've tried revealing hidden files but no luck with that either. I've
exhausted all the help provided by Semantec with regard to removing this
trojan. Quite frustrating. Any help would be appreciated.

Posted by =?Utf-8?B?VGh1bmRlcmJpcmQ=?= on January 23, 2006, 9:51 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Unforntunately,

Download.Trojan is kind of a generic virus name from Symantec. So if you
could provide the names of the files it detects as a virus it would be
helpfull. There are a couple of things you can do to help delete these files:

More than likely, these files are being run by a service or are being
started by the windows explorer process. You can try and do a couple of
things. The first is try using a "startup" script to delete the files. I
have ues startup scripts before to delete files that could not be deleted
otherwise. You can also try a tool called "Killbox.exe" You can use killbox
to delete files you otherwise could not delete.

If you know how to read through the logs, Hijackthis is an excellent tool to
see what registry entries are being effected by virus' / spyware

"TexasJ" wrote:

> I have the Download.Trojan on my computer and am unable to delete the files
> that are infected and detected by Noton scans. The six files that are
> infected have .dll extensions and are all in the Windows/System32 folder.
> Norton can't delete the files in safe mode so I follow their directions to
> restart and manually delete them, but I can't find the files to delete them.
> The files do not appear in the directory, and searches fail to find them.
> I've tried revealing hidden files but no luck with that either. I've
> exhausted all the help provided by Semantec with regard to removing this
> trojan. Quite frustrating. Any help would be appreciated.

Posted by Malke on January 23, 2006, 9:58 am
If you were  Registered and logged in, you could reply and use other advanced thread options
TexasJ wrote:

> I have the Download.Trojan on my computer and am unable to delete the
> files
> that are infected and detected by Noton scans. The six files that are
> infected have .dll extensions and are all in the Windows/System32
> folder. Norton can't delete the files in safe mode so I follow their
> directions to restart and manually delete them, but I can't find the
> files to delete them. The files do not appear in the directory, and
> searches fail to find them.
> I've tried revealing hidden files but no luck with that either. I've
> exhausted all the help provided by Semantec with regard to removing
> this
> trojan. Quite frustrating. Any help would be appreciated.

Start by scanning with either Sysclean or Dave Lipman's Multi-AV. Full
details and instructions here:

http://www.elephantboycomputers.com/page2.html#TrendMicros_Sysclean
http://www.ik-cs.com/multi-av.htm - how to use Dave Lipman's Multi-AV
http://www.ik-cs.com/programs/virtools/Multi_AV.exe - Multi-AV download

Then make sure your NAV is a current version (not earlier than 2004),
your subscription is active, and the virus definitions are updated. Do
a thorough scan with NAV in Safe Mode.

After you've done that, continue your scans for malware per:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Posted by =?Utf-8?B?amFjaw==?= on January 24, 2006, 4:30 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
first get rid of norton symantec, try downloading free avg virus detection,
awesome, run in safe mode. went to restore. avg will detect and destroy all
viruses, had same problen last year. norton is junk, to hard to work with.
haven't had 1 virus problem in over a year..
--
jack


"TexasJ" wrote:

> I have the Download.Trojan on my computer and am unable to delete the files
> that are infected and detected by Noton scans. The six files that are
> infected have .dll extensions and are all in the Windows/System32 folder.
> Norton can't delete the files in safe mode so I follow their directions to
> restart and manually delete them, but I can't find the files to delete them.
> The files do not appear in the directory, and searches fail to find them.
> I've tried revealing hidden files but no luck with that either. I've
> exhausted all the help provided by Semantec with regard to removing this
> trojan. Quite frustrating. Any help would be appreciated.

Posted by =?Utf-8?B?VGV4YXNK?= on January 25, 2006, 1:26 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Thanks Thunderbird - Killbox worked like a charm! You're my hero for the day.

"Thunderbird" wrote:

> Unforntunately,
>
> Download.Trojan is kind of a generic virus name from Symantec. So if you
> could provide the names of the files it detects as a virus it would be
> helpfull. There are a couple of things you can do to help delete these files:
>
> More than likely, these files are being run by a service or are being
> started by the windows explorer process. You can try and do a couple of
> things. The first is try using a "startup" script to delete the files. I
> have ues startup scripts before to delete files that could not be deleted
> otherwise. You can also try a tool called "Killbox.exe" You can use killbox
> to delete files you otherwise could not delete.
>
> If you know how to read through the logs, Hijackthis is an excellent tool to
> see what registry entries are being effected by virus' / spyware
>
> "TexasJ" wrote:
>
> > I have the Download.Trojan on my computer and am unable to delete the files
> > that are infected and detected by Noton scans. The six files that are
> > infected have .dll extensions and are all in the Windows/System32 folder.
> > Norton can't delete the files in safe mode so I follow their directions to
> > restart and manually delete them, but I can't find the files to delete them.

> > The files do not appear in the directory, and searches fail to find them.
> > I've tried revealing hidden files but no luck with that either. I've
> > exhausted all the help provided by Semantec with regard to removing this
> > trojan. Quite frustrating. Any help would be appreciated.

Similar ThreadsPosted
Download.Trojan (aka Desktop HiJack) April 25, 2006, 11:13 pm
Unable to download and save files to a PC February 1, 2007, 11:17 am
Safe to delete .dmp files? December 12, 2005, 4:26 pm
deny delete folders/files from a shared folder on the network September 19, 2006, 6:56 am
Users cannot modifie files with disable option delete subfolders f December 12, 2007, 11:45 am
When I press delete, I mean DELETE!! January 9, 2006, 12:36 pm
Download Blocking July 11, 2005, 7:45 am
IIS 6.0 cannot download a Verisign CRL !! September 2, 2005, 4:50 am
Cannot run download from the internet June 25, 2006, 7:05 am
download vs. boxed June 18, 2007, 12:36 pm

The site map in XML format XML site map

Contact Us | Privacy Policy