OT: Trojan Horse

[deerslayer]

What's the best way to get rid of a trojan horse virus? NAV2002 find's it, but cannot clean the file. I've tried a couple trojan horse removers but they do not work either. I need to get this cruncher going again!

 

[Freewolf]

There's always the old format c:\ command

 

[Confused]

Take a look on Symantec's web site for the specific hot-fix/remover for that trojan.


Confused

 

[OhioDude]

Which horsie is it?

 

[deerslayer]

Originally posted by: OhioDude
Which horsie is it?

ummm....I dunno

it pops up about 20 times through NAV and they all are named differently. One said "backdoor" something

 

[titanmiller]

go to www.sarc.com and type a descriptive word of the virus into their search, and see what they have on it.

 

[minendo]

Sounds like it could be a variant of klez.

 

[deerslayer]

Originally posted by: minendo
Sounds like it could be a variant of klez.

backdoor.Sdbot

What is klez?

 

[minendo]

Originally posted by: LyNx01

backdoor.Sdbot

Follow these steps

 

[deerslayer]

I followed the steps but it would only let me quarantine the files....what should I do now?

 

[bot2600]

I second the recommendation format c:

never trust a system once it has been compromised.

 

[deerslayer]

Well...it's my sister's computer, and her kids are always downloading a bunch of crap. It appears to be okay now. I'm sure i'll hear about it if it isn't.

 

[mechBgon]

Sounds like it's time for Win2000Pro or WinXP Pro, with some restricted-user accounts and Unsigned Driver / Unsigned Non-Driver Installation set to the unfriendly settings

 

[Spacehead]

Did you try The Cleaner? I've always heard it was pretty good. AV products aren't always helpful with trojans.

 

[Kk4JC]

It will only clean if there is something to clean (if the virus makes a new file, there is nothing left after a cleaning).
If it is quarrentined it is safe.

Kk