Trogan Horse Downloader.small.7.af HELP

Trogan Horse Downloader.small.7.af HELP

Ok I have the above on my PC (AVG picks it up), however it can't delete it!!
_
I've ran housecall and that isn't even picking it up.

Can anyone help??

Download this

then have a read here

gives u step-by-step instructions...

if thats no good just whack the following into google...

Downloader.small.7.af remove

shud get plenty of guides there

I've downloaded adware away but the instructions don't indicate what to do with the virus I have :spangled:

I've put 'Downloader.small.7.af remove' into google but I don't get anything that makes any sense!

Boot into safe mode and run your virus scanner.

Also - if you're using XP - turn off system restore for a few days or it'll keep coming back.

Cheers, 2 questions......
1. How do I boot into safe mode?
2. How do I turn off system restore?

My apologises for my lack of 'techy' knowledge!

Safe Mode : As soon as you boot up your PC, the BIOS screen will show - BEFORE the Windows XP loading screen shows, press F8. You may have to do this a few times till u get it right. Eventually you'll get a list of 7 or so boot up options, like "Safe mode, Safe mode with networking, boot normally, etc". Choose Safe mode.

System Restore : Right Click on My Computer (either on the desktop or in the start Menu) and select 'Properties' and from the box that appears, select the 'System Restore' tab and tick the box to turn it off.

Cheers fella, will give this a go tonight......The problem seems to be that AVG can see the virus but it can't delete it!

it will be running a process on your PC, so it wont be able to delete it while its running, starting up in safe mode should stop the process being started when u computer boots up allowing you to delete it

iv'e just had a pop up saying i've got some 'bloodhound exploit' virus, and AV can't shift it... fuck :evil:

Thanks that makes perfect sense (now)...

there's bound to be some manual removal destructions on McAfee, Messagelabs or Norton somewhere if the safe mode option don't work...

EDIT : u got this? http://www.microsoft.com/security/incident/Download_Ject.mspx

MS newest update...

i've got my windows update completely up to date.. and my av definitions... looked on the symantec knowledgebase and it pointed me at a fix for outlook express, which ive downloaded and installed but i'll be damned if i know if it's got rid. im doin another system scan as i speak, but i've found no 'removal tool'...

only 1 i found was this, but it seems to be directed at IIS servers. i think.

http://vil.nai.com/vil/content/v_101033.htm

as far as i can tell, given that my system was fully up to date before this happened i shouldnt have been vulnerable to this exploit... :spangled:

well, my scan is nearly done... so all being well...

Windows users :tut: :tut: :laugh:

ach... awa' with ya n ur linux

first time ive ever had an issue with my system of any severity in god knows how long, and given how much dodgy shit i download, thats an achievement.

gimpy linux user

Ok I ran safe mode and switched off sysyem restore...I ran housecall and it didn't pick up anything, however it wouldn't let me run AVG I got an error saying something like Core Driver failed...

I'm convinced the virus is still there, any suggestions??

what happens when u try run AVG in normal mode? does it still find the virus?

if both Housecall and AVG don't find owt - u should be clear! And make sure system restore is still off in normal windows mode.

File extensions...

Check the trend virus database for all know file extensions related to this virus/Trojan.

Scan your hard drives for these files and deal with them one at a time.

If they are still resident, boot in safe mode with System Restore off.

Run the virus scans, with updated definitions again.

Check the Registry; often, most virus codes write themselves into the Run and Run Services keys. Navigate and check these 2 keys.

Check the startup folder. See anything suspicious? Delete it.

:angel3: