Win32:trojano-131 (trj)

  • Thread starter Thread starter Iggy
  • Start date Start date
I

Iggy

A relative has the above trojan running Win2000. Uses Avast and has
deleted parts when asked. Now he has the following:
winnt\system32.a.exe is infected with win32:trojan-gen (UPX). File is
in windows folder. Are you sure you want to delete?

Should he delete and if not what can be done? If further information
is needed let me know Thanks.

Iggy
 
A relative has the above trojan running Win2000. Uses Avast and has
deleted parts when asked. Now he has the following:
winnt\system32.a.exe is infected with win32:trojan-gen (UPX). File is
in windows folder. Are you sure you want to delete?

Should he delete and if not what can be done? If further information
is needed let me know Thanks.
Click to expand...

Is it \system32.a.exe as you typed, or is it \system32\a.exe ??

If the latter, I believe Spybot will remove the Trojan.


Art
http://www.epix.net/~artnpeg
 
Is it \system32.a.exe as you typed, or is it \system32\a.exe ??

If the latter, I believe Spybot will remove the Trojan.
Click to expand...

He said it is \system.a.exe. He already ran Spybot and got nothing.

Iggy
 
Iggy said:
A relative has the above trojan running Win2000. Uses Avast and has
deleted parts when asked. Now he has the following:
winnt\system32.a.exe is infected with win32:trojan-gen (UPX). File is
in windows folder. Are you sure you want to delete?

Should he delete and if not what can be done? If further information
is needed let me know Thanks.

Iggy
Click to expand...

Iggy-
Had the same thing.Delete,run ad-aware,spybot,avast and
reboot.then to make sure it's gone I ran them all again in
safe mode.I have XP but 2000 has some type of safe mode.
worked for me.
-max

--
Programs that I use and recommend:

Spybot Search and Destroy 1.3
http://www.safer-networking.org/

Spyware Blaster
http://www.javacoolsoftware.com/spywareblaster.html

Spyware Guard
http://www.javacoolsoftware.com/spywareguard.html

Ad-Aware
http://www.lavasoftusa.com/

Sygate Personal Firewall
http://soho.sygate.com/products/spf_standard.htm

Avast! For Home
http://www.avast.com/i_idt_1016.html

Eraser 5.3
http://www.tolvanen.com/eraser/

CwShredder
http://www.majorgeeks.com/download4086.html

HijackThis
http://www.spychecker.com/program/hijackthis.html

This message is virus free as far I can tell
Change nomail.afraid.org to neo.rr.com so you can reply
(nomail.afraid.org has been set up specifically for
Use in Usenet. Feel free to use it yourself.)
 
madmax said:
Iggy-
Had the same thing.Delete,run ad-aware,spybot,avast and reboot.then
to make sure it's gone I ran them all again in safe mode.I have XP
but 2000 has some type of safe mode. worked for me. -max
Click to expand...

Max
Thanks for that. I'll let him know.

Iggy
 
Back
Top