Help with Trojan

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
I keep a PC for my kids to use which runs WinXP and Kaspersky Internet
Security. They were using Limewire and  got a message from Kaspersky, after
downloading a file, detecting a Trojan called Downloader.WMA.GetCodec.a.
Kaspersky advised to delete it. When delete was clicked, Kaspersky gave the
message 'Cannot be deleted object is not found. Attempt of access to the
file will be blocked. File will not be changed or deleted'. I deleted the
offending file, emptied the recycle bin and ran a scan which did not find a
Trojan. Is it likely to still be on the PC? If so how can I check?



Re: Help with Trojan


Quoted text here. Click to load it
I also ran AdAdware which did not detect it.



Re: Help with Trojan

On Sat, 12 Apr 2008 23:56:14 GMT, Mag wrote:

Quoted text here. Click to load it

Kaspersky most probably has taken care of your problem.

To make sure, you could download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

Fora where you can get expert advice for HiJack This! (HJT) logs.

NOTE: Registration is required in any of the below before posting a log

http://www.theeldergeek.com/forum/index.php?s=2e9ea4e19d3289dd877ab75a8220bff6&showforum=29
http://www.thespykiller.co.uk/index.php?board=3.0
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://forums.tomcoyote.org/index.php?showforum=27
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://www.spywarewarrior.com/viewforum.php?f=5

Re: Help with Trojan

Quoted text here. Click to load it
Thanks for the advice. I will follow it. What does Kaspersky mean by 'Cannot
be deleted object is not found'. It implies to me that the Trojan is still
present (which is what worries me).



Re: Help with Trojan

On Sun, 13 Apr 2008 08:24:37 GMT, Mag wrote:

Quoted text here. Click to load it

Well, I'm not sure why Kaspersky wouldn't be able to find/delete the object
but detecting it in the first place.
The helpful people at Kaspersky forum may be able to throw some light on
this.
http://forum.kaspersky.com/index.php ?

In the meantime I'd update Kaspersky followed by a FULL computer scan in
'safe mode'; The scan result should give you a good idea as to the state of
your OS.
How do you boot to Safe Mode?
By pressing/tabbing F8 (or F5 on some keyboards) during re-boot.
Alternatively:
click onto Start==>Run, type "msconfig" (without quotation marks), click
OK. Then click onto BOOT.INI tab and 'check' /SAFEBOOT then OK and click
Restart. To go back to Normal Mode, you must access the System
Configuration utility again and click the General tab then click/check the
radio button 'Normal Startup'- load all device drivers and services'.
A description of the Safe Mode Boot options in Windows XP
http://support.microsoft.com/default.aspx?scid=315222

Good luck :)

Re: Help with Trojan

Quoted text here. Click to load it
I'll do it. Thanks for the advice. I'm learning all the time.



Site Timeline