Click here to get back home

got this trojan in a file called mscmsr.dll - don't know where it came from...

 HomeNewsGroups | Search | About
 microsoft.public.security.virus    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
got this trojan in a file called mscmsr.dll - don't know where it came from... David De 03-06-2008
Posted by David H. Lipman on March 8, 2008, 6:41 pm
Please log in for more thread options


|
| I meant the spykiller group, not this one - I should have been
| clearer.
|
| After posting there, I have done the combofix and updated the log file
| for HJT on there - just waiting for a response
| http://thespykiller.co.uk/index.php?topic=6134.0
| I am not sure if the combofix gets rid of the virus or not, or is it
| just a diagnostic tool?
|

You are in good hands with Derek. I sent him a Personal Message thanking him
for assisting
you.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Posted by David De on March 8, 2008, 7:04 pm
Please log in for more thread options
Very kind of you. Thanks for the followup.
> |
>
> You are in good hands with Derek. I sent him a Personal Message thanking him
for assisting
> you.
>
> --
> Davehttp://www.claymania.com/removal-trojan-adware.html
> Multi-AV -http://www.pctipp.ch/downloads/dl/35905.asp


Posted by David H. Lipman on March 8, 2008, 7:22 pm
Please log in for more thread options

| Very kind of you. Thanks for the followup.

No problem.

I also sent you an email. Would you be so kind as to check your GMail account.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Posted by hobo560@hotmail on March 10, 2008, 11:07 am
Please log in for more thread options
I use Norton 360. It cost but is well worth it. They will help you rid you
computer of a virus.

"David H. Lipman" wrote:

>
> | I am sorry I don't know the name of the trojan, just the file it seems
> | to have infected. My anti-vir (AVIRA) software has detected it a few
> | times and I delete it, only to find it reoccuring again and again.
> |
> | I am dealing with this issue of a trojan that my Anti-Vir software
> | continues to inform me about when I run any spyware programs like
> | Lavasoft or Spybot. I delete the file with the Anti-Vir, but it seems
> | to keep popping up. I think this is a new one because the google
> | search I did on it says 'March 04, 2008'...lucky me. So what do I do
> | about it? Right now I am running Anti-Vir full system check in Safe
> | mode - taking forever 2 hours already and only at 10% of a 80gig hard
> | drive. The files is located in the Windows/system32 folder.
> | Anybody else have this trojan? Any suggestions? I can't do a system
> | restore because I have been instead backing up my hard drive about
> | once a month (and it has been close to a month since the last backup,
> | so I would lose a month of work).
>
> OK, now that your here, we can discontine the other thread.
>
> Please check your Avira AntiVir logs. The name of the Trojan will be helpful.
>
> Also you noted that you can delete the file but it keeps coming back. It
obviously has a
> peer file loaded and keeping the infection going.
>
> However if you can delete the file, c:\Windows\system32\mscmsr.dll, please
submit a sample
> to Virus Total. You may have to disable AntiVir temporarily to submit the
file.
>
> http://www.virustotal.com/flash/index_en.html
> The submission will then be tested against many different AV vendor's scanners.
> That will give you an idea what it is and who recognizes it. In addition,
unless told
> otherwise, Virus Total will provide the sample to all participating vendors.
>
> You can also submit a suspect, one at a time, via the following email URL...
> mailto:scan@virustotal.com?subject=SCAN
>
> When you get the report, please post back the exact results.
>
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>
>
>

Posted by David H. Lipman on March 10, 2008, 4:05 pm
Please log in for more thread options

| I use Norton 360. It cost but is well worth it. They will help you rid you
| computer of a virus.
|

Not really.

Thanx anyway.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Similar ThreadsPosted
cannot delete trojan file July 6, 2005, 2:08 pm
Hackern.ini file = virus/trojan ? November 15, 2006, 5:31 pm
avg found a virus called downloader.tibs October 4, 2006, 5:06 pm
New Messenger Virus called:" img0012-www.photostorage " September 13, 2007, 10:04 pm
HOSTS File FAQ - Testing the HOSTS File November 5, 2005, 11:21 am
Zip File Virus *HELP* June 28, 2006, 1:05 pm
File disappeared May 21, 2007, 6:01 pm
unknown file... April 12, 2008, 7:15 pm
Puzzling log file contents November 23, 2005, 12:48 am
hosts file "missing" February 21, 2006, 3:48 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap