Trojan Horse Downloader - Free Antivirus Forum

Trojan Horse Downloader

BullGuard Antivirus Forum > Virus Removal > Removal Tools > Trojan Horse Downloader

Forum Quick Jump

[ << Previous Thread | Next Thread >> ]

Sawbob
New Member

Date Joined Oct 2004
Total Posts : 2

Posted 10-20-2004 2:59 (GMT +1)

On my computer i have a trojan horse downloader agent 3.BO as well as Java\ByteVerify and am using AVG free edition and it can't remove either of them, i am using windows xp and could use a program that will remove these specific viruses thanks.

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 13642

Posted 10-20-2004 11:10 (GMT +1)

Hey

Disable System Restore

http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

Try this scanner. Link nr 7
Activate all in settings, run it.
http://www.mwti.net/antivirus/free_utilities.asp

Reboot, enable system restore. Tell how things goes ;-)

Touch

Member of - Alliance of Security Analysis Professionals

Sawbob
New Member

Date Joined Oct 2004
Total Posts : 2

Posted 10-21-2004 1:05 (GMT +1)

Heres what the scan found:
File C:\WINDOWS\system32\capq.exe infected by "Trojan.Win32.Revop.e" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\capq.exe infected by "Trojan.Win32.Revop.e" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\mscif.exe infected by "Trojan.Win32.Small.i" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\file.exe infected by "Trojan.Win32.Revop.e" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\better.exe infected by "not-a-virus:AdvWare.BetterInternet" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\games.exe infected by "not-a-virus:AdvWare.Toolbar.Ucmore" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\capq.exe infected by "Trojan.Win32.Revop.e" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\msmc.exe infected by "Trojan.Win32.Small.i" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\mscif.exe infected by "Trojan.Win32.Small.i" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\msnimk.gif infected by "not-a-virus:AdvWare.Ipend" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM32\capq.exe infected by "Trojan.Win32.Revop.e" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM32\msmc.exe infected by "Trojan.Win32.Small.i" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM32\mscif.exe infected by "Trojan.Win32.Small.i" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM32\msnimk.gif infected by "not-a-virus:AdvWare.Ipend" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\file.exe infected by "Trojan.Win32.Revop.e" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\Downloaded Program Files\canada_ver3.ocx infected by "TrojanClicker.Win32.Adpower.c" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\Downloaded Program Files\WinCommX.dll infected by "not-a-virus:AdvWare.WinAD" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\better.exe infected by "not-a-virus:AdvWare.BetterInternet" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\games.exe infected by "not-a-virus:AdvWare.Toolbar.Ucmore" Virus. Action Taken: No Action Taken.
File C:\Program Files\Common Files\GMT\GatorStubSetup.exe infected by "not-a-virus:AdvWare.Gator" Virus. Action Taken: No Action Taken.
File C:\Program Files\Common Files\GMT\GUninstaller.exe infected by "not-a-virus:AdvWare.Gator" Virus. Action Taken: No Action Taken.
File C:\Program Files\Common Files\CMEII\CMESys.exe infected by "not-a-virus:AdvWare.Gator" Virus. Action Taken: No Action Taken.
File C:\Program Files\Common Files\CMEII\GMTProxy.dll infected by "not-a-virus:AdvWare.Gator" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\All Users\Application Data\Dead Corn Stop Axis\bias info.exe infected by "Trojan.Win32.Krepper.ab" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\All Users\Application Data\Dead Corn Stop Axis\USERMIX.exe infected by "Trojan.Win32.Krepper.ab" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\Computer User\Local Settings\Temp\a097fe04.exe infected by "TrojanDownloader.Win32.Swizzor.bx" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\Computer User\Application Data\blahone\eq soap bone.exe infected by "TrojanDownloader.Win32.Swizzor.bm" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\Computer User\Application Data\blahone\sixth bows software curb.exe infected by "TrojanDownloader.Win32.Swizzor.bx" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\Computer User\Application Data\more way rule\uptick.exe infected by "TrojanDownloader.Win32.Swizzor.bo" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\mscif.exe infected by "Trojan.Win32.Small.i" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\Rem17.exe infected by "TrojanDownloader.Win32.Swizzor.bi" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\Local Settings\Temp\winpkt\Packet.dll tagged as not-a-virus:Tool.WinCap. No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\winpkt\PACKET.VXD tagged as not-a-virus:Tool.WinCap. No Action Taken.
File C:\Documents and Settings\Local Settings\Temp\sta4.exe infected by "not-a-virus:AdvWare.Lop" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\temp.fr0B67 infected by "not-a-virus:AdvWare.ToolBar.TPSystem.a" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\a084e40b.exe infected by "TrojanDownloader.Win32.Swizzor.bn" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\sta1B.exe infected by "not-a-virus:AdvWare.Lop" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\Temporary Internet Files\Content.IE5\0HU7S9EV\mtrslib3.js infected by "TrojanDownloader.JS.Gen" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temporary Internet Files\Content.IE5\4HEFG5UN\mtrslib3.js infected by "TrojanDownloader.JS.Gen" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temporary Internet Files\Content.IE5\C9W5M3K1\canada_ver3.CAB infected by "TrojanClicker.Win32.Adpower.c" Virus. Action Taken: No Action Taken.
File C:\Documents and SettingsLocal Settings\Temporary Internet Files\Content.IE5\4HWV4ZS7\file.exe infected by "Trojan.Win32.Revop.e" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temporary Internet Files\Content.IE5\EF2BITQ3\uinfo4.gif infected by "not-a-virus:AdvWare.Ipend" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temporary Internet Files\Content.IE5\0XS5URW9\bridge-c7.cab infected by "not-a-virus:AdvWare.WinAD" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temporary Internet Files\Content.IE5\0XS5URW9\games.exe infected by "not-a-virus:AdvWare.Toolbar.Ucmore" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temporary Internet Files\Content.IE5\0NR3MWXT\better.exe infected by "not-a-virus:AdvWare.BetterInternet" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temporary Internet Files\Content.IE5\0NR3MWXT\msmc.exe infected by "Trojan.Win32.Small.i" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Application Data\blahone\sixth bows software curb.exe infected by "TrojanDownloader.Win32.Swizzor.bx" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Application Data\blahone\eq soap bone.exe infected by "TrojanDownloader.Win32.Swizzor.bm" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Application Data\more way rule\uptick.exe infected by "TrojanDownloader.Win32.Swizzor.bo" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\2e3de7.exe infected by "TrojanDownloader.Win32.Swizzor.bn" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\710c45.exe infected by "TrojanDownloader.Win32.Swizzor.bn" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\644bbad9.exe infected by "TrojanDownloader.Win32.Swizzor.bn" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\sta22.exe infected by "TrojanDownloader.Win32.Swizzor.bi" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\644f8816.exe infected by "TrojanDownloader.Win32.Swizzor.bn" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\sta27.exe infected by "TrojanDownloader.Win32.Swizzor.bi" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\a09f92da.exe infected by "TrojanDownloader.Win32.Swizzor.bn" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\sta1C.exe infected by "not-a-virus:AdvWare.Lop" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\remove.exe infected by "TrojanDownloader.Win32.Keenval.f" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\644ea5b9.exe infected by "TrojanDownloader.Win32.Swizzor.bn" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temporary Internet Files\Content.IE5\0HE9KVAV\navigation.chm infected by "TrojanDownloader.VBS.Psyme.ak" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\r\Local Settings\Temporary Internet Files\Content.IE5\0HE9KVAV\WinSync.exe infected by "not-a-virus:AdvWare.WinAD" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temporary Internet Files\Content.IE5\3B1C4U7S\navigation.exe infected by "TrojanDropper.Win32.VB.cd" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\r\Local Settings\Temporary Internet Files\Content.IE5\ILG7Q525\CAIVOXUF.HTM infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\r\Local Settings\Temporary Internet Files\Content.IE5\8T4FWNSB\arc.zip infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temporary Internet Files\Content.IE5\6DTYRUP4\popup3.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temporary Internet Files\Content.IE5\2JIZI163\mmviewer_101.cab infected by "TrojanDownloader.Win32.Agent.cu" Virus. Action Taken: No Action Taken.

File C:\Documents and Settings\\Application Data\blahone\sixth bows software curb.exe infected by "TrojanDownloader.Win32.Swizzor.bx" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temp\Temporary Internet Files\Content.IE5\KA2345O7\mtrslib3.js infected by "TrojanDownloader.JS.Gen" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Local Settings\Temporary Internet Files\Content.IE5\STAZ096Z\mtrslib3.js infected by "TrojanDownloader.JS.Gen" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Application Data\blahone\sixth bows software curb.exe infected by "TrojanDownloader.Win32.Swizzor.bx" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Application Data\blahone\eq soap bone.exe infected by "TrojanDownloader.Win32.Swizzor.bm" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\\Application Data\more way rule\uptick.exe infected by "TrojanDownloader.Win32.Swizzor.bo" Virus. Action Taken: No Action Taken.
File C:\web.exe infected by "Trojan.Win32.Revop.e" Virus. Action Taken: No Action Taken.

I guess i sould do another spyware check now

Touch
Forum Moderator

Date Joined Jun 2004
Total Posts : 13642

Posted 10-22-2004 6:02 (GMT +1)

Did you use link nr.7 on Microworld?

Touch

Member of - Alliance of Security Analysis Professionals

Forum Information

Currently it is Saturday, November 22, 2008 12:54 PM (GMT +1)
There are a total of 64.045 posts in 15.836 threads.
In the last 3 days there were 26 new threads and 154 reply posts. View Active Threads