Trying it, but.....

chawman · Cadet Joined: Jan 14, 2004 Posts: 5 Location: USA

I recently was the proud recipiant of the PWSteal.Trojan /sarcasm off

My Norton Virus did a auto update of the definitions last night and discovered this little booger hiding in my C:/Windows/System32/Explorer.exe file (I have Windows XP Home). It refused it access, but also refuses to delete it as well.

When I ran Trojan Hunter with the newest update, it found nothing. Very confusing, to say the least. Any ideas? Thanks!

Tony

Magnus · Posted: Thu Jan 15, 2004 3:33 pm Post subject:

Hi,

Could you send your C:\Windows\System32\Explorer.exe file to ?

chawman · Cadet Joined: Jan 14, 2004 Posts: 5 Location: USA

Absolutely. I will do that this evening.

chawman · Cadet Joined: Jan 14, 2004 Posts: 5 Location: USA

I was fooling around and looking in various places this evening before I came to give ya'll an update. Come to find that it was running a process. I ended that, deleted the file and ran a complete Norton scan. No sign of it!! Woot! I think I'm in the clear! Thanks for the help. Hope I'll never need to bug you again! haha! Very Happy

trojanstinkz · Cadet Joined: Jun 27, 2004 Posts: 1 Location: USA

help i have the exact same problem, i have PWsteal trojan in system32 folder. I checked my Task manager and worked out which 1 was the fake explorer, and ended it and deleted it, but the other part called explorer.dll has a keylogger and i cnat get rid of it, ne help?


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 1054 pages served in previous 5 minutes. Page Rendered: 0.342 seconds.