New User? Need help? Click here to register for free! Registering removes the advertisements.

Computer Cops
image image image image image image image image
Donations
If you found this site helpful, please donate to help keep it online
Don't want to use PayPal? Try our physical address
image
Prime Choice
· Head Lines
· Advisories (All)
· Dnld of the Week!
· CCSP News Ltrs
· Find a Cure!

· Ian T's (AR 24)
· Marcia's (CO8)
· Bill G's (CO12)
· Paul's (AR 5)
· Robin's (AR 2)

· Ian T's Archive
· Marcia's Archive
· Bill G's Archive
· Paul's Archive
· Robin's Archive
image
Security Central
· Home
· Wireless
· Bookmarks
· CLSID
· Columbia
· Community
· Downloads
· Encyclopedia
· Feedback (send)
· Forums
· Gallery
· Giveaways
· HijackThis
· Journal
· Members List
· My Downloads
· PremChat
· Premium
· Private Messages
· Proxomitron
· Quizz
· RegChat
· Reviews
· Google Search
· Sections
· Software
· Statistics
· Stories Archive
· Submit News
· Surveys
· Top
· Topics
· Web Links
· Your Account
image
CCSP Toolkit
· Email Virus Scan
· UDP Port Scanner
· TCP Port Scanner
· Trojan TCP Scan
· Reveal Your IP
· Algorithms
· Whois
· nmap port scanner
· IPs Banned [?]
image
Survey
How much can you give to keep Computer Cops online?

$10 up to $25 per year?
$25 up to $50 per year?
$10 up to $25 per month?
$25 up to $50 per month?
More than $50 per year?
More than $50 per month?
One time only?
Other (please comment)



Results
Polls

Votes: 1180
Comments: 21
image
Translate
English German French
Italian Portuguese Spanish
Chinese Greek Russian
image
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Login to check your private messagesLogin to check your private messages   LoginLogin   Your Favorite ForumsFavForums 

Please Help

 
Post new topic   Reply to topic       All -> FavForums -> TrojanHunter
View previous topic :: View next topic  
Author Message
Velma

Guest






PostPosted: Wed Jan 28, 2004 3:12 pm    Post subject: Please Help
Reply with quote

Hi, I'm new here but would really appreciate any help.

I have found out through AVG virus checker that I have two infected files that have not been removed called "trojan horse Dopper.Small.DE". It seems to be in "C:\System Volume Information\_restore...."

If you can, please help me to get rid of this. Thanks!
Back to top
claire

Site Moderator
Site Moderator
Premium Member
Premium Member


Joined: Apr 21, 2002
Posts: 4869
Location: Belgium

PostPosted: Wed Jan 28, 2004 3:30 pm    Post subject:
Reply with quote

Hi Velma,

Welcome at Computercops.Did you run a full scan with Trojan Hunter?
What was the result?

If you still have a problem after the full scan you can send the suspected files using the link here under with a link to this thread.you'll get help asap.

mailto:[email protected]

_________________
Carpe Diem
Back to top
View users profile Send private message
Velma

Guest






PostPosted: Wed Jan 28, 2004 4:53 pm    Post subject:
Reply with quote

Hi!

Thank you very much for your help. I ran a full scan with trojan hunter and it said there are three possible trojan files found in the systems files and in temporary internet files. They are a suspicious PECompact-packed file in windows, a suspicious UPX-packed file in windows system and a possible trojan downloader.

I tried to send the files to the e-mail adress but I got an error message saying it could not send viruses, it said something about "mail looks like the Swen virus, to me".

I have deleted the temporary internet file. Please advise me on what to do next.
Back to top
Velma

Guest






PostPosted: Wed Jan 28, 2004 5:57 pm    Post subject: Trojans
Reply with quote

I downloaded a fix for the Swen virus from Symantec, and ran it, and it could not find any virus on my computer. However I still get the same error message when I try to send the email.
Help!
Back to top
Acheton

Forums Admin
Forums Admin
Premium Member
Premium Member


Joined: Sep 04, 2003
Posts: 2783
Location: Uk

PostPosted: Thu Jan 29, 2004 3:38 am    Post subject:
Reply with quote

The location of the trojan that you mentioned, is actually in a system restore point. A restore point allows you to rollback your system to a previous point in time. You are only at risk if you restore to that restore point. If you want to remove the trojan, you should remove the restore point. Please post back and we can give you further instructions.

thanks,

ach Smile
Back to top
View users profile Send private message
Velma

Guest






PostPosted: Thu Jan 29, 2004 2:58 pm    Post subject:
Reply with quote

I have no idea what I'm doing, detailed advice please?

When I downloaded the patch for the Swen virus it had me disable the system restore so I no longer get the warning about the virus but the trojan hunter still shows the same files.
Back to top
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> TrojanHunter All times are GMT - 5 Hours
Page 1 of 1

 
 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB 2.0.8a © 2001 phpBB Group

Version 2.0.6 of PHP-Nuke Port by Tom Nitzschner © 2002 www.toms-home.com
Version 2.2 by Paul Laudanski © 2003-2004 Computer Cops