CDROM-Guide forums

Go Back   CDROM-Guide forums > Main Forums > Open to All Computer Related Topics > Computer Networking & Security
FAQ Calendar Mark Forums Read
Open   CSec   Data   DevDrv   CoOp   Audio   CDRW   CDG   VCD   DVD   HD DVD   Mac   VGB   PS2   DC   Xbox  


 
 
Thread Tools Display Modes
  #1  
Old Dec 04, 2003, 08:38 PM
Glide Glide is offline
Junior Member
 
Join Date: Dec 2003
Location: Toronto, Canada
Posts: 17
Default Newbie needs help with Trojan


 
Hello Everyone,

Newbie question about a trojan. A buddy's Windows 2000 computer keeps registering a trojan (backdoor.IRC.Flood) with his Norton Antivirus 2003. NAV can't quantine or delete the file (in WINNT\system32 folder) because I am assuming that files the trojan is in are being used to run the system. I have tried running NAV in Win 2000 safe mode but still no luck.

Any suggestions would be appreciated.

--Glide
  #2  
Old Dec 05, 2003, 11:07 AM
vinniedub vinniedub is offline
Veteran
 
Join Date: Nov 2001
Location: Scotland
Posts: 854
Default

From the symantec site...

Run LiveUpdate to make sure that you have the most recent virus definitions.
Start Norton AntiVirus (NAV), and run a full system scan. Be sure that NAV is configured to scan all files.
Delete all files that are detected as Backdoor.IRC.Flood.
Use Windows Explorer to delete the \Window\ Uninstaller.exe file.
  #3  
Old Dec 05, 2003, 03:10 PM
Glide Glide is offline
Junior Member
 
Join Date: Dec 2003
Location: Toronto, Canada
Posts: 17
Default

Thanks for the help.

I had prviously done that but the trojan still remains. It's weird, you would expect that the trojan would be easily deleted but it can't. That's kinda why I ran the NAV in safe mode (Windows 2000) to try to cut down the number of programs running in the background but still no luck.

I also tried to stop the system restore function with NAV but no removal.

Weird eh?

Do you think a different program would help? I'm guessing probably not.

-- Glide
  #4  
Old Dec 07, 2003, 08:47 PM
vinniedub vinniedub is offline
Veteran
 
Join Date: Nov 2001
Location: Scotland
Posts: 854
Default

If the system restore is the same in 2K as it is in XP you need to right click 'my computer' then click on the 'properties' tab.
Otherwise if your Norton is kosher and up to date I'd get in touch with them mate.
  #5  
Old Dec 08, 2003, 06:28 AM
duffy90210 duffy90210 is offline
Veteran
 
Join Date: Jun 2000
Posts: 5,704
Default

Glide
Try download a copy of The Cleaner from www.moosoft.com
After you installed, update the definition first then run a scan, this should help.

HTH
  #6  
Old Dec 08, 2003, 06:15 PM
Glide Glide is offline
Junior Member
 
Join Date: Dec 2003
Location: Toronto, Canada
Posts: 17
Default

duffy90210 & vinniedub,

Thanks for the help. I appreciate it.

I installed and ran The Cleaner software (I like it a lot!). I ran it and it was clean, no trojans. I then ran a Norton Antivirus with updated definitions and it still found the trojan. Still couldn't quarantine or delete it. Does this make sense?

I'm getting the feeling that I may have to reinstall Win2000 in order to get rid of the darn thing.

Any thoughts would be appreciated.

Thanks,
Glide
 

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Trojan ,must read this goone Computer Networking & Security 0 Dec 14, 2003 07:19 AM
Qhost Trojan watch out its abouts backup2k1 Computer Networking & Security 0 Oct 08, 2003 01:47 AM
Is the Trojan gone meek_imp Computer Networking & Security 2 Aug 23, 2002 06:32 PM
help needed finding trojan peter_uk Computer Networking & Security 4 Aug 22, 2002 11:58 AM
trojan?? 420 Open to All Computer Related Topics 2 May 20, 2002 02:45 PM


All times are GMT -5. The time now is 03:55 AM.



Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Copyright 1996-2009 CDROM-Guide.com. All rights reserved