Desktop

Ask something
Discussion Locked

Trojan Help

0 helpful
4 replies

by glendapotter

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I recently did a scan on my computer and it came up that I had this trojan Trojan.Downloader.UB.BN, and suspicious of Trojan.Downloader.Gen. Does anyone know anything about these?? I have searched the internet and can't find anything on them and my antivirus does not pick up or acknowledge them.

4 replies

by carlos.nino

Can you give us some more details?

- How did you scan (what software did you use)?
- Where does it find the trojan?
- What antivirus do you use?
- OS?

by glendapotter

The scan that I used was BitDefender. The antivirus I normally use is AVG. I accidentally deleted the BitDefender before I wrote down where it said what program that the trojan was in.

by kcrabb

This detection covers multiple versions of a downloader primarily intended for downloading (and executing) remote porndialler executables.

When executed on the victim machine, a DNS request for the remote server is issued. Subsequently, the remote dialler is downloaded and saved locally as C:\DIALLER.EXE.

Be sure before deleteing it you turn off system restore in XP and ME.

I would also get a spy ware remover like AdAware or SpyBOT If there is this one there is more. If I remember this one highjacks Dial up connections and puts them to a dial up account some where else (Russia used to be the favorite) so when you open the phone bill SUPRISE!!!

by wlbowers

Turn off system restore if it is used in your os.

Download, update, and run the following.

Your Antivirus Software

Spybot: Cootie Remover
http://tinyurl.com/ziar

Ad-Aware: Cootie Remover
http://tinyurl.com/tek5

Stinger: Virus Specific Remover
http://vil.nai.com/vil/stinger/
This item will not update through the program. You have to download the new version.

CWshredder: Trojan and Toolbar Cootie Remover
http://tinyurl.com/2bzef
Or
http://tinyurl.com/2k642
Look for the file in English CWShredder.exe

There are programs that will provide you with information about what is running on startup or what is loaded currently.

StartUpList:
http://www.mac-net.com/576482.page

StartUpList is information only. Startup, Registery, and others. You can?t fix anything from within the program.

ProcInfo:
http://www.snapfiles.com/get/procinfo.html

ProcInfo provides you with a quick overview of all currently running processes and displays detailed information for a lot of them.

Hijack This:
http://mjc1.com/mirror/hjt/

Hijack This
This program is useful in that it shows what is currently loading on startup. You must know what is good and what is bad. Once you check it and fix it is gone. So be sure. Items you are not sure of do a Google search for them.

Winaudit
http://www.pxserver.com/WinAudit.htm

Winaudit does an extensive audit of you computer. Complete list of installed software, dll, and other good stuff.

Aida32
http://www.webattack.com/get/aida32.shtml

Everest (This replaced Aida32)
http://www.lavalys.com/products.php?lang=en

Everest used to be Aida32. Good system information.

Run Your Antivirus again

Download and install all OS updates.

I have had to boot into safe mode and run the removal programs.

Good Luck Lee

This discussion is closed to new replies.