Page 1 of 1

Downloader.Trojan virus

PostPosted: Sun Oct 08, 2006 8:05 am
by smilinjack
Downloader.Trojan virus

--------------------------------------------------------------------------------

Greetings,
Have had this for a few days now >>>The compressed file epl.exe within C:documents and Settings\Temp\Temporary Internet Files\Content.IE5\09A7WHY3\epl84bd [1].cab is infected with the Downloader.Trojan virus.
Norton reads that it has quarantined it but " Can Not Delete: ".
Any answers or Suggestions please?
As always, many thanks in advance!

Best regards,
Jack
:mrgreen:

PostPosted: Sun Oct 08, 2006 11:45 am
by Gecko
Please download
Extract Killbox but do not run it yet.

Reboot in to Safe mode:
Restart Windows after you see the BIOS screen and before Windows starts to load.
Start tapping the F8 key. The Windows Advanced Options Menu appears.
Use the Arrow key to ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' is enabled. Also make sure that Display the contents of System Folders' is checked. Remember to reset these when done.

Run KillBox and paste the below into the text box:
C:documents and Settings\Temp\Temporary Internet Files\Content.IE5\09A7WHY3\epl84bd [1].cab

Now put a check next to 'Delete on reboot' click on the red X, click yes to delete file on reboot
Click no to reboot now.

Now, empty all your TEMP Folders, Temporary Internet Files Folder and then empty your Recycle Bin, reboot.

After the reboot please download , unzip it to it's own folder.
Start HijackThis and select 'Do a system scan and save a logfile'
Now post the contents of the logfile back into this thread