Virus of Troy

[Megabyte]

Alright...what the hell is a "Trojan Horse Downloader.Small.5.N" virus and what does it do?
AVG detected it, but the file can't actually be removed so I've just quarantined it (I'm guessing it's a system file then).
So yeah, has anyone heard of this before? :confused:

[thingy]

Actually, it probably can't be cleaned which means the virus code cannot be detached from the non-virus code. When this is the case, it's usually because the entire file is a virus, it's not a normal file that has simply been infected.

AVG caught it, quarantined it, do not worry. If it couldn't quarantine it then get concerned & start looking up details. I'd suggest grabbing the name & searching AVG's website if you really want to know more.

[Megabyte]

Alright, thanks a lot. :)
Yesterday when AVG ran a test it found it, but claimed it couldn't do anything to it and left it there, but it quarantined it today so I guess it's not a problem. I might try and look the thing up anyway.

[Edit:] Thanks to Thingy's advice I found this: (Might be handy for other people who got caught too)

What is Trojan Horse?

A Trojan Horse is a malicious application, which can not spread itself. Original Trojan Horses were programs which acted as a useful utility. Although, in fact, their start used to cause damage to disc content (or part of it).


At the present time the most spreading Trojan Horses are BackDoor Trojans. They enable remote access to infected computers and PSW (Password Stealers) - they are trying to gather as much private information from the infected computer as possible and to send the info through the Internet.

To remove the Trojan Horse, it is enough to remove infected files from the infected computer (these files are created by the Trojan Horse). Although, if the infected file is running in memory, its .EXE file is protected (by Windows) and can not be removed easily. In such cases, you need to follow the steps mentioned to remove the infected file (the steps depend on your Windows version):

Under Windows 95/98/ME, you need to remove these files under MS-DOS mode

Under Windows NT4, you need to remove infected files under VGA mode, again following this guide:

Under Windows 2000 and Windows XP, you need to start your computer in Safe mode with command prompt and follow this guide

Under Windows XP, you should disable System Restore feature too - then, the content of _System volume information folder will be accessible.

[Hired Goon]

I got a trojan a couple of months back from downloading something from a dodgy warez site.

It kept trying to send info to an IP, and cos I was running zone alarm - I could see which files were executing this instruction (note this is despite Norton supposedly quarantining a file).

The scarey bit was I found a .dat file which had a whole bunch of stuff that I had typed in it (could have captured pwds and stuff). So, I deleted all of the files that I could find - and that seemed to fix it.

I think if you're in any doubt as to whether the virus is still there - reformat your PC

[Bostonmess]

For future reference: :)

A good thing to try is booting into safe mode by pressing the F8 key at boot. Run a full scan then, I think this sometimes helps because safe mode only uses the basic necessary files and any unnecessary files which might be infected have more chance of not being in use. Your scanner can sometimes "heal" it then, if it is an infected file.

[tikdoph]

Originally posted by HiredGoon
It kept trying to send info to an IP, and cos I was running zone alarm - I could see which files were executing this instruction (note this is despite Norton supposedly quarantining a file).Sneaky fuckers... oh well...

Paranoid Mode: ON