What is TROJAN HORSE CONSTRUCTOR.CJA?

crw

yes I am on XP
I will lock it - thanks for your help.

richtea_2

I'm running XP aswell.

aliEnRIK

Ok guys
Dont panic like I said. Its nothing MAJORLY important. So long as it doesnt run, it should be fine. We shall just have to see if we can find out wether it really is a trojan or not. (At the moment, im thinking it IS, through the information gathered thus far......but I obviously dont know that for sure)

davidmcg2u

Hi,

Thanks for all the replies.

I have XP too. I have just tried to increase the size of the vault but it still said that the files ere too big. I have disable it though CCleaner for now.

I will try the other online scanner too as suggested too.

sososo2008

I believe it hit me this morning. I downloaded a torrent and all of a sudden avg went crazy with trojan warnings. My support functions seemed to be hijacked. Windows firewall icon came up and said it had been turned off. Attempting to turn it back on didn't work from the window that popped up. I went thru system icon in control panel and it said that the firewall was on already. All my restore points were erased. avg found 4 instances of constructor.cja. in my c:/i386 folders. i restored windows thru the recovery program, but just running avg again I find that the trojans remain. So far no issues with the system like before. i had numerous other spyware impacts too at the same time that spybot found. I guess it is possible they were responsible for the windows impacts, but I'm betting on the trojan.

aliEnRIK

sososo2008 wrote: »

I believe it hit me this morning. I downloaded a torrent and all of a sudden avg went crazy with trojan warnings. My support functions seemed to be hijacked. Windows firewall icon came up and said it had been turned off. Attempting to turn it back on didn't work from the window that popped up. I went thru system icon in control panel and it said that the firewall was on already. All my restore points were erased. avg found 4 instances of constructor.cja. in my c:/i386 folders. i restored windows thru the recovery program, but just running avg again I find that the trojans remain. So far no issues with the system like before. i had numerous other spyware impacts too at the same time that spybot found. I guess it is possible they were responsible for the windows impacts, but I'm betting on the trojan.

Sounds to me like youve had a trojan for quite a while actually ~ waiting in a file somewhere.
Typically ~ avg has an issue with updating (which MAY explain why everyones computers seem to be going crazy) its MAIN PROGRAM (ie ~ NOT definition files) today.

Run malwarebytes quick scan first ~
http://www.malwarebytes.org/

Then run avgs FULL scan

Id suggest against anymore 'restore points' I have nothing but problems with them at the best of times!

Some others I suggest u try (if u havnt already)
SPYBOT
http://www.safer-networking.org/en/download/index.html
UPDATE, IMMUNISE and SCAN

and ADAWARE
http://www.download.com/Ad-Aware-2008/3000-8022_4-10045910.html?part=dl-ad-aware&subj=dl&tag=top5&cdlPid=10844457

Browntoa

instructions for Malwarebytes

Please download Malwarebytes Anti-Malware and save it to your desktop.

• Make sure you are connected to the Internet.
• Double-click on mbam-setup.exe to install the application.
• When the installation begins, follow the prompts and do not make any changes to default settings.
• When installation has finished, make sure you leave both of these checked:
  • Update Malwarebytes' Anti-Malware
  • Launch Malwarebytes' Anti-Malware
• Then click Finish.
• MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
• On the Scanner tab:
  • Make sure the "Perform Quick Scan" option is selected.
  • Then click on the Scan button.
• If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
• The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
• When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
• Click OK to close the message box and continue with the removal process.
• Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
• Make sure that everything is checked, and click Remove Selected.
• When removal is completed, a log report will open in Notepad.
• The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
• Copy and paste the contents of that report in your next reply and exit MBAM.

Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. MBAM may make changes to your registry as part of its disinfection routine. If you're using other security programs that detect registry changes, they may alert you after scanning with MBAM. Please permit the program to allow the changes.

nkr209

crw wrote: »

I too have the same 3 trojans and I cannot send them to the virus vault as the files are too large. Is it safe to use my pc or should I wait until they have been confirmed as false positives, if indeed they are? How can I make my pc safe? Last time I had to wait over a week for a reply from technical support.

Had the same results on my avg test this morning. Was found in my recovery system, can't access it to delete the file. I don't have a Dell so that's not the connections.
Is this a problem with AVG?

jack_spratt_2

Updated AVG and rescanned came back with a clean computer .Perhaps it was a problem with the updated from AVG this morning and flagged a false positive

richtea_2

I have run the MBAM with no results.
Also have run AVG twice since updating today and get no infections.
So could have been a AVG problem?