Help with Trojan Please

callansdad

Hi all,

I recently downloaded the 'Ace Optimizer Utilities' program as reccomended by someone in another thread, i used it to tidy up my registry files etc ..... everything working tip top now .... however ...

I went into the auto startup manager to remove a couple of items that shouldnt be there and i have found this ... I have microsoft antispyware on my machine ... i clicked on this and clicked on 'info' .... this message is displayed ........ 'Item : gcasServ

Name : "gcasserv"
Filename : gcasserv.exe
Database Status : User's choice
Description : "Giant Antipsyware - now superseeded by Microsoft Windows AntiSpyware"

Name : "gcasserv"
Filename : realsched.exe
Database Status : Not required
Description : "Added by a variant of the TACTSLAY.A TROJAN! Note - this is not the legitimate RealOne Player (realsched.exe) application of the same name"


Now obviously its the second part i'm worried about ... i have run avg a few times and even directed it to this folder but it finds nothing ... i have tried searching for the offending files but to no avail ... any ideas folks?


Thank You Thank You Thank you

Browntoa

the second one should just be removed

the first one is required

pchelpman

What Browntoa says is right although I suspect you may be seeing these messages simultaneously so they may be confusing you.

If you want further comfirmation of exactly what either of these files are (if there is more than one) then navigate to each in turn and upload the file(s) to jotti here....

http://virusscan.jotti.org/

Post the results of the jotti scan(s) to this thread for further comment/advice.

callansdad

Thanks for your replies .... let me explain some more .... i cannot find the file in question ... i have searched for it and have also tried following the path, but that only shows me the proper 'gcasserv' filefile and as i said i have tried using avg to find it but to no avail.

I have tried looking for realsched.exe and gcaserv but cant find it

Browntoa

might have gone already, was just an invalid link in startup

Ace Utilities has now fixed