Little witch trojan????

Snoopy_rules

I regularly run my spyware full system check and this time it tells me I have little witch. The bit that confuses me is that the location of it is in windows, fonts, chiller. I never open email attachments they just get recycled.

If I did get this , don't know from where, and have now removed it how can I tell if it has done any damage.

Any advise in simple terms because I'm not very good on my computer, would be appreciated.

MyBigToe_2

its just a small program that lets people have access to your PC.
If its been removed, it wont cause any more harm.

It should, in theory have been caught by any anitvirus software you have running, of course, if you have any running.

Snoopy_rules

MyBigToe wrote:

its just a small program that lets people have access to your PC.
If its been removed, it wont cause any more harm.

It should, in theory have been caught by any anitvirus software you have running, of course, if you have any running.

Thanks for the info I am running AVG with firewall so can't understand how I got it thats if I had got it.

pchelpman

Hi Snoopy_rules

You got me thinking. I don't know how you got it IF, as you say , you don't open e-mail attachments.

Little Witch is, as you now know, as RAT (Remote Access Trojan) and the ONLY way your computer can be infected that I am aware of is by opening the bad file attached to an e-mail.

Did someone else on your computer perhaps open something? Did you use a disk from outside your usual environment without checking/scanning it for malware?

Bit of a mystery.

Snoopy_rules

pchelpman wrote:

Hi Snoopy_rules

You got me thinking. I don't know how you got it IF, as you say , you don't open e-mail attachments.

Little Witch is, as you now know, as RAT (Remote Access Trojan) and the ONLY way your computer can be infected that I am aware of is by opening the bad file attached to an e-mail.

Did someone else on your computer perhaps open something? Did you use a disk from outside your usual environment without checking/scanning it for malware?

Bit of a mystery.

Still don't know how I got it. Nobody else uses my pc. Haven't used anyone elses discs. Definately haven't opened any mail attatchments.

The strange thing is that when I scan my restore folders it is sitting in there as well. This implies it has been there a while, don't know how often a computer does a new restore file. Yet my spysweeper has never picked it up before. Just wondered if it is possible that it wasn't a trojan just something that spysweeper thought was a trojan. Hope that makes sense.

Quincy_3

http://www.outpostfirewall.com/forum/archive/index.php/t-266.html

Snoopy_rules

Quincy wrote:

http://www.outpostfirewall.com/forum/archive/index.php/t-266.html

Thanks for the link Quincy. The only thing that concerns me is these are like 5 years old. Will a system still throw up false positives???

Quincy_3

Snoopy_rules wrote:

Thanks for the link Quincy. The only thing that concerns me is these are like 5 years old. Will a system still throw up false positives???

Maybe, depends when you got the problem if you see what I mean, also if they are in the restore points I would strongly advise you do a Adaware scan with System Restore OFF or in safe mode then run a Adaware scan then restart PC and turn System restore back On.

http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10045910.html?part=dl-ad-aware&subj=dl&tag=top5