Trojan Horse?

moxie_2

My Norton subscription ran out yesterday, and rather than pay I downloaded AVG (as recommended by this board) and ran it. It said my pc had a Trojan Horse (which Norton hadn't picked up) and got rid of it for me. My question is - what is a trojan horse and what damage can it do, cos I don't know how long I've had it on my pc?

Tallymanjohn

AVG may have found a Trojan which Norton had found previously & quarantined - you could tell from the location of the nasty. As hot_dog says, it's not advisable to have to AVs running at once & you need to make sure all of Norton has been removed - if it's one of the more recent versions - 2004 onwards then the Add/remove section of Control Panel will suffice. If it's an earlier version, you may need to run Norton's/Symantec's own removal tool - it's called 'RNAV' & if you do a search for it on Google, it should be the first result.

Rex_Mundi

Tallymanjohn wrote:

you need to make sure all of Norton has been removed - if it's one of the more recent versions - 2004 onwards then the Add/remove section of Control Panel will suffice. If it's an earlier version, you may need to run Norton's/Symantec's own removal tool - it's called 'RNAV' & if you do a search for it on Google, it should be the first result.

The Norton/Symantec RNAV should only be used if add/remove programs doesn't work. If you have used add/remove, and it say's it was successful. Don't download the removal tool.

moxie_2

OK I've checked and Norton is gone. Just run AVG again, it's found 2 more trojan horses called dropper small 4AK. One is an embedded object and one is in archive. Yesterday it put the infected file in virus vault, but it hasn't done that today. (Don't know why) Is there anything I can do to get rid of them?

moxie_2

Can anyone help me with this?

albertross_2

what is the path and filename of the files, you should just be able to delete them..

https://www.ccleaner.com might help.

is it this?

http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=ADW%5FTVMEDIA%2EC

are you getting popups?

moxie_2

No pop ups but AOL blocks them anyway I think. Tried to look in change/remove for tv media but it's not there. Path and filename (long!) :
C:\documents and settings\all users\application data\aol\userprofiles\all users\antispyware\dat\quarantine\20060519221444.zip\documents and settings\chris
I moved one file to the virus vault, this is the one that's left which AVG says is located inside the archive and cannot be healed.

Rex_Mundi

If the file is already in your AOL antispyware quarantine. You will be OK anyway. You shouldn't need to do anything with this file, it can't get at your system because its already been picked up and quarantined by another security application.

moxie_2

Phew! That's a relief, thanks very much all.

trets77

if your worried about futher trojans the only 100% safe way go is TROJANHUNTER. it not only provides a idiot proof scanning tool it also provides a guard. it finds thing that spyware and anti virus software miss. the little trojan that Pacific poker leaves on your system springs to mind. my zone alarms spyware scanner missed it as did my anti virus.

some trojans can be very very harmful . Trojan hunter isn,t that cheap ( about £20 quid i think ) but it is one off fee for life on however comps you own with constant updates. for piece of mind if you do online banking or god forbid you use P2P or file share networks there is nothing better at keeping your computer safe