We'd like to remind Forumites to please avoid political debate on the Forum. This is to keep it a safe and useful space for MoneySaving discussions. Threads that are - or become - political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.
We're aware that dates on the Forum are not currently showing correctly. Please bear with us while we get this fixed, and see Site feedback for updates.

Trojan Downloader js Renos

Hi Microsoft Security Essentials just picked up Trojan Downloader JS Renos in fileC:\Users\Lorna\AppData\Microsoft\Windows\TemporaryInternetFiles\Low/Content.IE5\7TWCK12B\www1_trrustzone11_in{1}.html. It removed it. Is my computer ok? I have had no strange activity at all. No pop ups or anything. Now I'm worried. Thank you.

Comments

  • santer_2
    santer_2 Posts: 4,406 Forumite
    1,000 Posts Combo Breaker
    edited 26 December 2010 pm31 9:49PM
    Unlikely to be a problem as Security Essentials would have said it could not remove it, however, to crosscheck run malwarebytes anti-malware

    http://filehippo.com/download_malwarebytes_anti_malware/
  • Firetastic
    Firetastic Posts: 596 Forumite
    edited 26 December 2010 pm31 9:52PM
    I'm just about to go to bed so I'll download that tomorrow. No idea how I got that. Does this damage your Word Documents or anything like that? Microsoft Spynet popped up a week or so ago saying it found potentially malicious files. I sent it to Microsoft.
  • So it can be one of those things called a false positive???
  • jayme1
    jayme1 Posts: 2,154 Forumite
    Part of the Furniture Combo Breaker
    Firetastic wrote: »
    Does this damage your Word Documents or anything like that?

    I'm guessing that you are asking that question because you have no back up of your important work, even if this cannot 'break' your word files, what would you do id your hard drive dropped dead tomorrow from normal wear and tear??

    if you are at all worried copy the files/folders to an external hard drive, burn them to a CD or DVD, or even upload them to something like windows skydrive (comes with any hotmail email account).

    better to be safe than sorry!!
  • paddyrg
    paddyrg Posts: 13,543 Forumite
    edited 26 December 2010 pm31 10:15PM
    The JS part of the name suggests it is cached javascript on a page you visited which attempts to download malware to your machine, not that you have been infected already. It may be one of those stupid "your Pc has been infected download and install this linked executable for a free cure" popups trying to trick you into installing something nasty.

    Edit - no, a "false positive" is a rare event which finds an innocent file guilty, this is a suspect cached file from a server caller www1 dot trrustzone11 dot in - trrustzone does not sound like a zone I'd trrust ;-) MSE has done you a favour.
  • Firetastic
    Firetastic Posts: 596 Forumite
    edited 27 December 2010 am31 10:12AM
    Actually I have backed up my data. I did it in the summer. I put it on to a CD. The reason I was asking I have stuff backed up on a USB Stick. If I was to put that in the computer could it infect my usb stick?

    Am running another full scan with MSE.
  • paddyrg
    paddyrg Posts: 13,543 Forumite
    Actually maybe - some viruses spread via USB, and even if it didn't, would you ever be certain? The only true cure is a flatten and rebuild, but that's a liottle like saying reincarnation is the only real cure for life! If you do a rebuild, then use a linux boot CD and online virus scanner to check it before reintroducing it :-)

    However as I mentioned, this is or appears to be a javascript script that is trying to get you to install malware, not malware in itself. Delete all your temporary internet files from internet explorer and do another full/deep scan - your machine is probably fine if nothing else shows up, but watch for unusual behaviour and do a deep scan regularly.
  • I just wanted to say thank you to everyone who has replied. I just wish I had the same level of knowledge some of you guys have. I'm always the one asking questions when something goes wrong. You'll get me asking stupid questions periodically lol.
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
    http://www.filehippo.com/download_malwarebytes_anti_malware/
    Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM QUICK SCAN then click SCAN
    Remove everything thats found (needs to be ticked)
    Post the COMPLETE log here AFTER youve deleted everything it finds
    If anything was found then do the exact same but run a FULL scan


    reboot

    Download HIJACK THIS
    http://download.cnet.com/3001-8022_4-10227353.html?spi=f323e4ed53a8a1b6c63e66c4b678a8f6
    (It auto downloads, do NOT click to download anything off the page)
    Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
    (do NOT do anything else with Hijack but scan and post the FULL log)
    If you get a message that you cant write to the hosts file then Press the SHIFT key, and whilst holding it RIGHT CLICK and select RUN AS (admin)
    :idea:
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 348.4K Banking & Borrowing
  • 252.1K Reduce Debt & Boost Income
  • 452.4K Spending & Discounts
  • 241K Work, Benefits & Business
  • 617.3K Mortgages, Homes & Bills
  • 175.7K Life & Family
  • 254.2K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16K Discuss & Feedback
  • 15.1K Coronavirus Support Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.