Win32 TrojanDropper virus

System

I wonder if Ad aware is faulty? Ive scanned my computor with A-Squared and deleted everything it bought up but Ad aware is still showing the virus.
I think i am going to have to admit defeat here and wait for MrJudi to sort it out.

This wouldnt be the first time Adaware has given me a false positive result.

Browntoa

boot into safe mode

http://www.pchell.com/support/safemode.shtml

and then run adaware, it will then be able to fully remove it

albertross_2

what is the filename and path of the file it finds?

System

Ad aware says it is

Name: Win32.TrojanDropper

Catagory: Malware

Object Type: Regkey

Location: system\controlset\enum\root\legacy_ip6fw\

Last activity 23-04-2007

Jzpop

It may not be anything nasty at all, simply a 'false positive'. The ip6fw reference may be to the ip6fw.sys file that is part of the Microsoft IPV6 firewall, typically installed as part of Windows Defender.

Unfortunately, there have also been a few Trojans / Rootkits that have tried to mask their presence by using the same or a similar name.


Unless I missed it, I don't think that you have said what makes you think that you have picked up the W32 Trojandropper virus. can you confirm what first alerted you to this?

System

Ad aware told me when i did a scan this afternoon. i cant say i am having any problems with my pc though (other than it being a bit slow but i think that is because MrJudi installed Windows Defender on it last week).

Jzpop

Is this the first scan since Mr J installed Windows Defender? If so, I would lean towards a false positive.

If you were to download the free trial of NOD32, disconnect from the Web, uninstall AVG, install NOD32, re-connect and download their latest definitions (should start automatically) and run a full scan, then you will have a second opinion. Feel free to uninstall NOD32 and go back to AVG after if you wish.