Your browser isn't supported
It looks like you're using an old web browser. To get the most out of the site and to ensure guides display correctly, we suggest upgrading your browser now. Download the latest:

Welcome to the MSE Forums

We're home to a fantastic community of MoneySavers but anyone can post. Please exercise caution & report spam, illegal, offensive or libellous posts/messages: click "report" or email forumteam@. Skimlinks & other affiliated links are turned on

Search
  • FIRST POST
    • robert_harper_2000
    • By robert_harper_2000 6th Dec 06, 7:43 AM
    • 1,485Posts
    • 402Thanks
    robert_harper_2000
    TR/Spy.Goldun.ML detected!? not good new?
    • #1
    • 6th Dec 06, 7:43 AM
    TR/Spy.Goldun.ML detected!? not good new? 6th Dec 06 at 7:43 AM
    Antivir picked up on my other computer the following
    c:\program files\ internet explorer \ iexplorer.exe

    Trojan horse TR/Spy Goldun.ML

    I have tried telling antiVir to move it or deny access to it but it just keeps telling me the same thing....

    How do I get rid of this horse - ?? HELP?!?!??!
    Help me to help you
Page 1
    • Zahc
    • By Zahc 6th Dec 06, 9:16 AM
    • 957 Posts
    • 359 Thanks
    Zahc
    • #2
    • 6th Dec 06, 9:16 AM
    • #2
    • 6th Dec 06, 9:16 AM
    Update your virus database, then run your anti virus in safe mode.
    What AV are you using BTW?

    Zahc
    • robert_harper_2000
    • By robert_harper_2000 6th Dec 06, 9:31 AM
    • 1,485 Posts
    • 402 Thanks
    robert_harper_2000
    • #3
    • 6th Dec 06, 9:31 AM
    • #3
    • 6th Dec 06, 9:31 AM
    It's called AntiVir ... do you recommend any better?
    Help me to help you
    • robert_harper_2000
    • By robert_harper_2000 6th Dec 06, 9:34 AM
    • 1,485 Posts
    • 402 Thanks
    robert_harper_2000
    • #4
    • 6th Dec 06, 9:34 AM
    • #4
    • 6th Dec 06, 9:34 AM
    Also is this the Virus?

    http://www.symantec.com/security_response/writeup.jsp?docid=2005-010715-5330-99

    Removal: Moderate
    DamageDamage Level: Low

    hmm... doesn't seem good
    Last edited by robert_harper_2000; 06-12-2006 at 10:01 AM.
    Help me to help you
    • Zahc
    • By Zahc 6th Dec 06, 10:11 AM
    • 957 Posts
    • 359 Thanks
    Zahc
    • #5
    • 6th Dec 06, 10:11 AM
    • #5
    • 6th Dec 06, 10:11 AM
    It's a variant. I'm not familiar with Antivir, but it picked up the trojan in the first place so can't be too bad. How to remove it though?
    The above variant resides in the system restore files, amongst others. If you have system restore 'on', the virus file won't be deleted.
    So, you have to turn system restore off. I'm sure you can see the ramifications of this, so save your important stuff before you do it.

    Summary;
    System restore disabled.
    Start PC into safe mode
    Run Antivir
    System Restore back on
    Boot PC normally

    (Whilst in safe mode, you might want to run your adaware, spybot s&d etc for good measure)

    Zahc

    As for recommending AV programs, I use Kaspersky and wouldn't use anything else. It's a preference thing I guess.
    • robert_harper_2000
    • By robert_harper_2000 7th Dec 06, 1:29 PM
    • 1,485 Posts
    • 402 Thanks
    robert_harper_2000
    • #6
    • 7th Dec 06, 1:29 PM
    • #6
    • 7th Dec 06, 1:29 PM
    result!!

    Thanks, worked perfect! Virus gone

    Really kind of you, thanks mate
    Help me to help you
    • Woby_Tide
    • By Woby_Tide 7th Dec 06, 4:11 PM
    • 5,202 Posts
    • 1,965 Thanks
    Woby_Tide
    • #7
    • 7th Dec 06, 4:11 PM
    • #7
    • 7th Dec 06, 4:11 PM
    strange, I started a thread about this earlier too, using same AV software but on running a second scan the threat disappeared without anything being done?
Welcome to our new Forum!

Our aim is to save you money quickly and easily. We hope you like it!

Forum Team Contact us

Live Stats

2,552Posts Today

8,438Users online

Martin's Twitter