Member Avatar for acadata

We have seen the Trojan "downloader.vbs" on one of our computers, and we keep deleting it and clearing the temp files but it keeps coming back. I read somewhere that it also infects svchost.exe, but we can't delete that file without affecting windows' operation. I have run a few antivirus programs on it, and they find it, but they don't remove it.

We are running MS Windows XP Pro SP3, the antivirus program McAfee, and browse with Mozilla Firefox. Any help on this situation will be greatly appreciated.

  • 2 Contributors
  • 1 Reply
  • 133 Views
  • 2 Days Discussion Span
  • Latest Post Latest Post by Godsp3ed
Member Avatar for Godsp3ed

This unsuspecting script executes by downloading itself from a website. Once its is on your machine it starts redirecting your browser to sites with fake antispyware programs. Consequently, you are now further infected by more malware.

Delete the original Trojan file (its location will depend on how the program initially penetrated the victim machine).
Delete the following files:

%Temp%\update.exe
%Temp%\file.exe

Update your antivirus databases and perform a full scan of your computer

Try AVG or MBAM

http://free.avg.com/

http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.