0

We have seen the Trojan "downloader.vbs" on one of our computers, and we keep deleting it and clearing the temp files but it keeps coming back. I read somewhere that it also infects svchost.exe, but we can't delete that file without affecting windows' operation. I have run a few antivirus programs on it, and they find it, but they don't remove it.

We are running MS Windows XP Pro SP3, the antivirus program McAfee, and browse with Mozilla Firefox. Any help on this situation will be greatly appreciated.

2
Contributors
1
Reply
2
Views
8 Years
Discussion Span
Last Post by Godsp3ed
0

This unsuspecting script executes by downloading itself from a website. Once its is on your machine it starts redirecting your browser to sites with fake antispyware programs. Consequently, you are now further infected by more malware.

Delete the original Trojan file (its location will depend on how the program initially penetrated the victim machine).
Delete the following files:

%Temp%\update.exe
%Temp%\file.exe

Update your antivirus databases and perform a full scan of your computer

Try AVG or MBAM

http://free.avg.com/

http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button

This topic has been dead for over six months. Start a new discussion instead.
Have something to contribute to this discussion? Please be thoughtful, detailed and courteous, and be sure to adhere to our posting rules.