Recent Trojan Infection?

[wagraphics]

Hi all... the network at work started to seem a little slow, so I started snooping. I think I found a source being this fun little trojan that is renaming its self of course. I am able to end task the process then delete the .exe but it simply reappears next reboot. It is displaying a brown terrier type logo also .. any advice?

 

[electronicsfreak]

That almost sounds like a virus. Either way you might want to use this to locate the target of it.

Process explorer

http://www.microsoft.com/technet/sysinternals/utilities/ProcessExplorer.mspx

Also if you can post a logfile from hijackthis on here.

http://www.download.com/HijackThis/3000-8022_4-10379544.html

There is a point in wisdom and knowledge that when you reach it, you exceed what is considered possible - Jason Schoon

 

[kjv1611]

Is this just located on one machine, or are you talking about multiple machines? If just one machine, and if possible, try booting into safe mode to get rid of the problem. My guess is that if it's loading up, it is a registry file, and/or maybe something you can disarm in the startup/services section of MSCONFIG.

Also, generally, you can clear out a whole lot of bad stuff without trying to pinpoint each individual problem with these programs from

http://www.download.com:

Adaware 2007
Spybot Search and Destroy
AVG Antispyware
AVG AntiRootkit

And it wouldn't hurt do try a couple of freeware Antivirus Apps for scanning: AVG Antivirus, Avast, and/or Antivir are all good.

And then I'd still run at least one free online virus/spyware scanner if possible.

http://housecall.trendmicro.com

is one I use frequently.

Also, I saw that there were 2 others that should be good just the other day: Kaspersky free online scan, not the actual installation product... and bitdefender.

Also, if you use a program like ccleaner (also can get from

http://www.download.com

) to clean out temp files that may also help, considering some viruses and spyware apps do hide in the temp folders...

--

"If to err is human, then I must be some kind of human!" -Me

 

[wagraphics]

Sorry for the hassles... it seems that it is not a trojan. Trendmicro Client/Server Agent now replicates its "watch dog" into a random 4alpha2numeric.exe program so it cant be ended by virus's. I just wish they would have sent me a notice.