Page 1 of 1
What is this? [spyware, trojan?]
Posted: Thu Jan 20, 2005 1:00 pm
by Zekester
My Norton A/V keeps catching the same "installer2.exe" trojan dropper, but it keeps coming back.
It says it's installed in my temp folder, but I can't find it there.
And my firewall has been getting "intruded" pretty often lately by random IP's
What the hell might be going on?
Posted: Thu Jan 20, 2005 1:02 pm
by Smoove_B
Symantec thinks you've got
something. Well..not that you've got something. Probably this redirect is trying to install but NAV is stomping it every time.
Re: What is this? [spyware, trojan?]
Posted: Thu Jan 20, 2005 3:28 pm
by Jeff Jones
Zekester wrote:My Norton A/V keeps catching the same "installer2.exe" trojan dropper, but it keeps coming back.
It says it's installed in my temp folder, but I can't find it there.
It could be hidden in your System Restore.
I believe if you disable System Restore on all drives, it will kill all the stored backup files (where trojans and viruses often hide). This is worth a shot anyway.
Posted: Thu Jan 20, 2005 6:20 pm
by Zekester
I've had system restore disabled on all drives since this computer was new.
Thanks anyway, Jeff
Does running a full scan in safe mode work for something like this?
Posted: Thu Jan 20, 2005 6:22 pm
by Greggy_D
It might be in Startup or the RUN section of the registry.
Run "msconfig" and look in the startup tab.
Posted: Fri Jan 21, 2005 12:43 pm
by Zekester
I did find some foreign chit in my startup, and disabled it.
So far, so good.
Posted: Fri Jan 21, 2005 3:04 pm
by Bakhtosh
you can always go to symantic or mcafee's site to see if there's a cleaner available for that particular trojan.