trojan gduFR250[1].exe

[happydavid]

Hi there,

AVG keeps telling me it has found a trojan called trojan "gduFR250[1].exe", but seems unable to remove it. It keeps popping back up and asks for a box to be clicked that says "to start download"

avast! does not even pick the virus up. Any suggestions what I can do to remove it?

Thankyou

David

[DavidR]

Suggestion one, decide which AV you want installed as the resident AV and uninstall the other. Two resident scanners can cause conflict when one AV locks a file as the other is trying to scan it, etc.

What is the location of the infected file ?
It might well not be detected by avast, google doesn't return anything about this either, so it might be a generic detection specific to AVG.

What is your OS ?
What is your firewall ?
Can you block the program trying to download ?

Download and run this Ewido Security Suite If using winXP.

[mauserme]

so it might be a generic detection specific to AVG.

Maybe David, but I can't find it in AVG's online virus encyclopedia either.

http://free.grisoft.com/doc/7/lng/us/tpl/v5

happydavid - are you sure of the spelling?

[CharleyO]

***

I tried that one also and found nothing ... even used variations (left off [1], etc)   


***

[mauserme]

... even used variations

Me too.

They do seem to have generics in the list, though, so maybe a typo or their list is not as up to date as their detections.

[DavidR]

It is strange in the fact that the reported virus is the same as the file name, unless it is just being reported as a generic term 'Trojan' and the file name tacked on for good measure (or bad measure depending on how you think).

[polonus]

Hi happydavid,

A good searcher always find something, look here:
http://www.pcflank.com/dbvirusinfo.htm?vid=62
So remember for the next time always try to look for parts of the name also - gduFR250 no results. Then gdu trojan (trojan in this software) delivers more than a hit. The results of a search are as good as the queries are.

Success with taking this one out.

polonus

[DavidR]

Good find polonus.

[CharleyO]

***

Way to go, polonus!   

I failed to search for just "gdu" alone. Shame on me!      


***

[polonus]

Hi CharleyO,

Nothing to be ashamed of. This is just the way to educate each other, and that goes in turns, and is a two-way thing. You have not learned all this  in one day, neither did I. But it means that the quality of this forum is getting better and better that way.

your friend polonus

[happydavid]

Hello again everyone,

Thankyou for all your helpful replies. I downloaded the EWIDO software, and the scan found two trojian viruses on my system. These have now been removed, and everything is working normally.
I am at a bit of a loss to understand why my AVG anti virus could not prevent this trojian from reappearing- I keep it up to date.

Anyway, the main this is that the nasty has been removed. My friend keeps telling me to get a Mac - they are not as prone to virus attack.

Regards,

David
England, UK.

[TedNelly]

 Hi David

Here you go mate you can now tell your mates about this forum and
Tell them about  the latest Mac vulnerability

How to protect yourself against the latest Mac OSX Trojan/worm ...