Author Topic: Trojan Problem  (Read 3159 times)

0 Members and 1 Guest are viewing this topic.

Dimmu

  • Guest
Trojan Problem
« on: August 04, 2009, 10:58:42 AM »
Hey. Ive encoutered a trojan problem and would like to hear some opinions..

Yesterday i scanned my comp and in system32/config/regback folder avast found an infected file called COMPONENTS.OLD

Avast said that the file was infected with Win32:Agent-CWD.. I chose to put it into chest and it said that it succeded.. So today i restart my comp and scan Windows folder again.. And it turns out that i find the same file infected with Win32:Baidubar-B.. Ive read that Baidubar is some sort of Chinese toolbar..

So have anyone else encountered it?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89364
  • No support PMs thanks
Re: Trojan Problem
« Reply #1 on: August 04, 2009, 02:20:44 PM »
It is a bit of a strange file type to get a detection on, .old.

What is strange is that having been sent to the chest, unless there were errors (displayed) then it should be in the chest. If it is regenerated, especially as it is now under a different detected malware name, there is something very strange going on.

Do you have any other security software installed, especially something that would manage registry changes, which could possibly be creating/saving configurations/registry settings ?

If it keeps coming back, there is likely to be an undetected or hidden element to the infection that restores or downloads the file again. What is your firewall ?

If you haven't already got this software (freeware), download, install, update and run it and report the findings (it should product a log file).

Don't worry about reported tracking cookies they are a minor issue and not one of security, allow SAS to deal with them though. - See http://en.wikipedia.org/wiki/HTTP_cookie.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Dimmu

  • Guest
Re: Trojan Problem
« Reply #2 on: August 04, 2009, 04:24:54 PM »
Thanks for the help.. I just did a boot scan and an normal scan of that folder again and it found nothing.. So it seems that i am "clean"... I was just suprised over that it "re created" itself one time.. Never seen that before.

And thanks for the software tips, but i already got both of them :)

Also both of the infected files are in my chest.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89364
  • No support PMs thanks
Re: Trojan Problem
« Reply #3 on: August 04, 2009, 04:46:54 PM »
You're welcome.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security