Win32:trojano-213 grrrrrr

[pucebe]

Hi  Quelqu'un parle français ici, ce serait plus facile pour moi

I have this trojan and no possible for me to delete it
 I have on the journal :
8/11/2004 14:01:54   SERVEUR\Patricia   2440   Sign of "Win32:Trojano-213 [Trj]" has been found in "C:\temp\Installer2.exe" file.  
9/11/2004 13:27:59   AUTORITE NT\SYSTEM   1648   Sign of "Win32:Trojano-213 [Trj]" has been found in "C:\temp\Installer2.exe" file.  
9/11/2004 13:27:59   AUTORITE NT\SYSTEM   1648   Sign of "Win32:Trojano-213 [Trj]" has been found in "C:\temp\INSTAL~1.EXE" file.  
9/11/2004 14:50:17   AUTORITE NT\SYSTEM   1648   Sign of "Win32:Trojano-213 [Trj]" has been found in "C:\temp\Installer2.exe" file.  
9/11/2004 14:50:23   SERVEUR\Patricia   3624   Sign of "Win32:Trojano-213 [Trj]" has been found in "C:\temp\Installer2.exe" file.  


I delete it in my server but every day it is there again  and I really don't know how can I delete from the autorite nt/system

Some one can help me ?
thank you  

[DavidR]

Clear the C:\temp\ folder. Run a boot scan and check if clear.

Check out Eddy's HiJackThis Info and Analysis page, HiJackThis log file analyzer and follow the directions there and get back to us if you need more help....

You might also find the information in this thread very useful General Advice & Tools for virus/trojan/malware removal

[norion]

If you have the scagent service running then this is downloading the trojan.

check my post in Trojan Help (I'd link it here but I haven't found out how to yet!)

[GYL]

hi! pucebe:exceptionaly,i will speak french:
aller dans reglages avast programmer scan de boot,desactiver restauration systeme,redemarrer et c'est tout!
merci de nous tenir informés du résultat
good luck pucebe.
ps:penser à vider fichiers temporaires

[airlev]

Hi everyone,
I do have exactly the same Trojan as puce
And I do not  know how to get rid of it.
I did desactivate the restore mode and I started in safe mode, cleant the Temp and temporary Internet files.
Then I lanched avast that did not find anything suspect (except a file that was not actually infected
But I'm afraid those infected files will be back soon ...
Any help appreciated

[Eddy]

Click on the link in my signature to thoroughly clean your system.