Author Topic: Win32:deborm R + Q  (Read 4323 times)

0 Members and 1 Guest are viewing this topic.

clue

  • Guest
Win32:deborm R + Q
« on: September 24, 2003, 11:47:52 PM »
Avast found win32:deborm.r and deborm.q on my computer and successfully deleted the files. I checked up on the internet and found out that this worm is a trojan dropper.  It drops the following trojans: TROJ_KILLAV.P
BKDR_SDBOT.05.AX
BKDR_LITMUS.203B
I checked in my regkeys and couldnt find anything. Does that mean I dont have them ? Is the problem solved if Avast deleted the infected files or is there more to it ?
Please help.  ???

whocares

  • Guest
Re:Win32:deborm R + Q
« Reply #1 on: September 25, 2003, 09:47:38 AM »
Hi,

- do some research on the deborm-variants and check for malicious fles and registry-entries:
http://www.virusbtn.com/resources/vgrep/vgrep.cgi?terms=deborm&product=1

- do a full thorough scan with avast

if nothing shows up, then I guess you're clean

 the exact paths where the 2 deborms where found (see avast report/logfiles) would be also interesting to check whether they had already activated or lying dormant on your PC (e.g. in T.I.F. or Temp-folders)
 ;)