Help! Urgent! Downloader.trojan on computer, cannot delete!

Help! Urgent! Downloader.trojan on computer, cannot delete!

I clicked on a website durign a search through google and my Norton Internet security indicate and intursion it could not block delete or quarantine. It turned out to be Downloader.troajn. Nortons instructions are to delete the file.

It is currently in the IE5 Temporary internet folder.

I tried to get to it through safe mode... not possible.

I tried to delet the file manually I get an error message: Cannot delete file. File system errors.

This is my first time with having a trojan or virus downloade doin my computer. Norton has been prett good to dtop it.

But now I am worried.

The file is called downloader.trojan[1].htm

I tried to delete the folder it was in but I got a warning not too because there were sytem files in it and my computer might not start after...

Can anybody help....

Norton's instructions don't work, and it tried to delete, etcc, and is not able to.

Edit: I just did a registry scan for downloader.trojan... nothing came up...

 

Is your computer showing any signs of having a trojan?

If you can't get rid of it, the quickest and less stressful way would be too back up your files, and do a fresh reformat. That is pushing it a little, but thats a last resort.

Have you tried downloading/buying other programs to see if you can remove it?

 

to delete temporary internet files select "Tools > Internet Options" in the IE. there you can see options of delete cookies and delete files, select to delete all offline content. click ok. hopefully that will clear your temporary internet folder. you can also clear the temporary folder by running the Disk Cleanup program.

 

Great idea... I dhoulod have thought of that but I have neen up all night..

Unfortunatley it did not work... None of the temporary files under IE% were deleted... I don't understand....

 

Have you tried on google? type the name of the virus on as it is with " " marks and search. That's what I usually do when I encounter one that I can't disable.

 

I am not able to do a reformat right now..too much work I have to do. Getting a new ASUS z70va in the next couple of weeks ...Maybe then...

No sign of hijaking...Norton tried to remove it , quarantine it , etc. and couldn't

I can run spy bot and ad-aware and see what happens

 

How do you mean "on google"? I only know how to search my computer through Windows explorer (I am running 98SE)

 

I meant google as in google.com. I do this when I don't have the answer on something. Chances are you will find the cure for that virus. You should update your antivirus once you get rid of this one.

 

My virus def is always up to date. I checke djust to make sure.

SO I don;t understand Norton's message and why it can't delete this file (nor anythign else.)

I did google to no avail

I also don't understand...doesn't turning the computer on and off get rid of temp internet files?

 

Sometimes you have to use the recovery disk or at least just go back in time with recovery. Have you tried CrapCleaner or any of the other downloadable spy removal programs?

 

Have you checked your registry? The thing with viruses is that they write themselves on the registry so they start at startup, which makes it active and unable to erase while using windows. Sometimes entering on safe mode works and sometimes eliminating the entry in the registry works too.

The other solutions I can think of is if you have linux installed in your computer, boot up from there and erase the file manually (which is unlikely) or if you have another computer, access your HDD from the other computer and erase it manually.

Google should give you more information on your virus. Type the name exactly as Norton shows it between quote marks. There is bound to be a solution there.
I would help you out on that one but I'm at work and unable to use google. Sorry.

 

Google "Stinger". Download the most recent version. Reboot into Safe Mode and run Stinger. It's especially useful for getting rid of Trojans, and I'm pretty sure Downloader is one of the ones it does. Also, never try to remove a virus from anything but Safe Mode and the Administrator account -- odds are, it won't work otherwise.

 

Safe mode diesn't seem to let me rin basic programs...it wouldn't let me run any programs.

Yes I have scanned the registry and there is nothing there. I have run Adaware and nothing

Searched via google for stinger...can't find a download site,,,,

neither adaware nor spybot come up with any thing....

 

It seems gone now... no trace on computer...

 

good to know that

 

Yeah, good to know.

Well, this is what I came up with using google for this virus. I may be a little late but I couldn't google while at work. If it comes back here's what to do: http://securityresponse.symantec.com/avcenter/venc/data/downloader.trojan.html

 

http://vil.nai.com/vil/stinger/

Safe Mode isn't supposed to let you run most things. It's an ideal environment for virus/spyware removal because most viruses/spyware can't run under safe mode.

 

http://securityresponse.symantec.com/avcenter/venc/data/js.downloader.trojan.html

How to remove Downloader.Trojan ?

http://www.f-secure.com/v-descs/jeem.shtml

Just to mention few results of googling.


My impression is that that unless you are not busy with extremely sensitive data, you can live with this trojan untill you finish you current urgent job. Usually HiJackThis is used to evaluate the damage and then to consult experienced users on proper internet antivirus forums. It is not that easy to remove the spyware cleanly and safely by hand. It is not just a file or a register to be removed. Do you have your trojan here: Windows/system 32/12rt0.dll?


On a German forum I just found out this trojan is easily cleaned using the program Amok DelayDel (click on EN for the translation).

 

One more thing: Firefox

 

hmm.....Norton Internet Security lets you down sometimes. I wouldn't recommend you delete the virus form a particular folder, but you should delete the program using other anti-virus software. Try AVG Free and run a full system scan using that. It is very good with trojans and best of all, it's free!

 

I had the same problem a couple days ago. I used CWShredder to delete the downloader.trojan while in safe mode. Just make sure you turned off system restore prior to that. After rebooting and starting "normal" again I deleted all my temp. internet files and reactived system restore. Norton has not alerted me of the trojan since doing that. Good luck.