Packed.Win32.klone.g / Win32:klone-N [trg] problem!

Viruses and worms
1

Hi guys,

I recently downloaded a “bad” program (it was recommended by a friend of mine as good, i cant wait the time i will meet him again >:( ). Inside that program was a virus.

This virus infected two of my systems (i had previously executed that program in these computers)

On the one computer (on which i run avast), the virus was identified as Win32:klone-N [trg] , while on the other (with F secure security suite) was identified as Packed.Win32.klone.g . it is obvious that it the same virus.

I deleted the infected file, and double checked that it was deleted.

But, my question is. What damage it may have done to the systems? Deleting the file is enough, or i will have to do something more?

Please, if you know any information/tip/removal method or anything that can be usefull, please post. The one computer was a buisnees laptop, and i must ensure that it is clean an operational

Thanks in advance
kurkosdr

Ps. also, if you know something about the viruses Win32:Trojan-gen {other} and Win32:VB-NL [trj], answer please

2

I’ll suggest:

  1. Disable System Restore on Windows XP: http://support.microsoft.com/default.aspx?scid=kb;[LN];310405
    You can enable it again after step 4.
  2. Clean your temporary files.
  3. Schedule a boot time scanning with avast. Start avast! > Right click the skin > Schedule a boot-time scanning. Select for scanning archives. Boot.
  4. Use a-squared or ewido (trojan removers).
3

Done!! Am i OK know? ??? (sorry for the noob question, but i dont use getting into “bad” sites or running “bad” programms and i dont have an experience n viruses, fortunately)

4

What were the results of the steps 3 and 4?

5

With windows restore disabled completely and the recycle empty, both Fsecure scanning and avast boot scanning showed no more viruses

ewido found some cookies on the laptop (the one with Fsecure) and a hijaker on the other (the one with avast) which i removed

6

So, you’re clean 8) 8)