Trojan Horse found

Viruses and worms
1

I’m new to avast and I’m not a technical wizard, so I’d be grateful for some help. This morning I ran my weekly avast scan on my local drives, and received a “Trojan Horse found” message. The exact name is Win32:Horst-Gv [Trj]. I followed the recommendation to put it in the virus chest. Yay, avast, for spotting it! But how did it get on my computer in the first place?

2

Could you give the location of where the file was found e.g. C:\windows or wherever as we can then make a better determination Ta

3

Which is your Standard Shield sensitivity level? High or normal?
Is WebShield always turned on (active)?

4

This signature was only added to the VPS on 27.1.2007 - 0707-0 so prior to that it wouldn’t be detected.

This was possibly your first on-demand scan sine that VPS update.

5

Thanks for the response, guys. David, that makes sense about the TrojanHorst-GV just having been discovered.

Tech, I’m not sure what the “standard shield setting” is, but my Provider Configuration for the on-access scanner is Normal. Should i set it higher?

Essexboy, the file was found in C:\Documents and Settings\All Users\Documents\setup.exe[UPX]. Does that mean anything significant?

6

A google search for Horst trojan setup.exe returns many hits some also mention the file autorun.inf being present.

7

hi there, i’m no tech either

avast found the same virus today on my pc , same location too
i removed it to the chest but since yesterday i’m experiencing a weird problem. when hit the Ctrl key (left) my master volume goes mute/unmute and pressing the windows key makes my pc turn off. could it be associated with this virus ? or any other idea what causes this ?

thanks

8

What’s ur Computer Configuration?

9

not sure what you mean but:
AMD athlon 64 3200+
1 GB RAM 667
using Windows XP

10

I certainly don’t recognise it as any virus symptom an certainly not one associated to this Horst trojan. However, it could be that it provides a route into your system for other malware, which may have other effects, but again why would a trojan want to advertise its presence in this way.

If you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode.

  1. Ewido, a.k.a. avg anti-spyware If using winXP. or a-Squared free if using win98/ME.

Does anyone else have access to your system as it could be possible to make a hotkey function to do what you suggest. I did a google search which returns many hits check out some of those or run further searches on the symptoms and see what that brings.

11

thank you

i’ve run avg anti-spyware, found nothing relevant.
i don’t have my “C” drive shared.
i found no solution whatsoever in Windows XP settings (doesn’t mean there isn’t any)
what google hits should i chceck ?

btw, i’m not sure, but i think the problem occured right after yesterday’s avast avs update…

12

This is the google search I ran, http://www.google.com/search?q="windows+key"+makes+pc+turn+off, sorry you will have to check the returns and see if the brief description seems relevant and check that info.

You could do the same thing for the other problem.

The horst-gv detection was in the 27/1/2007 VPS update 0707-0 and not yesterdays update.

13

found nothing relevant :-\

thanks anyway, if i find a solution i’ll let you know

edit: sorry for bothering but one more question

let’s say this could be true, how would one do that ?

edit 2: found another ones - F5 launches Search window and Pause/Break launches Outlook Express… WTF ?

14

In one of the hits in the google search I noticed a bit about key mapping or hotkey actions, which allows you to assign actions (shortcuts) to key strokes, usually two key combinations to avoid accidental actions in a common key use, like the ctrl and windows keys. If they kney how to do that they could assign an action to a single key, it isn’t that difficult, I’ve never used it but possible.

15

LOL, it was the keyboard’s malfunction, two weeks later, it ceased to work at all so i changed it and the problem’s gone
didn’t see that coming ::slight_smile:

16

Thanks for the feedback, I didn’t think of it either or I would have suggested a swap keyboards with a friend (or a spare) and test.