trojan horse

Hello: Can anyone help me my Avast has found a trojan virus. Every 20 to 30 minutes these popups appear, one is called a trojan horse was found and other is adware and anothr called adware.
First popup was a malware name win 32 small-EK[trj]
Malware type trojan horse

2nd one is adware was found Malware Name win 32: Adan-094[adw]
Malware type Adware
3rd one is adware, malware win 32:Adan-078[adw] Malware type adware

I would like to know how to remove these from my computer.

Welcome saintdale to the forum.
Does avast ask what you want to it to do,such as send to virus chest? That would be recomended as the malware can do no harm there.Leave there a week or so to be sure of no problems with your system, then delete.

timcan: the only option given me is to abort. Thanks for a reply

This is during web surfing,right? You arenot infected if you abort connection.

Timcan they pop up every 20-30 min on all programs and even if I’m not on the net. I can leave my computer and when I return they are back on.

Have you done a complete scan with avast?


Welcome to the forums, saintdale. :slight_smile:

You should only the getting the “abort connection” warning if you are connected to the internet. Even then, you should not actually loose your internet connection but only loose the connection to the malware that is trying to download onto your computer. But, you say you are getting this even when you are not connected to the internet? Are you sure some malware has not made a connection without your help?

Can you please post 2 screen shots? … one of the warning message you get when you are connected to the internet and also one when you are not connected to the internet.


saintdale, maybe download and scan with ewido.
http://www.ewido.net/en/

Timcan I can’t seem to get a picture of it saved.
I ran spy sweeper and that didn’t find it.
I’m on the high speed internet so I’m always hooker on.


Timcan suggested for you to use ewido in his last post. Have you done this? ???


yeah get ewido it worked for my trojan horse that no one even knew existed.

For future reference folks:

A user can also get the abort connection warning if a Trojan downloader on the machine is attempting to connect to a malicious web address and download malware from the internet.

Good info Frank and something to go with it. If this is correct it also indicates a lack of either a firewall or one that doesn’t provide outbound protection.

@ saintdale
What is your firewall ?

Although I’m on dial-up, I believe it is possible to disconnect your internet connection so it isn’t always on, only when you require it.

Would Trojan Hunter find it???

Good Morning everyone. I ran wido about six times now and it seem to find 1 thing evertime, but I have not had that pop up again this moring, so I think I got it. thanks for the heip. I have a linksys router thought it was to have a fire wall in it, now I don’t know have to do some checking on that. thanks again for the help.

Hi saintdale,most likely your linksys router does have firewall,but inbound only.Luckly you had a good av to catch this malware trying to connect out. 8) There are several free software firewalls available to choose from that provide outbound protection to give an extra layer of security.

Most hardware routers that have a firewall only protect against inbound threats, so unless your explicitly states it provides outbound protection, I would say it doesn’t.

Zone Alarm free http://www.zonelabs.com works fine with avast and has a reasonably friendly user interface.

Welcome to the forums.

Hello saintdale,

People cannot go out on the Internet these days without proper protection. What is this coming down to? Well only one, and I repeat one, resident anti-virus program, one and only one firewall solution. An anti-trojan program like Ewido or on an older OS a-squared free. And a solution to ward off adware/spyware/scumware, the three free programs: Ad-Aware, Spybot S&D, SpywareBlaster. The latter programs only to be installed when the system has been fully cleaned. What you could do to see whether the system is free of malware: download DrWebCureIt and scan all of your computer with it, download spywareaudit and scan all of your computer with it. No traces of malware, tracking cookies etc. Oh and keep the crap out from your machine by downloading and installing CCleaner. Surf safe - stay secure!

polonus


Hi Frank,

Thanks for your post as it is a little clearer than mine above it. :slight_smile:

http://forum.avast.com/index.php?topic=20141.msg168809#msg168809

That was what I was trying to indicate in my post. :wink:


No problemO CharleyO! :smiley:

Here’s Igor’s original confirmation that Trojan downloaders already on the computer may trigger the ‘Abort Connection’ alert.

http://forum.avast.com/index.php?topic=18293.msg155804#msg155804