trojan intell 32

Viruses and worms
1

hello i been infected with Trojan intell 32 the beta tool from microsoft detected every time i scan my pc i removed but keeps coming back i tried to download avast home edition but dont let me do it what can i do?

2

This is the problem of installing an antivirus after the infection :-[ :cry:
Why don’t you try to scan your computer on-line, get clean first and then try to install avast?
www.trendmicro.com is one of available on-line scanners…

3

What was the file name and location of the infected file, example (C:\windows\system32\infected-filename.xxx)?

i tried to download avast home edition but dont let me do it
Please explain exactly what won't let you di, what happens, error/warnings/etc. ?

It looks like it is blocking access to AV sites, possibly using the Hosts file.

A google search for Trojan.intell32 returns lots of hits.
http://research.sunbelt-software.com/threat_display.cfm?name=Trojan.intell32&threatid=41240

Alias: Trojan:Win32/Small.EV

Threat type: Trojan
Advice: Remove

Threat risk: Severe Risk
Severe threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction and exploits are in the wild. There exists a high possibility of potential system damage or security flaw. Attacker has complete control over your computer or install new software on your machine.

There may well be a process running for intell32.exe end the process, search for and delete the intell32.exe file. That may allow you to download other software, if so download avast and Ewido Security Suite If using winXP. or a-Squared free if using win98/ME.

4

Hi Sams,

Here is the info on the process you could remove using HijackThis if DavidR’s method should not work:
http://www.bleepingcomputer.com/startups/intell32.exe-11499.html

greets,

polonus

5

That should certainly help to do a manual clean and hopefully allow Sams to download again.

Sams may be able to find the run startup command using Start, Run, type msconfig Startup Tab.(depending on what windows he is using).

6

Hi Sams,

You will need to run Noahdfear’s SmitRem tool followed by Ewido, as mentioned by David above.

http://forum.avast.com/index.php?topic=17172.msg147210#msg147210

Run both programs in Safe Mode. (Tap F8 while rebooting.)