I get this trojan detected all the time but how do I remove it.
Are you using Windows XP?
Can you schedule a boot-time scanning?
Start avast! > Right click the skin > Schedule a boot-time scanning
Select for scanning archives.
Boot.
If you find a virus keeps coming back after you delete it, it’s most probably infected the System Restore folder, the best way to solve this is to disable System Restore, reboot your machine and then enable it again. After all, run a full avast! scanning. System Restore cannot be disabled on Windows 9x and it’s not available in Windows 2k.
Enable/Disable System restore on Windows ME: http://support.microsoft.com/default.aspx?scid=kb;en-us;Q264887
Enable/Disable System restore on Windows XP: http://support.microsoft.com/default.aspx?scid=kb;[LN];310405
Howdy dreameral,
Here you have the info about this backdoor, very hard to find,
but we got it at Tom Coyote:
http://www.k7computing.com/virusinfo/BackdoorLandisC.htm
My Christmaswish for you is, that you soon will get rid of this malicious node, here is the removal information for you:
http://www.k7computing.com/virusinfo/BackdoorLandisC.htm#RemovalProc
greets,
polonus
I have xp.
I tried the regedit and all the csrss files were not there.
The virus states it’s detected in the sys volume
use onboot scan to get rid of virus in such place …
This is part of the protected storage (system volume information folder) used by System Restore, disabling system restore and reboot (as has been mentioned) will clear the restore points in this folder. Check scan your system and if clean, enable system restore again (this will create a restore point on enabling it again).
Whilst an infected file in the sys vol info folder can’t do anything, if you use a restore point to go back to a point in time you could be reinfecting your system, so it is best to clear the sys vol info restor points completely and start with a clean sys vol info.