I have this trojan in my computer and I can’t get rid of it please help me!
I have gone through an other forum for help and now I can’t even get to that forum for help. I have run a combo fix program and it didn’t get rid of it I have the location where the trojan is please help me get this crap off my computer. Everytime I run the avast it finds it and the when i try to delete it it tells me there was a error and could not delete it or put it in the quarentines bin. these are some of the avast logs
12/7/2007 3:57:47 PM Administrator 4084 Sign of “Win32:Trojan-gen {Delphi}” has been found in “C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Outlook\Outlook backup.pst\Personal Folders\Top of Personal Folders\Junk E-mail\Emailing: cokegift\cokegift.exe” file.
12/9/2007 7:52:03 AM Administrator 2692 Sign of “Win32:Trojan-gen {Delphi}” has been found in “C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Outlook\Outlook backup.pst\Personal Folders\Top of Personal Folders\Junk E-mail\Emailing: cokegift\cokegift.exe” file.
12/9/2007 3:33:43 PM Administrator 2692 Sign of “Win32:Trojan-gen {Delphi}” has been found in “C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Outlook\Outlook backup.pst\Personal Folders\Top of Personal Folders\Junk E-mail\Emailing: cokegift\cokegift.exe” file.
Exercise extreme care this trojan is in an email .pst file and deletion of this could lose all your emails. I don’t use MS Outlook so the names I use may be different so bear with me and try and compensate. avast can’t extract an infected email inside a pst file, it could corrupt it so it doesn’t try to do it, if however you choose to delete a pst file you would lose the emails contained in it.
This appears to be in your backup.pst file/folder and if you can open that from MS Outlook, then you can manually find and delete the infected email manually. Go to the Personal Folders\Top of Personal Folders\Junk E-Mail folder and sort the emails by those with attachments. Now it is a case of finding the one with the attachment cokegift.exe and delete that email. Now clear any deleted items folder and compact folders that should ensure that that email is no longer in the pst file.
This might take a little time but it is better than possibly loosing your emails in that pst file.
I guess that your aren’t looking in the right pst file, based on the file name backup.pst it is a copy/backup of your current pst file whatever that is. As I have said I don’t use Outlook so I don’t know how you migh open the backup.pst with outlook to search for the infected email.
You can’t search for it on your computer as it is ‘inside’ your backup.pst file avast is able to find it as it can look inside the pst file but it can’t extract it as the pst contains all the emails.
I don’t know if that backup.pst file is worth keeping depending on how old it is (file properties, last modified date) or even if you created it and need it.
If as you say “I do not no how to get to the backup files and all of the archived files,” then that backup is of little use. What other .pst files are on your system ?
I can’t add anything useful in terms of getting rid of it, since I don’t use Outlook either.
However, I do know what this “virus” is, if that helps any. Strictly speaking, it’s not a true “virus” as it doesn’t self-replicate. Basically it’s an old prank program. You open it, and a message appears that says something along the lines of “Coca Cola Co. would like to thank you for being a great customer. As a token of our appreciation, we’d like to take this opportunity to present you with a free beverage holder!” When you click “OK”, your CD drive’s tray opens. That’s it. It doesn’t actually harm your computer, although I suppose if the CD drive is in use at the time there could be problems. Also, I’ve read horror stories from frustrated IT support workers who regularly get calls from customers complaining about their “beverage holder” not opening after it closed with a broken plastic drink cup inside it.
Most antivirus programs would classify this as a Potentially Unwanted Program rather than a Trojan Horse.
In other words, don’t lose too much sleep over it.
Thanks for the info on the beverage holder ;D virus ;D
It is more to do with getting rid of it so avast doesn’t continually detect it and it would be unwise to exclude the .pst file as that could possibly leave a hole in your security.
Though personally I feel this backup.pst is somewhat redundant as h4t3h4ck3rs doesn’t seem to be able to load it to be able to search for the infected attachment. If the backup.pst is truly a backup of previous emails than that backup is of negligible use if you can’t use it.
