win32.trojandownloader.vb

Viruses and worms
1

:frowning: I have a Compaq Presario SR1020nx, with a 2.80 ghz Intel Celeron processor, 1024 mb ram, 80 gb Ultra DMA hard Drive, running Windows XP home edition SP2. I have the latest version of AVAST, and Ad Aware SE loaded on my system. I did a scan with both yesterday and AD Aware said I had the "win32.trojandownloader.vb " on my system. My question, why didnā€™t AVAST catch that before it managed to insert itself on my computer?

2

What is the name and location of the file. And have you uploaded the file to jotti to check for false positives http://virusscan.jotti.org/

3

Essexboy,

I am not at home, at work so I canā€™t answer the first question. I have not loaded it to Jotti. I will have to do that when I get home (In about 10 hours). I suppose I could call home and have the wife try and look this up for me, but she is quite ā€œPC challengedā€ ;D

4

:slight_smile: Hi Sandwarrior :

 So did Ad-Aware "quarantine" it ?  One program does not
 catch everything. For trojan detection, the premier FREE
 program is "Ewido" from www.ewido.net/en ; this program
 has a "tutorial" at :
 www.greyknight17.com/spy/Tutorials/ewidoQuickGuide.pdf
5

SpiritSong,

Yes, I quarantined it. I was concerned that my system would get the ā€œkama sutraā€ virus. Mainly because my daughter has absolutely no discipline when it comes to opening attachments from ā€œfriendsā€ . Managed not to ge that one. I also use CCleaner, HJT, and 2 others I canā€™t remember, but I will add Ewido to my arsenal when I get home.

Bill

6

:slight_smile: Hi Sandwarrior :

  You are quite correct that your machine is in a lot of
  jeopardy with a daughter who opens attachments. I recall
  a thread where someone opened an attachment they
 "thought" came from a friend and were hit with bad 
  malware that was difficult to remove. To PREVENT spyware
  from getting on your machine, I would encourage you to
  install SpywareBlaster from www.javacoolsoftware.com ;
  should consider also installing their "SpywareGuard", as
  long as you do NOT have Spybot's "Teatimer".