Win32:trojano-213 grrrrrr

Viruses and worms
1

Hi Quelqu’un parle français ici, ce serait plus facile pour moi ???

I have this trojan and no possible for me to delete it
I have on the journal :
8/11/2004 14:01:54 SERVEUR\Patricia 2440 Sign of “Win32:Trojano-213 [Trj]” has been found in “C:\temp\Installer2.exe” file.
9/11/2004 13:27:59 AUTORITE NT\SYSTEM 1648 Sign of “Win32:Trojano-213 [Trj]” has been found in “C:\temp\Installer2.exe” file.
9/11/2004 13:27:59 AUTORITE NT\SYSTEM 1648 Sign of “Win32:Trojano-213 [Trj]” has been found in “C:\temp\INSTAL~1.EXE” file.
9/11/2004 14:50:17 AUTORITE NT\SYSTEM 1648 Sign of “Win32:Trojano-213 [Trj]” has been found in “C:\temp\Installer2.exe” file.
9/11/2004 14:50:23 SERVEUR\Patricia 3624 Sign of “Win32:Trojano-213 [Trj]” has been found in “C:\temp\Installer2.exe” file.

I delete it in my server but every day it is there again and I really don’t know how can I delete from the autorite nt/system

Some one can help me ?
thank you :slight_smile:

2

Clear the C:\temp\ folder. Run a boot scan and check if clear.

Check out Eddy’s HiJackThis Info and Analysis page, HiJackThis log file analyzer and follow the directions there and get back to us if you need more help…

You might also find the information in this thread very useful General Advice & Tools for virus/trojan/malware removal

3

If you have the scagent service running then this is downloading the trojan.

check my post in Trojan Help (I’d link it here but I haven’t found out how to yet!)

4

hi! pucebe:exceptionaly,i will speak french:
aller dans reglages avast programmer scan de boot,desactiver restauration systeme,redemarrer et c’est tout!
merci de nous tenir informés du résultat
good luck pucebe.
ps:penser à vider fichiers temporaires

5

Hi everyone,
I do have exactly the same Trojan as puce
And I do not know how to get rid of it.
I did desactivate the restore mode and I started in safe mode, cleant the Temp and temporary Internet files.
Then I lanched avast that did not find anything suspect (except a file that was not actually infected :))
But I’m afraid those infected files will be back soon …
Any help appreciated

6

Click on the link in my signature to thoroughly clean your system.