how to remove a trojan downloader

[stryderblaze]

can anyone tell me if there's a way to remove a trojan downloader virus without having to reformat the hardrive it infected the backup files of my brother's computer

 

[stryderblaze]

windows xp service pack 2 my brother's computer is an emachine t3418
sempron(tm)processor 3400+ 2.01ghz
896 ram the virus that infect the backup files is a trojan horse downloader.generic6.cbw

 

[stryderblaze]

my brother has avg anti virus program but the program couldn't remove it or heal it

 

[mike_n_herrin]

I also couldn't find that exact name. I did find some with everything up to the "6" and the discussion on those message boards said to try this online scanner:

http://www.kaspersky.com/virusscanner

you may also want to try spybot search and destroy, although I don't know if it will detect trojan downloaders.

spybot: http://fileforum.betanews.com/download/Spybot_Search_and_Destroy/1043809773/1

how to use spybot: http://www.bleepingcomputer.com/tutorials/tutorial43.html

 

[provenlogic]

Couldn't find anything about that specific virus name either, are you sure that's the correct name? What gave you that name? AVG? Or something else?

 

[knobgoblin]

You might try Hitman Pro. It'll take quite a while to run, probably at least three hours.

http://www.hitmanpro.nl/hitmanpro/content/view/3/9/lang,en/

 

[hunky]

download and use Spybot. I use it and it gets rid of all these crap. It is excellent.

 

[stryderblaze]

avg told me and my brother said when he goes to install spybot it closes out on him when get's to the install wizard

 

[provenlogic]

avg told me and my brother said when he goes to install spybot it closes out on him when get's to the install wizard

OH RLY.... Does it give him any messages? Have you searched the AVG website for the virus?

 

[hunky]

avg told me and my brother said when he goes to install spybot it closes out on him when get's to the install wizard

First time I hear that. So Well...

 

[knobgoblin]

Found the following on another forum for removing downloader generic6...

Download this file :


http://download.bleepingcomputer.com...a/ComboFix.exe

Double click combofix.exe & follow the prompts.

Note:
Do not mouseclick combofix's window while its running. That may cause it to stall

=====================
Download Superantispyware (SAS) free home version

http://www.superantispyware.com/supe...freevspro.html

Install it and double-click the icon on your desktop to run it.
· It will ask if you want to update the program definitions, click Yes.
· Under Configuration and Preferences, click the Preferences button.
· Click the Scanning Control tab.
· Under Scanner Options make sure the following are checked:
o Close browsers before scanning
o Scan for tracking cookies
o Terminate memory threats before quarantining.
o Please leave the others as they were.
o Click the Close button to leave the control center screen.
· On the main screen, under Scan for Harmful Software click Scan your computer.
· On the left check C:\Fixed Drive.
· On the right, under Complete Scan, choose Perform Complete Scan.
· Click Next to start the scan. Please be patient while it scans your computer.
· After the scan is complete a summary box will appear. Click OK.
· Make sure everything in the white box has a check next to it, then click Next.
· It will quarantine what it found and if it asks if you want to reboot, click Yes.

 

[knobgoblin]

Also, in the last month or so, AVG was giving some false positive reports concerning "downloader.generic6", mostly in the exe file for AdAware. Subsequent AVG definitions files have fixed this problem so make sure you have the latest updates downloaded.