PDA

View Full Version : Backdoor Trojan


Dr.MAD
05-18-2003, 05:26 PM
I have some serious problem here...
When I was cleaning all my temp internet files, my Norton Anti Virus warned me of the presence of the Backdoor.Trojan located in the C:WINNT/System32/TCPOSMOD.exe file. I scanned the file manually, and yes, it is infected. Norton could not repair or uninfect the file, all it could do is to place it in quarantaine (is that the correct word?)

The question is: may I just delete this file? Or should I format my HDD? I should format one of these days anyway.
I have a firewall that can protect me against hackers, but I still prefer to see this file uninfected or deleted.

Any suggestions? (using NAV 2001 and Win 2000)

poi
05-18-2003, 09:32 PM
Try this (http://www.anti-trojan.net/en/) . It has a 14 day free trial.:)

Rocol
05-18-2003, 09:41 PM
Looks good Poi .. should do the trick ;) @ Spy .. I think that you will find that the Trojan in .. TCPOSMOD.exe .. has something to do with Hotmail / MSN ... you could also just try binning the suspect file and then reboot and see what / if anything is affected by it's absence .. but it may be a trojan that has placed a key in your registery .. and will reactivated upon boot up .. best try Poi's advice first to see if that will remove it ;) :cool:

NorthViking
05-18-2003, 11:36 PM
What is the name of the trojan virus ?

You can look how to remove it @ http://securityresponse.symantec.com/avcenter/vinfodb.html#threat_list

Also you can do a scan here:
http://security.symantec.com/ssc/lunavbrk.asp?scantype=2&langid=ie&venid=sym&plfid=23&pkj=LKPJPJUIYCZRWEJGSSK

I suggest you to get the latest NAV 2003.