Virus dialer trojan problem

[mammu]

I have Norton systemworks with zone alarm but even though one virus have been able to enter in my pc.
Its been quartined now. Its name is bgates[2].exe and its a Dialer.Trojan.
Yesterday I saw 2 new network connection created automatically with some numbers(2432534) on them.
I deleted them without opening it.
What should I do?

[mammu]

http://img82.imageshack.us/img82/4988/nebulertrojanvirus3fd.jpg

This file is not even getting deleted.
What to do?

[fdjc4]

You can manually delelte it mammu
there in that posted image shows you where to go ;)


Not only that but i think that Spybot:Seatch & Destroy should also pick this up and remove it for you.


After you get this removed i would recommend installing Spywareblaster, it offers protection for bothe IE and FF users from trojans and dialers as well as some dodgey ActiveX components

Spywareblaster:
www.javacoolsoftware.com

Spybot:Search & Destroy:
http://spybot.safer-networking.de/en/index.html

Hope this is of some help dude

[mammu]

I already have installed spywareblaster.
But will it harm computer the computer by deleting that file coz its a system file.

It was trojan. nebuler before. Now one more virus dialer. trojan has entered. WTF with norton.

[Lucifer]

I had the same problem, use the a^2 program to clear it, http://www.mgforums.com/forums/showthread.php?t=47718

[fdjc4]

this happens now and again but no mammu it shouldn't harm ur computer if you remove it.
Tts a trojan that was designed to intergrate intself into the windows folder, it should be ok to manually delete it dude.


Do you update spywareblaster often and "enable all protection"?

Spybot you should also consider installing, great little program.

[mammu]

Ok now let me give it a try.
First I have disable system restore and then I need to reboot and then go into safe mode and then scan there and then delete the files manually.
Am I right?

[mammu]

Oh my god now trojan.horse has entered.
what hell is hapening?

[Lucifer]

disconnect any dial up cable you may have and make sure your firewall has not given acces to the trojan. You should be fine unitl its removed. If you dont have a firewall then disconnect and run the virus and all the other scans in safemode.

[fdjc4]

Go to safe mode
dont connect to the net, run your scans

[mammu]

In safe mode also this virus file is not getting deleted!

[Dr. F.G. Hobo]

do the simplest way : format de hdd ;)

[fdjc4]

i dont tihnk he wants to do that

mammu have you got ad-aware or anytihng else you can scan with?
there may be a process running thats causing the access denied crap and maybe another program can detect this.


If you really want i know a good website that will aid you:
www.bleepingcomputer.com

they are good with this kinda malware crap.

[mammu]

I have spybot - search and destroy, aawsepersonal, webrootspysweeper, spywareblastersetup351.
Which should I install?

Ah atlast that file got deleted after I cleaned all cookies, temporary internet files, temp folder. Then I again rebooted and then I was able to delete that file personally.
I did googled for the prob and followed the symantec help. Deleted the registry which was making it repeating the virus to appear all the time.
I also scanned by spyware from zone alarm and it detected some spywares.
All deleted and now my comp is back with full power.

[Rocol]

Posts merged .. please use the Edit Button to add additional info to an existing post.

[mammu]

Oh good info shambles.
You took us out of shambles.:grin:
Thanx a lot.