Backdoor.Trojan

[philrock]

Many times per day, I get a warning window from Norton AntiVirus 2004 as follows:


Norton AntiVirus
Virus Alert
High Risk
Norton AntiVirus has detected and removed a virus from your computer.

Object Name C:\Program Files\Web_Rebates\WebRebates0.exe
Virus Name Backdoor.Trojan
Action Taken The file was automatically deleted.


The window always comes up in identical pairs, one directly on top of the other.

Any idea what’s going on here, and what to do about it?

 

[petermeachem]

If you are on xp, restart in safe mode and delete the folder. Run hijackthis and delete the entries. Did this just 2 hrs ago. There are two files, WebRebates0.exe and WebRebates1.exe. Delete one and the other restarts it.

http://www.accuflight.com

http://www.lettersdirect.co.uk

http://www.ourhouseinportugal.co.uk/

 

[philrock]

Thanks, Petermeachem

What is "hijackthis?

 

[diogenes10]

http://www.bleepingcomputer.com/for...d21ad4e637d47dd1&act=Tutorials&CODE=01&CID=38

There are tutorials here for several antispyware products.
You can look at the one for hijackthis and get an idea of what you are getting into.

(And please remember, if you start poking around and doing any kind of fixing on your system with or without hijackthis and you are uncertain about what you are doing GET SOME BACKUPS so you can put things back the way they were if anything goes wrong.)



-------------------------------------
It's 10 O'Clock ( somewhere! ).
Are your registry and data backed up?

 

[kjv1611]

You can download hijack this from

http://www.download.com

or

http://www.majorgeeks.com

, and possibly

http://www.webattack.com

- all 3 are safe, and I know the first 2 have it. If you just search google for any spyware apps, be very careful of which link you click...

Stephen
"Jesus saith unto him, I am the way, the truth, and the life:
no man cometh unto the Father, but by me." John 14:6 KJV