does anyone know what this is

[studlymouse]

i found a trojan on my computer called ' (no ] ' and my trojan detectors will find it but wont delete it, can anyone give me some info about this trojan or know how i can delete it, thank you in advance

 

[AVChap]

Check if the executable for the Trojan is loaded in memory. If so, kill the process.

HTH, AVChap
... take my advice, I don't use it anyway!

 

[studlymouse]

it is not loaded in memory, but it is running, invisible, i cant find it anywhere to kill it

 

[AVChap]

What's the executable file name? AVChap
... take my advice, I don't use it anyway!

 

[studlymouse]

its hidden inside ie

 

[studlymouse]

pop1[4] c:\windows\temporary internet files\content. ie5\otan81q7 is primary file

 

[Kento]

Well if it's in the temporary internet files folder then delete those files through internet options and that should get rid of it. It that one file won't delete then restart into safe mode and remove it from there.

 

[studlymouse]

tried that, rebooted in safe mode and the file isnt there, and if i delete or try to rename, it denies access to it

 

[AVChap]

Clean out your Temporary Internet Files by right-clicking on the IE logo, select properties, then click on Delete Files. Hopefully this removes this.

HTH, AVChap
... take my advice, I don't use it anyway!

 

[studlymouse]

no its not, it denies access to the file, i cant even rename it, and i cant find the trojan on any of the anti-virus sites i know of

 

[MKuiper]

Being unable to delete files may also be caused by some sort of corruption of your file system. If this is the case, scandisk (9x/me) or chkdsk (NT/2000/XP) should be able to fix it. Marcel

 

[Kento]

What operating system is it? You could try deleting the file from pure dos mode or the whole TIF folder. If you delete the TIF folder Windows should create a new empty one at restart.

deltree /y c:\windows\tempor~1

But if you have 95, 98, or ME go below and get Startlog.com and run it. It'll create 2 text files on your desktop. Copy and paste the results of just Startlog (not the stubpaths file) to your reply here. It may shed some more light on this problem.

http://home.earthlink.net/~rmbox/Reticulated/Only_IE.html