TrojanS

[brk1221]

Hi, some users on our network have been getting alerts from their AV software about trojans found. It says thay are located in: C:\Documents and Settings\Administrator\Local Settings\Temp and the files are similar to the following: 19792.exe, 28417, 3152.exe. You can delete them but usually they come back. Our AV software is up to date. Any suggestions?

Thanks
Tim

 

[rpearson]

Assuming you are using XP , be sure System Restore is deactivated during the disinfection process. What OS are you using?

 

[brk1221]

XP Home and Windows 2000

 

[aquias]

My thought, is that you have a system infected (or file) that isn't being picked up for some reason that is causing a re-infection on your network.

I'd run a virus scan on all servers and workstations (if possible) and see what you come up with.

 

[StNixon]

Also try Stinger from McAfee. If it is a Trojan that will fing and clean it. Then get a second program and do it again.

Stance

 

[Kesser]

Also run adaware se, spybot 1.3, with all defs up to date and try sysclean from Trend, no-one else on here seems to know/trust it but I use it every day and find that it picks up trojans that stinger certainly doesn't...

Kes