Home News Forum Articles
  Welcome back Join CF
You are here You are here: Home | Forum | trojan infection


You are currently viewing our boards as a guest which gives you limited access to view most of the discussions, articles and other free features. By joining our Virgin Media community you will have full access to all discussions, be able to view and post threads, communicate privately with other members (PM), respond to polls, upload your own images/photos, and access many other special features. Registration is fast, simple and absolutely free so please join our community today.


Welcome to Cable Forum
Go Back   Cable Forum > Computers & IT > Security & Virus Discussion

trojan infection
Reply
 
Thread Tools
Old 11-04-2004, 23:56   #1
cf.member
 
fatmat8's Avatar
 
Join Date: Oct 2003
Location: belfast northern ireland
Age: 63
Services: ntl
Posts: 68
fatmat8 is on a distinguished roadfatmat8 is on a distinguished road
Thumbs up trojan infection

avg picked up a trojan on my pc , could not heal said trojan but has placed it in avg's vault.
it name is "downloader.agent t "showing an attachment to "nslite.dll"
any advise would be gratefully received.
__________________
peace & happy thoughts
fatmat8 is offline   Reply With Quote
Old 12-04-2004, 00:01   #2
Permanently Banned
 
Defiant's Avatar
 
Join Date: Apr 2004
Location: Salford(UK)
Age: 37
Posts: 976
Defiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to all
Send a message via ICQ to Defiant Send a message via AIM to Defiant Send a message via MSN to Defiant Send a message via Yahoo to Defiant
Re: trojan infection

Try this out www.trojanscan.com
Defiant is offline   Reply With Quote
Old 12-04-2004, 00:05   #3
cf.member
 
fatmat8's Avatar
 
Join Date: Oct 2003
Location: belfast northern ireland
Age: 63
Services: ntl
Posts: 68
fatmat8 is on a distinguished roadfatmat8 is on a distinguished road
Re: trojan infection

tried housecall , trojan scan , stinger all of which see the beastie & direct me to avg again which puts it back in its vault mmmmmmmmm.
__________________
peace & happy thoughts
fatmat8 is offline   Reply With Quote
Old 12-04-2004, 00:08   #4
cf.mega poster
 
kronas's Avatar
 
Join Date: Jun 2003
Location: heckmondwike
Age: 22
Posts: 10,768
kronas is cast in bronzekronas is cast in bronzekronas is cast in bronzekronas is cast in bronze
kronas is cast in bronzekronas is cast in bronzekronas is cast in bronzekronas is cast in bronze
Re: trojan infection

Quote:
Originally Posted by fatmat8
tried housecall , trojan scan , stinger all of which see the beastie & direct me to avg again which puts it back in its vault mmmmmmmmm.

this program will cure it

http://www.pestpatrol.com/Downloads/...omeEvalNew.asp
__________________
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
kronas is offline   Reply With Quote
Old 12-04-2004, 00:09   #5
Permanently Banned
 
Defiant's Avatar
 
Join Date: Apr 2004
Location: Salford(UK)
Age: 37
Posts: 976
Defiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to all
Send a message via ICQ to Defiant Send a message via AIM to Defiant Send a message via MSN to Defiant Send a message via Yahoo to Defiant
Re: trojan infection

or can you use the command prompt to delete it
Defiant is offline   Reply With Quote
Old 12-04-2004, 11:08   #6
cf.member
 
fatmat8's Avatar
 
Join Date: Oct 2003
Location: belfast northern ireland
Age: 63
Services: ntl
Posts: 68
fatmat8 is on a distinguished roadfatmat8 is on a distinguished road
Re: trojan infection

could you please explain the "command" prompt defiant
using simple phrases please
__________________
peace & happy thoughts
fatmat8 is offline   Reply With Quote
Old 12-04-2004, 11:14   #7
Cable Forum Team
 
Russ B's Avatar
 
Join Date: Jun 2003
Location: Port Talbot
Age: 34
Services: Tmobile WnW HSDPA
Posts: 20,299
Russ B has a pair of shiny starsRuss B has a pair of shiny starsRuss B has a pair of shiny starsRuss B has a pair of shiny stars
Russ B has a pair of shiny starsRuss B has a pair of shiny starsRuss B has a pair of shiny starsRuss B has a pair of shiny starsRuss B has a pair of shiny starsRuss B has a pair of shiny starsRuss B has a pair of shiny stars
Send a message via Skype™ to Russ B
Re: trojan infection

Click start>>run then type in "command" or "cmd" (without the inverted commas).

This brings up the command screen, not sure where Defiant is going with this though: I'd recommend what Kronas says really.
__________________
I worry about my nan. She lives alone. If she fell over, would she make a noise?

The king and cage
Russ B is offline   Reply With Quote
Old 12-04-2004, 11:43   #8
 
Maggy J's Avatar
 
Join Date: Jun 2003
Location: between Portsmouth and Southampton.
Age: 56
Services: VM DTV,VM 2MB,VM Phone
Posts: 19,443
Maggy J has a lot of silver blingMaggy J has a lot of silver blingMaggy J has a lot of silver blingMaggy J has a lot of silver bling
Maggy J has a lot of silver blingMaggy J has a lot of silver blingMaggy J has a lot of silver blingMaggy J has a lot of silver blingMaggy J has a lot of silver blingMaggy J has a lot of silver blingMaggy J has a lot of silver blingMaggy J has a lot of silver blingMaggy J has a lot of silver blingMaggy J has a lot of silver blingMaggy J has a lot of silver blingMaggy J has a lot of silver blingMaggy J has a lot of silver blingMaggy J has a lot of silver blingMaggy J has a lot of silver bling
Send a message via AIM to Maggy J Send a message via Yahoo to Maggy J
Re: trojan infection

Go to the AVG site and ASK for help.Check their faq's first.With AVG,I've in the past had to go into DOS to remove a virus.Better still get a better AV scanner even if you have to buy one.

Incog.
__________________
Prejudice is opinion without judgement...Voltaire.
Is still Incognitas at heart.
If it's bold it is a moderation technique.
If it's soft it's Coggy speaking.
Maggy J is offline   Reply With Quote
Old 12-04-2004, 12:00   #9
cf.member
 
fatmat8's Avatar
 
Join Date: Oct 2003
Location: belfast northern ireland
Age: 63
Services: ntl
Posts: 68
fatmat8 is on a distinguished roadfatmat8 is on a distinguished road
Re: trojan infection

thank for your very prompt replies , i will try once more
__________________
peace & happy thoughts
fatmat8 is offline   Reply With Quote
Old 12-04-2004, 13:11   #10
Google it!!
 
Paul's Avatar
 
Join Date: Jun 2003
Location: Essex
Age: 34
Services: Sky Digital + 16Mb ADSL BT Telephone
Posts: 14,949
Paul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered stars
Paul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered stars
Re: trojan infection

Are you sure this infected file isn't in your system restore file and therefor being replaced as soon as you are deleting it? A similar trojan found on a pc I use deleted properly first time. What information is AVG giving as to the location of the infected file?
__________________
Paul is online now   Reply With Quote
Old 12-04-2004, 13:24   #11
Permanently Banned
 
Defiant's Avatar
 
Join Date: Apr 2004
Location: Salford(UK)
Age: 37
Posts: 976
Defiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to allDefiant is a name known to all
Send a message via ICQ to Defiant Send a message via AIM to Defiant Send a message via MSN to Defiant Send a message via Yahoo to Defiant
Re: trojan infection

Quote:
Originally Posted by Paul
Are you sure this infected file isn't in your system restore file
R yes forgot some people use that
Defiant is offline   Reply With Quote
Old 12-04-2004, 15:02   #12
cf.member
 
fatmat8's Avatar
 
Join Date: Oct 2003
Location: belfast northern ireland
Age: 63
Services: ntl
Posts: 68
fatmat8 is on a distinguished roadfatmat8 is on a distinguished road
Re: trojan infection

silly me , should have said i'm running 98se which doesn't have a restore point

avg has "downloader.agent t" in it's virus vault , which i have released , disabled avg , and then i ran trojan scan which is not picking it up.also ran "swatit" , "stinger" all of these programs doesn't see the swine but only avg seems to pick it up.
__________________
peace & happy thoughts
fatmat8 is offline   Reply With Quote
Old 12-04-2004, 15:10   #13
cf.mega poster
 
kronas's Avatar
 
Join Date: Jun 2003
Location: heckmondwike
Age: 22
Posts: 10,768
kronas is cast in bronzekronas is cast in bronzekronas is cast in bronzekronas is cast in bronze
kronas is cast in bronzekronas is cast in bronzekronas is cast in bronzekronas is cast in bronze
Re: trojan infection

Quote:
Originally Posted by fatmat8
silly me , should have said i'm running 98se which doesn't have a restore point

avg has "downloader.agent t" in it's virus vault , which i have released , disabled avg , and then i ran trojan scan which is not picking it up.also ran "swatit" , "stinger" all of these programs doesn't see the swine but only avg seems to pick it up.
does this apply to you ?

http://www.doxdesk.com/parasite/MoneyTree.html

Quote:
MoneyTree/NSLite: installs nslite.dll and nslite.inf in the Downloaded Program Files folder.
Quote:
Removal Open the 'Downloaded Program Files' folder (which can be found in the Windows folder), and delete the entry for 'NSUpdateLiteCtrl Class' (NSUpdate variant), 'NSLiteUpdateCtrl Class' (NSLitevariant), 'MoneyTree Dialer' (UniDist variant), 'MultiDist' (MultiDist variant), or 'Software Update Manager' (DyFuCA variant).
__________________
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
ENGLAND ENGLAND ENGLAND ENGLAND ENGLAND
kronas is offline   Reply With Quote
Old 12-04-2004, 16:37   #14
cf.member
 
fatmat8's Avatar
 
Join Date: Oct 2003
Location: belfast northern ireland
Age: 63
Services: ntl
Posts: 68
fatmat8 is on a distinguished roadfatmat8 is on a distinguished road
Re: trojan infection

that sounds right , it will be later tonight when i shall have a chance to look at it , i remain indebted to you kind folk out there for all the help i have received. thank you once more.
__________________
peace & happy thoughts
fatmat8 is offline   Reply With Quote
Old 12-04-2004, 17:43   #15
Cable Forum Team
 
Russ B's Avatar
 
Join Date: Jun 2003
Location: Port Talbot
Age: 34
Services: Tmobile WnW HSDPA
Posts: 20,299
Russ B has a pair of shiny starsRuss B has a pair of shiny starsRuss B has a pair of shiny starsRuss B has a pair of shiny stars
Russ B has a pair of shiny starsRuss B has a pair of shiny starsRuss B has a pair of shiny starsRuss B has a pair of shiny starsRuss B has a pair of shiny starsRuss B has a pair of shiny starsRuss B has a pair of shiny stars
Send a message via Skype™ to Russ B
Re: trojan infection

No need to thank us - just remove the uneccessary apostrophe from your sig and we'll say no more about it :pp
__________________
I worry about my nan. She lives alone. If she fell over, would she make a noise?

The king and cage
Russ B is offline   Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


All times are GMT +1. The time now is 06:34.


Links
Google
 
Web www.cableforum.co.uk


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.1.0
Copyright © 2003 - 2008, Cable Forum.
(s204569790.onlinehome.info)