download.trojan - Is there more?

briendbriend
edited May 2005 in Science & Tech
My anti virus program Norton, finds "download.trojan" on my system, says it quarantens it but keeps showing up. Could I have another virus and not know it? Is there a way to check whether I do if Norton isn't picking up on it? I have done what Microsoft and Norton say to do to get rid of the virus, but has had no impact on its removel. Can anyone help or suggest something for me to try and rid my computer of this problem?
Thanks
brien :scratch:

Comments

  • PaperghostPaperghost Toshogu Central
    edited December 2004
    if Norton keeps removing but the trojan returns again and again, you may have it wedged in your system restore files which is why Norton cant get rid of it. Where does norton say the trojan is located?
  • SweetLD215SweetLD215 Florida, USA
    edited January 2005
    I need help! I have a downloader.trojan virus on my computer at the C:\WINDOWS\system32\2dm3d.dll file. I have done the following:

    I ran Norton Antivirus - it said it could not delete the file
    I tried to go to the file location and delete it but it says:
    "Cannot delete 2dm3d.dll: Access is denied
    Make sure the disk is not full or write-protected and that the file is not currently in use"
    I made sure that nothing was running when I did this and my task manager was empty...

    Then...
    I disabled system restore, updated the norton antivirus
    Re-started the computer in safe mode
    Re-ran the norton antivirus
    Attempted to manually delete the file but could not
    Deleted all references to the file and to "downloader trojan" in the registry
    Re-ran Norton antivirus (still in safe mode) and it still had the virus
    Stayed in safe mode and ran Ad-Aware SE Personal - it did not find that virus but it found other junk
    Got out of safe mode, re-ran Norton and it was still there and still couldn't be deleted
    I tried to delete it manually again but got the same "access denied" message

    I re-did all the same stuff with safe mode, but nothing has worked ... the virus continues to plague me. :bawling: Please, please, please help me... I am desperate to get rid of this thing!

    Thank you! :thumbsup:
    Michelle

    feel free to AOL IM me if you want to: SweetLD2155
  • Access_DeniedAccess_Denied tennessee
    edited January 2005
    ok try this, make a notepad on your desktop and put C:\WINDOWS\system32\2dm3d.dll in it so you do not forget the exact location of the virus. restart your computer in safe mode (typicaly its done by hitting the F8 key during startup) then find the file and Shift+delete it. restart and scan your system
  • SweetLD215SweetLD215 Florida, USA
    edited January 2005
    Hey! First I want to say, thank you for responding. I tried just what you said but the stupid virus is still there...
    Plus I'm still getting that annoying pop up saying that Norton "Unable to repair this file" and when I click ok to that it says "Access to the file was denied" and continuously toggles back and forth between the two! UGH!

    When I tried to do that Shift + Delete (in safe mode) that you said it gave me the same message as before
    "Cannot delete 2dm3d.dll: Access is denied
    Make sure the disk is not full or write-protected and that the file is not currently in use"

    What else can I do? :scratch:
  • SpywareShooterSpywareShooter 127.0.0.1
    edited January 2005
    Did that happen in Safe Mode too?
  • fulelfulel
    edited April 2005
    i am also suffering the same problem here in my pc. always norton anti virus is informing me that there is download.trojan virus in my pc. and affected file is "c:\winnt\system32\o"
    in the normal mode and safe mode i deleted the said affected file. but in vain. the affefected file is being created again and again. i am using windows 2000.
    any solution from you?
  • jaredjared College Station, TX Icrontian
    edited April 2005
    Your best bet would to be to post a HiJackThis log in the Spyware forums :)
  • SpywareShooterSpywareShooter 127.0.0.1
    edited April 2005
    The "o" problem sounds more like Revop or Qhosts to me. I've had those trojans multiple times on my old computer (they're what made me start creating Spyware Shooter and start learning more about spyware), and they created multiple files called "o" and "o.bat".
  • jasonpeinkojasonpeinko
    edited May 2005
    i am posting because my dad has the same problem and norton wants to charge him around $69 for a walk through on how to remove it! so does any one know how to remove it? :scratch:
  • DexterDexter Vancouver, BC Canada
    edited May 2005
    See reply number 8 above :)

    Dexter...
  • jasonpeinkojasonpeinko
    edited May 2005
    jared wrote:
    Your best bet would to be to post a HiJackThis log in the Spyware forums :)
    what do you mean by that??/
Sign In or Register to comment.