Security Basics mailing list archives

Re: How to get rid of two trojans


From: "Carlos Bergero" <rak () fcien edu uy>
Date: Tue, 06 Jul 2004 23:38:10 -0300

Hiya all:
The AVG search is preaty crapy, I had several problems looking for
some virus that AVG free found but where not to be found in the
site virus database. Now I found more usefull to do a google search,
some times u have to dig in but it allways pays back. I olso use the
McAfee library, http://vil.nai.com its olso  a good plase to look for.

If what u r facing is actually malware take a look to ad aware
http://www.lavasoft.de I been using it for a wile now and its really
good stuff. Latly I been traying spy bot it seams really good too,
check this http://www.pcworld.com/downloads/file_description/0,fid,22262,00.asp

Cheers,
        rak

*********** REPLY SEPARATOR  ***********

On 06/07/2004 at 11:19 H Carvey wrote:

In-Reply-To: <20040704092212.12944.qmail () mail2 securityfocus com>

AVG free edition shows two trojans; IRC. Backdoor.SdBot.29.T,

I went to the Grisoft web site and did a search for "backdoor" in the
virus encyclopedia, and there is no listing for SdBot.  A search for
"sdbot" returns nothing.  A search for IRC doesn't return anything that
applies.

and Proxy.6.AG
kjhbb.exe and gfhhr.exe in system32 folder but it cannot clean them. Of
course deleting the files is no cure, because they come up again anad
again.

You're most likely not killing the malware process.

Trend Micro housecall and Norton AV 2003 does not even show them.

I could not find any mention of them in Symentec Web site.

Try "Symantec" instead, or http://www.sarc.com.  Search for "sdbot" rather
than the name given by AVG...not all malware is named the same thing by
all a/v vendors.


---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or
less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the
skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------




---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------


Current thread: