Trojan Horse Dropper Generic FWK - Geeks to Go Forums

Jump to content

Log in Register Register Malware removal guide How it works
Page 1 of 1

Trojan Horse Dropper Generic FWK A new variant, object removed but deleted, yet folder it was in freeze

#1 scottportraits

  • Group: Member
  • Posts: 152
  • Joined: 10-September 06

Posted 11 September 2006 - 02:03 PM

[font=Arial]

Hello Pros,

Got a nasty variant of TROJAN HORSE DROPPER GENERIC FWK via P2P Sharing app....inside a zipped program and it's crack.
My latest NAV 2003 definitions missed it, as did Spybot, SpywareBlaster, CWShredder, and AdawareSE.

It wasn't until I installed AVG Free and ran their
scan that it showed up. The folder holding this file froze up every time I opened it, and would only close when terminated by Task Mgr. Once AVG found it, I booted up in Safe-Mode and deleted it from there (should have quarantined the specimen, tho).

Rebooted, and now find the folder it was once in is still freezing up on me.

Also, I've been getting alot of error messages that terminate in the middle of a process lately, especially with this P2P File Sharing Program. 0xc000005, BEX, DrWatson, etc., this kind of thing....see my other post.

I have WinXP Home SP2 and all new updates. But I confess, I use the OS to do too many things....video editing, audio stuff, file sharing, word processing, graphics and digital photo, and more.....so my machine is under alot of strain....

How can I free-up that stuck folder, and scrape [u]any suspicious entries in the registry (?), which these scans have not detected or repaired ???

Sorry I failed to quarantine and save a copy of the object for expert study.....it is obviously a new and insidious variant.

Thank you,

ScottPortraits

#2 Rawe

  • Group: Visiting Consultant
  • Posts: 4,746
  • Joined: 17-April 05

Posted 13 September 2006 - 07:09 AM

Hello and welcome sorry for the delay.. Please follow the instructions here for posting a HijackThis log (Step 5). Post back with the log :whistling:

Share this topic:


Page 1 of 1 (Please log in, or register to add a reply.)