Welcome to SecurityForumz.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Poss trojan?

 
   Security Forums (Home) -> General Discussions RSS
Next:  Running a trojan program and Virus programs a was..  
Author Message
extreme

External


Since: Jul 28, 2003
Posts: 2



(Msg. 1) Posted: Mon Jul 28, 2003 1:09 am
Post subject: Poss trojan?
Archived from groups: alt>comp>virus (more info?)

I just updated my AVG database, and it picked up a back door Ap trojan.
Details are: C:\Windows\system32\XUDERSD.exe.
When I try to remove it to quarantine, a message says the file cannot be
removed.

I checked it with V.3.5 of The Cleaner, which doesn't pick it up at all.

Anybody heard of this one, and how can I get rid of it?

Thanks

 >> Stay informed about: Poss trojan? 
Back to top
Login to vote
kurt wismer

External


Since: Jul 04, 2003
Posts: 1562



(Msg. 2) Posted: Mon Jul 28, 2003 1:09 am
Post subject: Re: Poss trojan? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

extreme wrote:
> I just updated my AVG database, and it picked up a back door Ap trojan.
> Details are: C:\Windows\system32\XUDERSD.exe.
> When I try to remove it to quarantine, a message says the file cannot be
> removed.

generally there is a reason for this, however we can't tell you how to
rectify the problem because you haven't told us the reason the file
cannot be removed... what is the exact message avg gives you when you
try to quarantine it?

--
"when surveys of all the world's countries are done,
canada frequently rates number one.
are we the best country? well we'll never know...
there's nowhere else we can afford to go."

 >> Stay informed about: Poss trojan? 
Back to top
Login to vote
extreme

External


Since: Jul 28, 2003
Posts: 2



(Msg. 3) Posted: Mon Jul 28, 2003 2:01 am
Post subject: Re: Poss trojan? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

"kurt wismer" <kurtw RemoveThis @sympatico.ca> wrote in message
news:wT_Ua.1119$mv6.188874@news20.bellglobal.com...
> extreme wrote:
> > I just updated my AVG database, and it picked up a back door Ap trojan.
> > Details are: C:\Windows\system32\XUDERSD.exe.
> > When I try to remove it to quarantine, a message says the file cannot be
> > removed.
>
> generally there is a reason for this, however we can't tell you how to
> rectify the problem because you haven't told us the reason the file
> cannot be removed... what is the exact message avg gives you when you
> try to quarantine it?
>
That's all it says - "The file C:Windows\system32\XUDERSD.exe cannot be
removed".

When I try and delete it via Windows explorer, it tells me it's being used
by another program. There's also XUDERSD.dll right next to it.

The full name of this is given as Trojan Horse Backdoor.Apdoor.

Thanks
 >> Stay informed about: Poss trojan? 
Back to top
Login to vote
kurt wismer

External


Since: Jul 04, 2003
Posts: 1562



(Msg. 4) Posted: Mon Jul 28, 2003 7:44 am
Post subject: Re: Poss trojan? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

extreme wrote:
> "kurt wismer" <kurtw.RemoveThis@sympatico.ca> wrote in message
> news:wT_Ua.1119$mv6.188874@news20.bellglobal.com...
>
>>extreme wrote:
>>
>>>I just updated my AVG database, and it picked up a back door Ap trojan.
>>>Details are: C:\Windows\system32\XUDERSD.exe.
>>>When I try to remove it to quarantine, a message says the file cannot be
>>>removed.
>>
>>generally there is a reason for this, however we can't tell you how to
>>rectify the problem because you haven't told us the reason the file
>>cannot be removed... what is the exact message avg gives you when you
>>try to quarantine it?
>>
>
> That's all it says - "The file C:Windows\system32\XUDERSD.exe cannot be
> removed".
>
> When I try and delete it via Windows explorer, it tells me it's being used
> by another program. There's also XUDERSD.dll right next to it.
>
> The full name of this is given as Trojan Horse Backdoor.Apdoor.

'in use' for a program generally means that it's currently running...
have you tried scanning from safe mode?

--
"when surveys of all the world's countries are done,
canada frequently rates number one.
are we the best country? well we'll never know...
there's nowhere else we can afford to go."
 >> Stay informed about: Poss trojan? 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
Damn trojan in my temp (probably). Advice needed. - Ok , this is how the situation has. 3 days my firewall poped up and an application in my C:\Documents And Settings\Administrator\Local Settings\temp wanted to connect at port 80 of an address. It had a weird icon and a weird name ( Rar1.exe). I denied....

Running a trojan program and Virus programs a waste of time? - Thanks for opinions of the knowledgable ones:>) Regards Buddy B
   Security Forums (Home) -> General Discussions All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]