AGH.. Virus i win32cfp.exe.. HVAR GØR JEG !

Win32.Asylum.013 trojan hedder virusen

Få lavet en dosbootdisk med antivirus på og boot op med den..

Skal jeg sende dig en nyopdateret Reference ITPE diskette?

Har lige opdateret Virusscanneren i formiddags.

http://www.f-prot.dk/

På denne webside kan du få en dos udgave af et antivirus program. Det kan bruges også på inficeret maskine, da det udpakkes over to gange til to bootdisketer.

Kristian

Det er jo ikke altid, at virus kan fjernes fra en fil, og så kan man blive nødt til at slette hele filen, og evt. erstatte den med en clean udgave.

Freeman>> Her er opskriften til at fjerne den (går ud fra at du stadig har den da du ikke har accepteret nogle svar i dette spm.):

Description:
TROJ_ASYLUM is a Win32 Trojan that is similar to other backdoor hacking tools. This is the server side of the hacking tool, which enables a remote user to gain access to your computer. It does this by installing itself in the system by dropping an exact copy of the Trojan file and modifying the Windows initialization files to make it run after Windows starts up. Like the famous “Back Orifice Trojan”, this Trojan compromises network security since it gives system administrator privilege to a remote user via the Internet.

Solution:


Modify the line: Shell = Explorer.exe win2000.exe (or wincmp32.exe)
in system.ini to:
Shell = Explorer.exe
Remove from win.ini the lines: windows
load=<root>:\\WINDOWS\\win2000.exe(or wincmp32.exe)
run=<root>:\\WINDOWS\\win2000.exe (or wincmp32.exe)
Delete all files detected as TROJ_ASYLUM by Trend antivirus. To do this Trend customers must download the latest pattern file and scan their system. Other email users may use Trend HouseCall, a free online virus scanner.