Full Disclosure mailing list archives
W32/Toolber.c.Trojan Removal?
From: Eric.Fassbender.bgszsiuk () t-online de (Eric Fassbender)
Date: Mon, 6 Oct 2003 15:52:47 +0200
I read about your problems and solutions that you had with the W32/Toolber.c.Trojan and couldn't find any information about how the Trojan spreads and how it is activated. We had an F-Prot bootable CD that found and identified the Trojan, but couldn't remove it. We manually deleted the .exe file and it should be alright now, but I still have two questions left: - Through which possible ways could the .exe enter the system, and how did it activate itself? - Is there any known tool that cleans the system, so we don't have to manually delete the .exe and the registry entries? Hope someone has an answer to these questions, regards, Eric Fassbender IT-Security Officer _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- W32/Toolber.c.Trojan Removal? Eric Fassbender (Oct 06)