Re: How to get rid of two trojans

[H Carvey <keydet89 () yahoo com>]

In-Reply-To: <20040704092212.12944.qmail () mail2 securityfocus com>

> AVG free edition shows two trojans; IRC. Backdoor.SdBot.29.T, 

I went to the Grisoft web site and did a search for "backdoor" in the virus encyclopedia, and there is no listing for 
SdBot.  A search for "sdbot" returns nothing.  A search for IRC doesn't return anything that applies.

> and Proxy.6.AG
> kjhbb.exe and gfhhr.exe in system32 folder but it cannot clean them. Of
> course deleting the files is no cure, because they come up again anad again.

You're most likely not killing the malware process.

> Trend Micro housecall and Norton AV 2003 does not even show them.
>
> I could not find any mention of them in Symentec Web site.

Try "Symantec" instead, or http://www.sarc.com.  Search for "sdbot" rather than the name given by AVG...not all malware 
is named the same thing by all a/v vendors.


---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------