Full Disclosure mailing list archives

W32/Toolber.c.Trojan Removal?


From: Eric.Fassbender.bgszsiuk () t-online de (Eric Fassbender)
Date: Mon, 6 Oct 2003 15:52:47 +0200

I read about your problems and solutions that you had with
the W32/Toolber.c.Trojan and couldn't find any information
about how the Trojan spreads and how it is activated.
We had an F-Prot bootable CD that found and identified the
Trojan, but couldn't remove it. We manually deleted the
.exe file and it should be alright now, but I still have 
two questions left:

- Through which possible ways could the .exe enter the system,
and how did it activate itself?

- Is there any known tool that cleans the system, so we don't 
have to manually delete the .exe and the registry entries?

Hope someone has an answer to these questions,

regards,

Eric Fassbender

IT-Security Officer


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: