help please

[Kroc]

Hi Everyone, Im not sure if im posting in the right place or not but i would like some assistance with a problem im having. If im not in the right place could someone refer me on .....thanks

ok im running windows xp
have nortons anti virus 2002 with the latest updates

I clicked on a web site and my nortans sent up an Alert reading as follows

Date: 20/06/2003, Time: 8:53:32,
The file
C:\WINDOWS\System32\aupdate.exe
is infected with the Download.Trojan virus.
Unable to repair this file.

and then this

Date: 20/06/2003, Time: 8:53:32,
The file
C:\WINDOWS\System32\aupdate.exe
is infected with the Download.Trojan virus.
Access to the file was denied.

I went looking for the file and couldnt find it
I then went and checked symantics web pages and after about 3 hours of shere frustration downloaded a couple of Trojan scanners and did a scan.

Neither Trojan Scanner picked it up
I ran nortans thru about 5 more full scans as well as pointing nortons to any file with the file name of aupdate........

my question is this....

Is the virus still present ?

If so how do i find out for sure ?

How do i get rid of it ?

Hoping someone can help

Thanks

Kroc

[Dan Perez]

Hi Kroc,

Welcome aboard!

Could you please go to

http://www.diamondcs.com.au/index.php?page=asguard

and download and extract the freeware AutoStart viewer utility.

When you run it can you go to the "Main" menu and make sure the top three options are checked. Once this is done select Save from that menu, it will create an asviewer.txt file in the same directory you ran it from and paste the contents of that file here.

Also, are you sure that the AV did not quarantine the file? You might want to look in your quarantine directory and/or check you AV log.

Dan

[Pieter_Arntz]

Hi Kroc,

Could be this one:
http://www.doxdesk.com/parasite/TinyBar.html

Regards,

Pieter

[Gavin - DiamondCS]

Yep those are the ones, its technically a webdownloader and detected by TDS and most if not all AV's too.

Turn off ActiveX, clean it and its friends who have surely come along too with spyware removers