I believe I have a trojan and I need help removing!

I just found out that I have a trojan with the name "Downloader-KL" and I want to get rid of it. A description of the trojan is here at this link:

http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=126091

Sure it tells me about the trojan, but unfortunately I can't remove it without their McAfee software and I don't have that. I tried searching "Downloader-KL" in the AVG and Trend Micro virus databases but they don't show up in their databases. This makes me think that AVG or the Trend Micro scan won't pick it up. Does anyone know any way to remove this manually? And does anyone know any free software that could possibly remove this? I would appreciate all help thanks!

 

Download McAfee's command line version "DAILYSCAN.ZIP" from http://vil.nai.com/vil/virus-4d.asp. Create a folder that would be easy to get to via the command line such as c:\mcafee. Disable system restore. Boot into safe mode. Go Start, Run and type cmd to open a command-prompt window. Navigate to the c:\mcafee folder (type cd c:\mcafee and hit enter). Once there, type scan and hit enter to see the help screen. To start cleaning right away: type scan c: /sub /clean and hit enter.

Nick

 

Nick S, thank you very much for helping me with this. By doing what you told me I was able to delete the Download-KL Trojan along with several duplicates of it AND at least 40 other trojans/virus. I didn't know I had all these keyloggers and backdoor trojans in my system! You've been really helpful! Thanks!

 

Glad to help. Unless I am missing it, your HijackThis log shows you're not running any anti-virus software. Here are some free ones that are worth using:

http://www.free-av.com/index.htm

http://www.avast.com/i_idt_1016.html

http://www.grisoft.com/us/us_dwnl_free.php

Nick

 

Yeah you're right, I'm not running one. I might buy a commercial one because they seem to have more features, but AVG looks pretty good too. Just curious, but what anti-virus program do you use?

 

F-Prot for Windows (http://www.f-prot.com/products/home_use/win/) for real-time monitoring and KAV Personal (http://www.kasperskylabs.com/) as a file/disk scanner.

Nick

 

Does that include my password to log into Windows XP?

 

In a word, yes.


snowbound

 

Thanks all of you!

 

i have it too. any luck removing it?

 

i can't figure out how to remove downloader-kl!

 

I have the latest McAfee (4370 data file) & when I tried cleaning... it said it can't be cleaned.. then I tried deleting, but again it said It can't be deleted.

Wierd... So, I continued & re-scanned later but idn't find a 2nd time. What do you think?

 

I followed Nick's instructions and am getting stuck in safe mode. I'm fine until I'm at the instructions that say type scan and hit enter to see the help screen. When I'm in c:\mcafee and type scan I receive the following message: 'scan' is not recognized as an internal or external command, operable program or batch file. I'm at a total loss. Your help would be greatly appreciated. Thanks!

 

The files are: clean.dat, scan.dat, names.dat....

 

Sorry for missing your post. The contents of the folder should be:

scan.dat
names.dat
clean.dat
scan.exe
mcscan32.dll
rwabs16.dll
rwabs32.dll
license.dat
messages.dat

Make sure you are using DAILYSCAN.ZIP from http://vil.nai.com/vil/virus-4d.asp


Nick

 

Just a quick one, how do I disable system restore? (and why do I need to do this?)

Steve