Trojan horse Collected.5.x

Discussion in 'malware problems & news' started by ddowg, Nov 24, 2005.

Thread Status:
Not open for further replies.
  1. ddowg

    ddowg Registered Member

    Joined:
    Nov 24, 2005
    Posts:
    2
    Four days ago, after using eTrustEZ anti-virus, I installed AVG free edition.
    Today, during an automatic scan, AVG found two files infected with "Trojan
    horse Collected.5.x"; (1) "C:\System Information Volume\_restore..." and
    (2) "autodown.exe", the auto download of eTrustEZ itself. (I still had the
    program on a back-up HD.) Being inside of eTrustEZ it could have been
    there for some time. AVG deleted both and put them in its vault.

    I find no useful information on Google or known virus lists as to how
    dangerous this could be. Any help would be appreciated.
     
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,491
    Location:
    Netherlands
    Looking at the locations where you found the files:
    - System Restore Point
    - Virus Vault of the previous AV

    I would guess at first sight you are OK.

    But I would advise you to try this free program to see if the rootkit is still active:
    http://www.greatis.com/unhackme/

    Regards,

    Pieter
     
  3. ddowg

    ddowg Registered Member

    Joined:
    Nov 24, 2005
    Posts:
    2
    Pieter,

    Thanks for the link. UnHackMe found nothing further. A note though, the file
    (512kb) was not in the eTrstEZ vault, but in the automatic download file.
    That, and the name "Collected", makes me nervous.
     
  4. controler

    controler Guest

    Of course any file you download to your desktop goes into the system restore folders.

    Send me a personal message and if you still have the file , I would be happy to look it over for ya.

    controler
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.