| |
Antivirus World Forum
Re: KILLED: "Downloader - YH"
Posted By: David Parnell In Response To: Re: KILLED: "Downloader - YH" (Snerd O'Reilly)
Date: Monday, 11 April 2005, at 9:54 p.m.
I shall have to lodge a complaint - I've obviously been short-changed - I'm only getting i282(1).exe! However, the common feature of most of the files apparently dropped by the virus/trojan in my case seems to be a letter repeated 3 times in the filename (eg. irrrik.exe, wqqqw.dat, dcccdmd.exe, spppsrs.dll). This pattern may be something worth checking for. One that keeps appearing with me (and a few other people judging by various other Internet comments) is tp7543.exe. I have managed once or twice to catch sight in Explorer of one or other file appearing in the windows system32 folder, but as soon as it appears it disappears again. Even when I (or McAfee) have managed to delete one, they eventually reappear. Don't know about your experience, but McAfee have been less than helpful - seems you only get useful advice if you subscribe to the paying support services! Good luck. I shall keep watching the fora until some bright spark comes up with the answer, or McAfee issues a specific cleaner...
| |
Antivirus World Forum is maintained by Administrator with WebBBS 5.12.