Win32:rbot-etn[trj]

[coldcrush]

Hi All,

Win32:Rbot-ETN[Trj]

have run avast and it picked up on this Trojan in 2 places on my system, there is not much info on it on the web, can anyone point me in the right direction?

It was hiding in my System Volume and Documents and settings!

Edited October 7, 2007 by coldcrush

[cdnvic]

Hot ctrl-alt-del so that your task manager pops up the look in the list of processes and tell me if these are listed:

5c.exe, 50cent.exe, nav32sp.exe, prot.exe, lsasss.exe

[coldcrush]

Hot ctrl-alt-del so that your task manager pops up the look in the list of processes and tell me if these are listed:

5c.exe, 50cent.exe, nav32sp.exe, prot.exe, lsasss.exe

lsass.exe but not like you wrote, missing one 's'. It is under system. Is this not a normal process?

Thanks

[coldcrush]

?

[BelfastMike]

Spyware has become a real nuisance on the internet.

I use Spyware Doctor from PC-Tools to block any nasties from my PC.

There are 2 versions, Spyware Doctor on its own or Spyware Doctor plus Antivirus.

I think you can download a free trial or cut-down version but it's one of the few pieces of software I pay for. Well worth it as it's saved me no end of bother.

[cdnvic]

Hot ctrl-alt-del so that your task manager pops up the look in the list of processes and tell me if these are listed:

5c.exe, 50cent.exe, nav32sp.exe, prot.exe, lsasss.exe

lsass.exe but not like you wrote, missing one 's'. It is under system. Is this not a normal process?

Thanks

lsass.exe is a legit Windows file, isas.exe is Sasser worm.

1. Update your windows. This was patched against three years ago.

2. Run the online scan at http://www.eset.com/onlinescan/

3. Keep your firewall turned on.

[coldcrush]

Thanks for your reply cdnvic. As to the other poster I already run cimmodobo and have antivirus onboard.

Regards

Hot ctrl-alt-del so that your task manager pops up the look in the list of processes and tell me if these are listed:

5c.exe, 50cent.exe, nav32sp.exe, prot.exe, lsasss.exe

lsass.exe but not like you wrote, missing one 's'. It is under system. Is this not a normal process?

Thanks

lsass.exe is a legit Windows file, isas.exe is Sasser worm.

1. Update your windows. This was patched against three years ago.

2. Run the online scan at http://www.eset.com/onlinescan/

3. Keep your firewall turned on.