Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Aug 28th, 2008, 2:22pm
   Mischel Internet Security Forum
   Malware
   Trojans (Moderators: Helena, Gavin_Coe, Magnus)
   Help! I have the Bionet 4.01 Trojan!		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: Help! I have the Bionet 4.01 Trojan!  (Read 588 times)
Introuble
 Guest

Email
Help! I have the Bionet 4.01 Trojan!
« on: Jul 8th, 2002, 2:30am »		 Quote Quote  Modify Modify   Remove Remove
Huh
The file is LIBUPDATE.EXE in the System 32 directory. I use Windows XP.
 
I tried Norton 2002 and Trojan Hunter but I can't get rid of it!
I get "access to file denied".
 
Ping Magnus or anyone have any ideas?
 
Thanks!
IP Logged
Jamming
Stole All the Forum Stars
********




Remember when a Trojan was just for protection.

   


Gender: male
 Posts: 2038
Re: Help! I have the Bionet 4.01 Trojan!
« Reply #1 on: Jul 8th, 2002, 6:32pm »		 Quote Quote  Modify Modify
An idea-  
 
 try changing it properties so that it can be removed, right click>select properties>go to general tab> make sure all attributes at the bottom are unchecked.
 
IP Logged
Team Z Member

Servare cives, major est virtus patriae patri.
- Lucius Annaeus Seneca
I was born an American; I live an American; I shall die an American!
- Daniel Webster
Introuble
 Guest

Email
Re: Help! I have the Bionet 4.01 Trojan!
« Reply #2 on: Jul 9th, 2002, 1:16am »		 Quote Quote  Modify Modify   Remove Remove
Tongue
Thanks, but no luck.  It also changes back to an archive attribute when you close it then bring up properties again.
 
Here is the full path:
 
C:\WINDOWS.000\SYSTEM32\libupdate.exe.tcf
IP Logged
Magnus
Administrator
*****



Ad astra per aspera.

   
WWW  

Posts: 4092
Re: Help! I have the Bionet 4.01 Trojan!
« Reply #3 on: Jul 10th, 2002, 1:03am »		 Quote Quote  Modify Modify
Hi,
 
The .tcf extension means TrojanHunter has already found and cleaned this trojan. Because there is always a very small possibility for a false positive (though from experience, false positives are uncommon with TrojanHunter compared to other products), TrojanHunter renames any found trojan files by giving them a .tcf extension ("TrojanHunter Cleaned File") instead of deleting them. The user can then delete the file himself to free up disk space if he wishes. If you don't want any more NAV alerts you can simply delete the file (but make sure you temporarily disable NAV or you will get the "File access denied" message you are talking about).
 
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register