I acquired a TROJAN that has become a bit of a problem to get rid. I have tried reformatting my FLASH drive since thats where it originated with no results. It has jumped to my laptop and though it does not seem to be causing a problem i still would like to clear it. I have change virus protection programs about 5 times with no results. After a scan each program says no infected files found yet when i ran AVIRA it picked this: [ TR/VB.aqu.8] located in /mnt/hda1/recycled/ctfmon.exe.
As such can anyone tell how to rid my system of this issue
Software/Hardware used:
ASKED:
April 23, 2009 1:00 PM
UPDATED:
February 2, 2012 11:01 AM
Hi, did you try and remove it manually?
How have you scanned the machine ?
You should make sure you antivirus software is up to date, then restart in safe mode without networking, then run the scan.
I have succesfully removed almost any malware using these tools:
Spybot – Search & Destroy
Malwarebytes
Definitely try safe mode scans. Backup/reformat is a good option because it’ll give you peace of mind and, as a bonus, you’ll have a much faster Windows system afterwards. It may not seem like it but doing this may end up taking much less time and effort that trying to troubleshoot and clean the malware.
Interesting you say the report says the virus is found in this folder
/mnt/hda1/recycled/ctfmon.exe
Are you using linux? You haven’t indicated which OS you use.
If the report came from using a bootable CD OS, just delete the recycled folder using the CD. You might just be getting a ‘found virus signature’ report from the antivirus prog.
The ‘Recycled’ folder is a windows folder and the /mnt/hda1 tells me that the report was from a linux mounted partition hda1 which normally is the same as the cdrive for windows OS.