PDA

View Full Version : Trojan ntos.exe on Win2000 urgently need instructions for removal



elfwood
2008-07-21, 14:15
The header says it all.
F-secure noted the malware, so I plugged it off the network. It could not disinfect and I could not remove manually any of the elements related.
All isntructions I found so far are for XP and up but this system is a 2000Pro.
What need I do to get it clean and safe to use.
Also, Need urgently to know
-Is it safe to have on on my LAN, or can it in any way infect other PCs.
-Is it safe to send Word or EPS files created on this system to my client? To send them I need to attach them to a mail msg sent from another system, which I checked and noted clean.

Million thanks in advance

shelf life
2008-07-25, 02:50
hi elfwood

still need help? need to post a hjt log as a starting reference point.
the optimal tools dont work on w2k, but we can try a commercial app.

this is a trojan capable of uploading your sensitive/personal info.

you should pull the plug to this machine at your modem or router

HJT link

http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

* Save HJTInstall.exe to your desktop.
* Doubleclick on the HJTInstall.exe icon on your desktop.
* By default it will install to C:\Program Files\Trend Micro\HijackThis .
* Click on Install.
* It will create a HijackThis icon on the desktop.
* Once installed, it will launch Hijackthis.
* Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
* Click on "Edit > Select All" then click on "Edit > Copy" and Paste the entire contents of the log (no attachments) in your reply