ok I openned the file wlistbox.exe (it's found in some autohackers)

http://www.governmentsecurity.org/forum/in...t=0&#entry49036

and it's a trojan! , it crashed my norton antivirus 2004!

I killed the trojan files and removed it but

when I reinstalled norton antivirus , I tried to scan my computer for viruses...

and it says something like "can't find some specifed files..."

(the trojan files was: "coco.exe" , "rundll16.exe")
I'm not sure if there are other files...

what can I do?

any ideas?

try searching google for : " anti trojan"

you can find lots off softwares that will help you remove that trojan

the trojan file name: "wlistbix.exe"

I tried google but I didn't find any solutions

I tried to read help about this problem but didn't work

http://service1.symantec.com/SUPPORT/nav.n...ocument&src=_mi

go to www.download.com and download trojan remover or something

I tried "trojan remover" but with no results (0 trojans found)

wlistbix.exe = tool used by hackers , it isn't a trojan just because norton says so.


F:\tools\test>wlistbix
Usage: wlist.exe <ip-liste> <batch-datei>

means, :
you need an IP list, and a batchfile with commands in it I'll show you all how it works.

mm i think i will format my C :|

I don't have other options now , I also checked security "symantec security" and see that my computer still infected with 4 trojans (I think it's duplicated)

ok thnx all for the help

i play with trojans a lot for testing purposes and whatnot. this is how i give them the quickfix. Go to start<run< type msconfig. Go to startup and uncheck any unfamiliar/weird looking programs. These are the programs that execute upon boot up. Just uncheck then reboot and u should be safe. The trojan may still be floating around on ur HD, but at least u know its not running

damn ..
restart in safe-mode .. than virusscan and remove that damn thing

could try blockin the port the trojan is using from incoming connections??

I successfully removed the trojan it seems undetectable by anti viruses

It has been hiding in temp directory , I used WINBRUSH to clean all the damn things and stopped some services

Congrats

I'd say the easiest way to remove some of the sneakier trojans is to just download the client and try to connect to yourself, assuming you know which trojan you have of course. Just bruteforce your way in, or hope there's no password.

chris105 yeah it was a trojan that also 'infected' the registery files (when I cleaned the registery files of the trojan files it's completly removed from my pc) (it was also in the norton-symantec registery keys)

let me try that.if you know which trojan it is u can just use google and look for a fix.shouldn`t be that hard

Often, the fixes for the trojans involve more time than just clicking "remove". Of course, I have yet to encounter someone who has put a password on their server.

the cleaner from moosoft worms well.

search for it.