Norton has found a virus called 'Downloader Trojan' I CAN"T DELETE IT?

Question

Norton has found a virus called 'Downloader Trojan' It is located at C:Windows/system32/comnap.dll . And it can not be deleted! I tried manually deleting it by going to 'My Computer > C drive > Windows > System 32 > comnap.dll and it says its being used by another program. Please Help!

Answer 1

Hi there,

Here's a link to a removal and protection program for Trojan Backdoor:
http://virusinfo.prevx.com/viruscenter.asp?returnpage=default&GRP=1392600015

Their free trial should fix this for you.

Answer 2

I'm going through this exact same problem and tried these things without luck:

1.) Ad-Aware - didn't find it
2.) D/L'd some software recommended in my ask thread - didn't work
3.) Went to msconfig and booted in safe mode to delete - didn't work

This is where I am right now: I uninstalled Norton and installed free software from http://www.pandasoftware.com

This found some things and "disinfected" them and I am no longer registering the virus.

The only thing I don't know is if the .dll file that I had was in use prior to the virus or if the virus brought it. That's what I'm trying to find out right now.

My file that norton found was also in the c:\windows\system32 but the .dll file was different.

Hope this helps you in avoiding some of the things that didn't work for me.

Answer 3

Dear Friend,

All the major trojans will be in active state, that means always being used as a service... first stop that service and then delete it. Its very easy... first go to control panel > Administrative Tools> Services, from there you can stop the service for that file and then you can delete..

All the Best

Yours

Rajesh Kavuri
Hackers Home,
http://www.rajesh.r8.org
[e-mail]

Answer 4

Hello Dear
First update your Norton Anti virus
Then restart your PC then press F8 until it enter the safe mode now scan your PC again it may delete the virus.
Good luck

Answer 5

make a boot floppy and then use the dos shell to delete the file.

If you dont have one of those, then download a small linux distro(hundreds are available) put it on a cd and use its shell to delete the file. If you use this method, you will have to learn a little about linux though.

Try using the boot floppy method.

here is a good website:
http://www.onecomputerguy.com/install/floppies.htm

Answer 6

Disable System Restore (Windows Me/XP).
Update the virus definitions.
Restart the computer in Safe mode or VGA mode.
Run a full system scan and delete all the files detected as Downloader.Trojan.
Edit the registry and look for references to the Trojan


1. Disabling System Restore (Windows Me/XP)
If you are running Windows Me or Windows XP, we recommend that you temporarily turn off System Restore. Windows Me/XP uses this feature, which is enabled by default, to restore the files on your computer in case they become damaged. If a virus, worm, or Trojan infects a computer, System Restore may back up the virus, worm, or Trojan on the computer.

Windows prevents outside programs, including antivirus programs, from modifying System Restore. Therefore, antivirus programs or tools cannot remove threats in the System Restore folder. As a result, System Restore has the potential of restoring an infected file on your computer, even after you have cleaned the infected files from all the other locations.

2. Updating the virus definitions


3. Restarting the computer in Safe mode or VGA mode
Shut down the computer and turn off the power. Wait for at least 30 seconds, and then restart the computer in Safe mode or VGA mode.
For Windows 95, 98, Me, 2000, or XP users, restart the computer in Safe mode. For instructions, refer to the document, "How to start the computer in Safe Mode."
For Windows NT 4 users, restart the computer in VGA mode.

4. Scanning for and deleting the infected files
Start your Symantec antivirus program and make sure that it is configured to scan all the files.
For Norton AntiVirus consumer products: Read the document, "How to configure Norton AntiVirus to scan all files."
For Symantec AntiVirus Enterprise products: Read the document, "How to verify that a Symantec Corporate antivirus product is set to scan all files."
Run a full system scan.
If any files are detected as infected with Downloader.Trojan, write down the path and file names, and then click Delete.



WARNING: Symantec strongly recommends that you back up the registry before making any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify the specified keys only. Read the document, "How to make a backup of the Windows registry," for instructions.
--------------------------------------------------------------------------------

Click Start, and then click Run. (The Run dialog box appears.)
Type regedit

Then click OK. (The Registry Editor opens.)


Navigate to each of these keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run


For each one, in the right pane, delete any values that refer to any files that were detected as Downloader.Trojan.


Exit the Registry Editor.


hopes this helps!!

Answer 7

my sister just experienced this same issue an had it removed i dont know exactly what she did but you can email her at blwydeven at yahoo.com

Answer 8

ha ha...god hates windows.. get a mac