View Single Post
Old 10-24-2008, 10:09 PM   #1 (permalink)
tangled_b
Registered User
 
Join Date: Jun 2008
Location: India
Posts: 17
OS: windows xp sp2


recurring identification of "so7.exe"

Hello
I use Avira AntiVirus Personal on Window XP. I've recently been getting a (repeated) warning telling me that the file "so7.exe" is the trojan TR/Crypt.XPACK.Gen

The file is usually found in
C:\Documents and Settings\Home\
or
C:\Documents and Settings\Home\Local Settings\Temporary Internet Files

I did also find a file named so7.exe in the 'temp. internet files' folder that resists all attempts at deletion and doesn't show up in searches from the command prompt.

The trojan does not seem to affect the running of any programs, but even after deleting/sending to quarantine etc, it resolutely pops up the next time the computer is started, (probably relevant) the moment I open a browser.

I haven't been able to find anyone with similar problems by doing general google searches, so I thought I would ask here.
I've attached the HJT log taken immediately after Avira announced the presence of the trojan and I deleted the same. If I should try to scan once before I connect to the internet or something, I will do so too.
Thank you very much in advance!
Attached Files
File Type: txt hijackthis-log_25oct08_0920.txt (8.5 KB, 3 views)
__________________
This boy, he drove me to internet suicide...
tangled_b is offline  
Important Information
Join the #1 Tech Support Forum Today - It's Totally Free!

TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free.

Join TechSupportforum.com Today - Click Here