Tech Support Forum - View Single Post

purified3 · 08-04-2006, 12:49 PM

I have AVG Antivirus and I scanned two days ago and I found a Trojan horse, actually two of them. One is a Trojan horse BackDoor.Generic2.SLC found in C:\\WINDOWS\system32\ntswrl32.dll and the other a Trojan horse BackDoor.Small.52.AL found in C:\\WINDOWS\system32\ntcvx32.dll.
AVG cannot remove these files. I tell it to heal and it "successfully" heals but comes up again later when scanning but when I move it to the Vault it doesn't come up again until after I reboot. I think there's a process called vssms32.exe that is running the backdoor, it takes up 12MB of memory and I've searched it and it has to do with the backdoor I found. I even searched for the vssms32.exe and deleted it and now I can't find it but it still comes up every time I run.

08-04-2006, 12:49 PM	#1 (permalink)
purified3 Registered User Join Date: Nov 2004 Posts: 200 OS: Win7 Ultx64, Ubuntu 9.10, Gentoo, Backtrack 4	Trojan Horse, Need Help I have AVG Antivirus and I scanned two days ago and I found a Trojan horse, actually two of them. One is a Trojan horse BackDoor.Generic2.SLC found in C:\\WINDOWS\system32\ntswrl32.dll and the other a Trojan horse BackDoor.Small.52.AL found in C:\\WINDOWS\system32\ntcvx32.dll. AVG cannot remove these files. I tell it to heal and it "successfully" heals but comes up again later when scanning but when I move it to the Vault it doesn't come up again until after I reboot. I think there's a process called vssms32.exe that is running the backdoor, it takes up 12MB of memory and I've searched it and it has to do with the backdoor I found. I even searched for the vssms32.exe and deleted it and now I can't find it but it still comes up every time I run.