Removing 'Trojan.Win32.FTP.attack'

Ogilvy · 06-21-2007, 05:46 AM

Hello,

Apparently I have the above virus on my computer in the registry. This is what my Virgin anti-virus software is telling me any way. This anti-virus does not have the capacity to remove spyware. I also have Stopzilla anti- spyware on my computer and this will not detect it or remove it either. I've checked the registry under HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\reminder and there is nothing there. Also can't find associated files such as ewayclient.exe or drwatsom.exe anywhere on computer, although I don't reall y know what I'm doing. Is there any way I can get rid of this virus manually?
Would appreciate any assistance.
Thanks
D Brown.

**koala** · 06-21-2007, 06:17 AM

Hi, welcome to TSF

Please follow the instructions here (5 pages) and then post all the requested logs in a new thread here for the security analysts to look at.

The security forum is always busy, so please be patient and you will receive a reply as soon as possible. If you go to Thread Tools > Subscribe at the top of your new thread you will receive an email as soon as a reply is posted.

**Glaswegian** · 06-21-2007, 06:17 AM

Hi and welcome to TSF.

Start here and follow the instructions.

http://www.techsupportforum.com/secu...sting-log.html

Please note that the HJT Forum is always busy, so I would ask that you be patient and we will get to you.

EDIT: koala = tdq!

06-21-2007, 05:46 AM	#1 (permalink)
Ogilvy Registered User Join Date: Jun 2007 Posts: 1 OS: XP	Removing 'Trojan.Win32.FTP.attack' Hello, Apparently I have the above virus on my computer in the registry. This is what my Virgin anti-virus software is telling me any way. This anti-virus does not have the capacity to remove spyware. I also have Stopzilla anti- spyware on my computer and this will not detect it or remove it either. I've checked the registry under HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\reminder and there is nothing there. Also can't find associated files such as ewayclient.exe or drwatsom.exe anywhere on computer, although I don't reall y know what I'm doing. Is there any way I can get rid of this virus manually? Would appreciate any assistance. Thanks D Brown.

06-21-2007, 06:17 AM	#2 (permalink)
koala Moderator Hardware Team Join Date: Mar 2005 Location: UK Posts: 12,348 OS: XP/7/Ubuntu My System	Re: Removing 'Trojan.Win32.FTP.attack' Hi, welcome to TSF Please follow the instructions here (5 pages) and then post all the requested logs in a new thread here for the security analysts to look at. The security forum is always busy, so please be patient and you will receive a reply as soon as possible. If you go to Thread Tools > Subscribe at the top of your new thread you will receive an email as soon as a reply is posted. __________________ New members: Subscribe to your thread (Thread Tools) to receive an instant email notification when you get a reply. TSF Folding@Home Team 85015 - details here

06-21-2007, 06:17 AM	#3 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 25,460 OS: Win XP Pro SP3 / Win 7 Pro My System Blog Entries: 10	Re: Removing 'Trojan.Win32.FTP.attack' Hi and welcome to TSF. Start here and follow the instructions. http://www.techsupportforum.com/secu...sting-log.html Please note that the HJT Forum is always busy, so I would ask that you be patient and we will get to you. EDIT: koala = tdq! __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner