Jump to content

Recommended Posts

Hi guys,

I have this trojan called "0.6916499173532813.exe" Its known as Trojan.Dropper

It places in: C:\Users\<USER>\AppData\Local\Temp

I don't know how the file is being created but the Anti-Malware scanner does detect it.

Here is a link that I found: http://forums.malwarebytes.org/index.php?showtopic=59267

That exact thing happens when I open FireFox. I find it really annoying.

Anti-Malware has quarantined 2 times now. But its not stopping it from creating itself :rolleyes:

Is there anyway I can stop this file from creating itself?

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /up/toolbar.exe was not found on this server.</p>
<hr>
<address>Apache/2.0.54 (Fedora) Server at www.upetgroup.ro Port 80</address>
</body></html>

If I am right, this is just an html file disguised as a .exe file.

When I right click on its icon on the taskbar, its actually running on ntvdm.exe, I don't think that app is even able to read html :S

If anyone has any idea to get rid of this please help :lol:

I am using Windows 7 Ultimate 32bit and Free version of Anti-Malware v1.46.0001 with DB v4390

Any help will be highly appreciated.

Thank You

Link to post
Share on other sites

Hi sudo -

As we don't work on Malware removal or diagnostics in the general forums please follow these directions -

Please print out, read and follow the directions Here, skipping any steps you are unable to complete. Then post a NEW topic Here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post - Please allow at least 48 hours for a reply as the experts can get busy at times -

Also add a brief note to the experts as to your problems -

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or via Here

Always use the ADD REPLY Tab at the bottom of the page when you reply -

Thank You - :rolleyes:

EDIT - It seems this is identified by Malwarebytes but not fully removed (due to its nature I think) -

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.