Bullguard Antivirus Forum Download A Free Copy Of Bullguard Antivirus Software
Free Antivirus Forum - Learn about antivirus, firewalls and personal security Free Antivirus Forum - Learn about antivirus, firewalls and personal security
 HomeLog InRegisterCommunity CalendarSearch the ForumView The Member ListHelp
Trojan virus did was not disinfected only moved... now what?
   
BullGuard Antivirus Forum > Virus > Virus Questions > Trojan virus did was not disinfected only moved... now what?  
Forum Quick Jump
 
New Topic Post reply to : Trojan virus did was not disinfected only moved... now what? Printable version of : Trojan virus did was not disinfected only moved... now what?
[ << Previous Thread | Next Thread >> ]

ricncal
New Member


Date Joined Jun 2004
Total Posts : 3
 
   Posted 6-3-2004 4:06 (GMT +1)    Quote: Trojan virus did was not disinfected only moved... now what?Alert an admin about: Trojan virus did was not disinfected only moved... now what?
I did a virus scan on my C drive and the following is what is showed ... since it was not disinfected and only moved what do i need to do next? pls. advise thxs!


Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-682bc1b5-40dab77b.class Infected Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-682bc1b5-40dab77b.class Disinfection failed - Trying second action
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-682bc1b5-40dab77b.class Moved
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ok.class-1cf3bc49-4d309a3b.class Infected Java.Trojan.Nocheat.A
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ok.class-1cf3bc49-4d309a3b.class Disinfection failed - Trying second action
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ok.class-1cf3bc49-4d309a3b.class Moved
C:\Program Files\BullGuard\Infected\Dummy.class-682bc1b5-40dab77b.class Infected Java.Trojan.Exploit.Bytverify
C:\Program Files\BullGuard\Infected\Dummy.class-682bc1b5-40dab77b.class Disinfection failed - Trying second action
C:\Program Files\BullGuard\Infected\Dummy.class-682bc1b5-40dab77b.class 
C:\Program Files\BullGuard\Infected\ok.class-1cf3bc49-4d309a3b.class Infected Java.Trojan.Nocheat.A
C:\Program Files\BullGuard\Infected\ok.class-1cf3bc49-4d309a3b.class Disinfection failed - Trying second action
C:\Program Files\BullGuard\Infected\ok.class-1cf3bc49-4d309a3b.class 
Statistics
Back to Top
 

Destroyer
Trusted Member


Date Joined Mar 2004
Total Posts : 245
 
   Posted 6-3-2004 1:10 (GMT +1)    Quote: Trojan virus did was not disinfected only moved... now what?Alert an admin about: Trojan virus did was not disinfected only moved... now what?
If all the files have been quaranteened then you are safe. You can now delete these files if you wish
Back to Top
 

eagle
Senior Member


Date Joined May 2004
Total Posts : 805
 
   Posted 6-3-2004 1:38 (GMT +1)    Quote: Trojan virus did was not disinfected only moved... now what?Alert an admin about: Trojan virus did was not disinfected only moved... now what?
Go with that thought , is everybody getting killed with virusus?!

Eagle smilewinkgrin
Back to Top
 

Petria
Junior Member


Date Joined Mar 2004
Total Posts : 90
 
   Posted 6-3-2004 9:32 (GMT +1)    Quote: Trojan virus did was not disinfected only moved... now what?Alert an admin about: Trojan virus did was not disinfected only moved... now what?
Yup :p  all the infected files seem to be quarantined - empty your Quarantine through Bullguard's interface: in the Antivirus menu -> Quarantine section (click on Refresh then select each item and click on delete).
 
But just run another full scan, just in case ;-)
Back to Top
 

ricncal
New Member


Date Joined Jun 2004
Total Posts : 3
 
   Posted 6-4-2004 2:28 (GMT +1)    Quote: Trojan virus did was not disinfected only moved... now what?Alert an admin about: Trojan virus did was not disinfected only moved... now what?
ok i would like to delete these files ... but in the bullguard quarantine box ... there is nothing in there ... and i have refreshed the box ... ok even if i don't delete the infected files ... is it ok to leave them their since Bullguard has move them? and if that's the case ... you suggestion pls? thxs again!
Back to Top
 

Petria
Junior Member


Date Joined Mar 2004
Total Posts : 90
 
   Posted 6-4-2004 7:26 (GMT +1)    Quote: Trojan virus did was not disinfected only moved... now what?Alert an admin about: Trojan virus did was not disinfected only moved... now what?
Another way of deletings Bullguard infected files:
1. first disable the Antivirus within Bullguard
2. go to the following folder end empty it:
C:\Program Files\Bullguard\Infected
 
If there's nothing in there repeat the scan and come back with news smilewinkgrin
Back to Top
 

ricncal
New Member


Date Joined Jun 2004
Total Posts : 3
 
   Posted 6-6-2004 10:33 (GMT +1)    Quote: Trojan virus did was not disinfected only moved... now what?Alert an admin about: Trojan virus did was not disinfected only moved... now what?
I checked the Infected folder and it was empty. I then repeated the scan and the following is in the log ...

also ... with this type of Trojan E and O ... what type of level are these and how harmful are they? Pls. advise me

what to do next. Thxs. :)

Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-76ba5970-1ec509bf.zip=>GetAccess.class Infected Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-76ba5970-1ec509bf.zip=>GetAccess.class Disinfection failed - Trying second action
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-76ba5970-1ec509bf.zip=>GetAccess.class Move failed
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-76ba5970-1ec509bf.zip=>InsecureClassLoader.class Infected Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-76ba5970-1ec509bf.zip=>InsecureClassLoader.class Disinfection failed - Trying second action
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-76ba5970-1ec509bf.zip=>InsecureClassLoader.class Move failed
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-76ba5970-1ec509bf.zip=>Dummy.class Infected Java.Trojan.Exploit.Bytverify
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-76ba5970-1ec509bf.zip=>Dummy.class Disinfection failed - Trying second action
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-76ba5970-1ec509bf.zip=>Dummy.class Move failed
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-76ba5970-1ec509bf.zip=>Installer.class Infected Java.Trojan.OpenConnection.F
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-76ba5970-1ec509bf.zip=>Installer.class Disinfection failed - Trying second action
C:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-76ba5970-1ec509bf.zip=>Installer.class Move failed

Statistics
Back to Top
 

pupudada
New Member


Date Joined Jun 2004
Total Posts : 14
 
   Posted 6-7-2004 5:15 (GMT +1)    Quote: Trojan virus did was not disinfected only moved... now what?Alert an admin about: Trojan virus did was not disinfected only moved... now what?
i do not know if this falls within this forum, but this is what i do. if your computer is infected, do a clean format and install your programmes (on `c' drive) and do a defrag. now use `norton ghost' to make an image of `c' folder and store the same in 2-4 cd-rw's. do this everyday (when you are not logged in and after scanning for viruses). it's better if you keep a set of 3 x (2-4 cd-rw's) and use them in rotation basis. if ever, god forbid, there is any problem, you can format the `c' drive and use the image to set your computer to the position it was before it was infected. another tip that i heard but have not tried... try to install your o's on `d' drive instead of `c'. the virus writers write their programmes assuming that the o/s is on `c' drive and target the same. wishing you all the best, take care, cheers & sunshine... pupudada
Back to Top
 

eagle
Senior Member


Date Joined May 2004
Total Posts : 805
 
   Posted 6-7-2004 5:44 (GMT +1)    Quote: Trojan virus did was not disinfected only moved... now what?Alert an admin about: Trojan virus did was not disinfected only moved... now what?
i do not know if this falls within this forum, but this is what i do. if your computer is infected, do a clean format and install your programmes (on `c' drive) and do a defrag. now use `norton ghost' to make an image of `c' folder and store the same in 2-4 cd-rw's. do this everyday (when you are not logged in and after scanning for viruses). it's better if you keep a set of 3 x (2-4 cd-rw's) and use them in rotation basis. if ever, god forbid, there is any problem, you can format the `c' drive and use the image to set your computer to the position it was before it was infected. another tip that i heard but have not tried... try to install your o's on `d' drive instead of `c'. the virus writers write their programmes assuming that the o/s is on `c' drive and target the same. wishing you all the best, take care, cheers & sunshine...                                                                                                                             




 Thats silly but effective, that would have to be a last resort for me. I have found that most AV co. have good tech support try that first Ok.
Back to Top
 

Petria
Junior Member


Date Joined Mar 2004
Total Posts : 90
 
   Posted 6-7-2004 6:45 (GMT +1)    Quote: Trojan virus did was not disinfected only moved... now what?Alert an admin about: Trojan virus did was not disinfected only moved... now what?
These are not viruses, trojans don't infect other files - they are stand alone programs that act like a spy in your computer and might allow a hacker to gain control over your system. Since nowadays threats tend to have commercial purposes, you shouldn't worry for your system when it comes to trojans, but for your money (in case you keep your credit card number stored on your disk - not recommended!), or personal information.
 
Still, nothing to worry, I've seen just yesterday a system infected with 34 viruses and it was no need for a format - that is the last thing you should do!  nono 
 
You should locate, disable the Antivirus of Bullguard and delete the following file :
c:\Documents and Settings\user\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-76ba5970-1ec509bf.zip
 
As you will be able to see at:
www.bullguard.com/ignore.aspx Bullguard will not modify (therefor not delete or move) some type of archives as they are legally protected.
 
As you might not be able to see some hidden files and folders you should first try to perform the following steps prior to locating the specified infected file:
- open Windows Explorer (double click on My Computer)
- go to Tools -> Folder Options -> View and make sure that:
   - "Show hidden files and folders" is CHECKED
   - "Hide protected operating system files (Recommended)" is UNCHECKED
Back to Top
 
New Topic Post reply to : Trojan virus did was not disinfected only moved... now what? Printable version of : Trojan virus did was not disinfected only moved... now what?
 
Forum Information
Currently it is Wednesday, December 03, 2008 12:31 AM (GMT +1)
There are a total of 64.507 posts in 15.908 threads.
In the last 3 days there were 17 new threads and 84 reply posts. View Active Threads
Who's Online
This forum has 27322 registered members. Please welcome our newest member, imezeguy.
34 Guest(s), 0 Registered Member(s) are currently online.  Details
5 Latest Threads
Need virus removal help - malwarebytes etc (5)02-12-2008 19:12:25 (Jonathan_ll)
Help please !!!!! (0)02-12-2008 18:12:57 (RERAZOR)
Trojan Horse Downloader Generic EPY (0)02-12-2008 17:40:36 (ah ying)
Command Service (8)02-12-2008 17:11:50 (yogendra)
Virtrigger removal (10)02-12-2008 15:16:23 (JHT)