Guys,

Last night I removed Norton and installed AVG on the computer, after running a scan it showed up the following,

The first 5 are in a folder I have with software a friend gave me,

Trojan Horse Dropper.delf.4.T in WZ-Keygen.exe

Trojan Horse Dropper.delf.4.T in WinZip.v9.0.6224.SR1.Incl.Key

Trojan Horse Dropper.Bridge.A in start.exe (a Nero File)

Trojan Horse Dropper.Bridge.A in Nero.Burning.Rom.v6.6.0.1.Ent........

Trojan Horse Dropper.Bridge.A in Start.exe (a Nero File)

Trojan Horse IRC/Backdoor.SdBot.47.W in TFTP472 (Windows\system32\TFTP472)

The AVG says the 1st & 3rd are "Infected, Embedded object" and the 2nd & 3rd "Infected, Archive" while it "deleted" the last 2.

None of the first 4 were run on the computer, I had just saved the files on the PC incase I ever wanted them.

Any ideas on the best course of action to take ?

Beat the cr ap out of your friend?

I'd delete the lot personally, or get AVG to do it.

Beat the cr ap out of your friend?

The thought had crossed my mind

I'd delete the lot personally' date=' or get AVG to do it.[/quote']

One of the IT guys in here said delete them, AVG didn't do the first 4 of them for some reason (it deleted the last 2).

Would just deleting the files get rid of them completely ?

As long as they weren't ran - then yes.

Indeed - just blow them away

Well if you will load cracked software, you have to be on your guard. Crackers/hackers/virus writers are all from the same mould. Caveat emptor (not exactly "emptor" in this case :P )

Have you thought of doing a system restore to a point prior to the date you installed the software? Doing that should also get rid of any other nasties which might not have been picked up.

You could also run a scan with Trend Micro's "Housecall", although it does take up to an hour to complete on mine and must be run with no other applications in operation.

http://housecall.trendmicro.com/housecall/start_corp.asp

Regards

Mo

Houscall is useful, I often use it for a check just in case Noton etc miss anything.

I removed the 2 files mentioned above and re ran the AVG, NO Infected files found . I might just download a copy of that Housecall to make sure, is there a free version to download or do you have to stay connected to the net and use the link mentioned above ? I'm on 56k at home

I removed the 2 files mentioned above and re ran the AVG, NO Infected files found . I might just download a copy of that Housecall to make sure, is there a free version to download or do you have to stay connected to the net and use the link mentioned above ? I'm on 56k at home

It is free, but it is not software to be downloaded - it is permission that you give to Housecall to access your computer remotely and therefore, yes, you need to be connected for it to be able to do that.

I'm not very good on terminology, but the nearest I can suggest is that you are letting a harmless spider crawl over your machine to see what it finds. As all spiders do, but this one tells you if it find anything you shouldn't have, rather than taking advantage of any loopholes.

It (Housecall) is generally well respected and I have seen no reports of any adverse effects (certainly not so for many anti-spyware freebies). I am on 56K also, hence the mention of time - it might be quicker on broadband of course.

Regards

Mo

It is free' date=' but it is not software to be downloaded - it is permission that you give to Housecall to access your computer remotely and therefore, yes, you need to be connected for it to be able to do that.

I'm not very good on terminology, but the nearest I can suggest is that you are letting a harmless spider crawl over your machine to see what it finds. As all spiders do, but this one tells you if it find anything you shouldn't have, rather than taking advantage of any loopholes.

It (Housecall) is generally well respected and I have seen no reports of any adverse effects (certainly not so for many anti-spyware freebies). I am on 56K also, hence the mention of time - it might be quicker on broadband of course.

Regards

Mo[/quote']