Found trojan

[efc]

I have been using NOD32 Anti Virus for the past two or three weeks. I usually run a scan every day with multiple products. Yesterday, I noticed a suggestion to run an in-depth analysis regularly. Before yesterday, smart scans was all that I thought was needed.

At the conclusion of an in-depth scan, one virus was reported. This from log - :\Documents and Settings\Fred\Application Data\Skype\fchandler\user16384.dbb - error opening (File locked) [4]
C:\Documents and Settings\Fred\Application Data\Skype\fchandler\user256.dbb - error opening (File locked) [4]
C:\Documents and Settings\Fred\Application Data\Skype\fchandler\user4096.dbb - error opening (File locked) [4]
C:\Documents and Settings\Fred\Application Data\Thunderbird\Profiles\wg0nz0x5.default\parent.lock - error opening (File locked) [4]
C:\Documents and Settings\Fred\Application Data\Thunderbird\Profiles\wg0nz0x5.default\Mail\Local Folders\Trash »MIME »part000.htm - HTML/Phishing.gen trojan - unable to clean - deleted
C:\Documents and Settings\Fred\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - error opening (File locked) [4]
C:\Documents and Settings\Fred\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - error opening (File locked) [4]
_________________________________
It appears that this was in an email that I did not open. Regardless, lesson learned. Do in-depth analysis on a regular basis.

[rik]

Good suggestion efc. I use 2 different AV products and have each set to perform different types of scans at different times also.

[egghead]

do you know how these programs are getting in efc?

If it is through mail attachments you will need to use a program designed to protect email.

If you are downloading strange files from the internet you may have to realize that your system will be compromised no matter what

get process gaurd if that is the case.

I hate to tell you but there are trojans out there that are clones of the big trojans only these are peronalized and no anti-virus program will detect these or uninstall them unless someone with the exact same private trojan turns it in to an anti-virus company.

these trojans seem to be getting into your system through social engineering.

I have also seen auto-run cd's planted to include a trojan. so you put the cd in your computer and windows auto-install the program on the copied cd as well as the trojan and you will never know.

anyway...

I know you know what your doing but dang!

[efc]

I know egghead. I don't think the trojan was actually activated since I do not open attachments from anyone. The log show that it was in one of my trash mailboxes where it couldn't do any harm.

Your points are right. The reason I started this thread was to show that even with multiple protection you are still vulnerable to attack. Everyone, be careful out there.