Trojan Horse/computer security question

Posted: 11-11-2003, 05:31 PM
Was wondering if anyone can advise me on a possible
problem that's cropped up on my home PC.

I use Microsoft Windows XP Home Edition. I ran a free
security check from Systemac, and it identified two
Trojan Horses in its system. I was able to delete one of
them with no problems, but the other, Backdoor.Coreflood
(in a C:\WINDOWS\system folder the contents of which are
a complete mystery to me) seems impossible to deal with.
The problem is that whenever I try to delete the file in
question, a message comes up reading: "Cannot delete: It
is being used by another person or program. Close any
programs that might be using the file and try again."

I'm wondering what kind of a threat this Trojan poses,
and what I can do about it. According to Systemac, it's
been on my computer since August this year, but when I
scan the supposedly infected file with Norton AntiVirus
it gets a clean bill of health. I've not noticed anything
amiss while using the computer, and I haven't received
any mysterious bills for things, but the idea of a hacker
gaining remote access to one's computer is never a
pleasant one.

Does anyone know of any way in which I can eliminate
Backdoor.Coreflood, ideally without having to splash out
any money?
Reply With Quote

Responses to "Trojan Horse/computer security question"

Doug Knox MS-MVP
Guest
Posts: n/a
 
Re: Trojan Horse/computer security question
Posted: 11-11-2003, 05:47 PM
http://www.symantec.com/avcenter/ven...reflood.b.html
http://securityresponse1.symantec.co...coreflood.html

There are different variants of this worm, so make sure you get the correct
one. The pages above include the instructions for removing this trojan.

--
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Associate Expert
ExpertZone - http://www.microsoft.com/windowsxp/expertzone
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Alvaro" <anonymous@discussions.microsoft.com> wrote in message
news:021a01c3a879$9421ad10$a301280a@phx.gbl...
> Was wondering if anyone can advise me on a possible
> problem that's cropped up on my home PC.
>
> I use Microsoft Windows XP Home Edition. I ran a free
> security check from Systemac, and it identified two
> Trojan Horses in its system. I was able to delete one of
> them with no problems, but the other, Backdoor.Coreflood
> (in a C:\WINDOWS\system folder the contents of which are
> a complete mystery to me) seems impossible to deal with.
> The problem is that whenever I try to delete the file in
> question, a message comes up reading: "Cannot delete: It
> is being used by another person or program. Close any
> programs that might be using the file and try again."
>
> I'm wondering what kind of a threat this Trojan poses,
> and what I can do about it. According to Systemac, it's
> been on my computer since August this year, but when I
> scan the supposedly infected file with Norton AntiVirus
> it gets a clean bill of health. I've not noticed anything
> amiss while using the computer, and I haven't received
> any mysterious bills for things, but the idea of a hacker
> gaining remote access to one's computer is never a
> pleasant one.
>
> Does anyone know of any way in which I can eliminate
> Backdoor.Coreflood, ideally without having to splash out
> any money?

Reply With Quote
Jan Kåre
Guest
Posts: n/a
 
Re: Trojan Horse/computer security question
Posted: 11-11-2003, 05:54 PM
See Symantec for detailed info:
http://securityresponse.symantec.com...coreflood.html

Symantec says ".....The Trojan connects to an IRC server and gives control
of the infected computer to a hacker..... "
Removal instructions are also given in this article.
Best of luck!

--
Jan Kåre

"Alvaro" <anonymous@discussions.microsoft.com> skrev i melding
news:021a01c3a879$9421ad10$a301280a@phx.gbl...
> Was wondering if anyone can advise me on a possible
> problem that's cropped up on my home PC.
>
> I use Microsoft Windows XP Home Edition. I ran a free
> security check from Systemac, and it identified two
> Trojan Horses in its system. I was able to delete one of
> them with no problems, but the other, Backdoor.Coreflood
> (in a C:\WINDOWS\system folder the contents of which are
> a complete mystery to me) seems impossible to deal with.
> The problem is that whenever I try to delete the file in
> question, a message comes up reading: "Cannot delete: It
> is being used by another person or program. Close any
> programs that might be using the file and try again."
>
> I'm wondering what kind of a threat this Trojan poses,
> and what I can do about it. According to Systemac, it's
> been on my computer since August this year, but when I
> scan the supposedly infected file with Norton AntiVirus
> it gets a clean bill of health. I've not noticed anything
> amiss while using the computer, and I haven't received
> any mysterious bills for things, but the idea of a hacker
> gaining remote access to one's computer is never a
> pleasant one.
>
> Does anyone know of any way in which I can eliminate
> Backdoor.Coreflood, ideally without having to splash out
> any money?

Reply With Quote
 
LinkBack Thread Tools Display Modes
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
Trojan Horse Martin Windows XP Hardware 6 06-22-2004 02:43 PM
Trojan horse Mark Betuzzi Windows XP Security & Administration 24 05-26-2004 04:59 PM
trojan horse Windows XP Help & Support 8 02-19-2004 03:58 PM
help with xp and a trojan horse fred Windows XP Setup 4 02-17-2004 05:12 PM
Security Problem/Trojan Horse Molly Windows XP Security & Administration 1 10-29-2003 09:19 AM