How to delete the "Downloader.Trojan" virus ?

Unfortunately, that solution does not solve the problem at hand...just because you can't access the file does not mean the system can't.

Try this instead:

1) Download, install and update Ewido (skip if you have this done already)

2) Reboot into Safe mode.

3) Scan with Ewido.

4) Navigate to here: C:\ProgramFIles\Common Files \ Wise Installation Wizard\WISCDEBF9E7BCEB43A7986CE66377C28ABC_1_0_0.MSI

5) Delete that file along with Loadadv458.exe if it is still around.

6) Run Disk Cleaner and clean up all your Temp, Temp Internet Files, History, Cookies.

7) Reboot the computer.

8) Scan with Norton once more to check that Norton is coming up clean.

"just because you can't access the file does not mean the system can't."

Not true. If you remove all permissions from the file, the system cannot access it any more. The key here is "all" permissions.

Make sure you disable system restore, then run scan again.

Also Run ewido a couple of times with system restore off, sometimes it takes a couple scans  to eliminate the trojan.

Resuming from previous thread.

First try what war1 suggested, and r-k repeated here.
Though I am afraid it's another file that riggers them, hence creating duplicates.

As for the processes:
press ctrl+alt+del
when task manager opens, click on the process tab, and check for suspected processes, as that might be the cause you can't delete the file.

As per hijack use, it's not as hard as it looks.

Lauch hijackthis, click on "scan"
a long list will appear, on the bottom left click on save log
a notepad document with that long list will open
select all
copy
go here
http://www.hijackthis.de/index.php?langselect=english
paste in the box, and click analyze
wait few seconds (depends on your internet connection)
see the results, and suggestions
read the notes to understand the marking

DO NOT POST the log here, if you really have doubts post only the entries you are not sure about.

Hello

just download hitmanpro it is a free tool on www.hitmanpro.nl it contains different tools for spyware

The page is in dutch but the tool can be installed in different languages, it contains a selection of removal tools and can run unattended after the installation.

I always use it when one of my customer has a problem with great results.

success

kind regards

chatake

Just a note about Norton's corporate companion, Symantec Anti-Virus Corporate Edition 9. SAV 9 has continued to find some adware on my C:/ drive even though the adware has been removed. I know the stuff has been removed because I removed it. And my machine is running fine.

What's going on is that I'm running Win98SE, which has the famous problem of disk defragment never completing -- especially on the c:/ drive. So SAV 9 is spotting something that has been erased but that hasn't been overwritten. When I tell it to delete, it can't do it. I check my processes with process explorer, etc.

That may be your situation, Cross. I'd go read what the downloader trojan does and watch to see if anything like that happens on your machine. If yes, then you're infected. If no, then a false positive. But give it enough time to be sure.

I had one of those things. This got rid of it:

Start->Run->sysdm.cpl <enter>
From the System Restore tab, Turn it off - by checking it.
Reboot and then deselect it to have it reenabled (it 'can' come in handy sometimes, but can also be a hiding place for trojans).
This should take care of it - (the trojan has embedded itself in one of your restore points - this will kill all restore points, thus the trojan horse as well).
You will lose all previous restore points, as you've noticed -but you wouldn't want to restore this trojan either, so that's irrelevant...

PROBLEM (finally) RESOLVED !!

I tried the Kaspersky Antivirus...as suggested by "alen_re "....and BINGO !!!!  It cleaned out theTrojan !

Excellent stuff  "alen_re" !   All the points to you.... and plenty of THANKS to the rest of you guys for trying to help (much appreciated) !

All the best !

Hans