Solved

trojon problem

Posted on 2004-09-29
4
141 Views
Last Modified: 2013-12-29
hi there,

i m using windows'98 i hv win patrol installed the problem is a virus by the name on trojon horse downloader.t supdate.a has logged on 2 my cdrive c:\program files\commonfiles\tsa\tsl.exe.

there is a folder called tsa in my common files which runs when the computer starts or in between now win patrol has diabled the program from running during start up and the virus is removed by avg but time and again the tsa folder reappears by itself and so does the virus

pls help

thank you

pushpinder
0
Comment
Question by:02228540675
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 6

Accepted Solution

by:
caza13 earned 125 total points
ID: 12183357
This is not a virus or trojan. It is a direct-marketing adware application.

This kind of application generally comes bundled with another program, which usually discloses the fact that it is ad-supported.  Users agree to have the Adware installed in the license agreement, although they may not realise at first that this file was packaged with the product they installed.

The program comes with a dropper file.  When the dropper runs,  the program is copied as the following file:

c:\Program Files\Common Files\tsa\tsl.exe
The following Registry key is added to hook system startup:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
"Tsl" = "c:\Program Files\Common Files\tsa\tsl.exe"
The program connects to a specific web site.  It can further download other programs to the machine.  It might also post machine related information to the website.

http://vil.nai.com/vil/content/Print127649.htm
0
 
LVL 27

Expert Comment

by:Asta Cu
ID: 12213080
Please remain active in ALL your open questions here and provide feedback when experts give you information; otherwise we are all just spinning our wheels.

Where are you now with this?
0

Featured Post

Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
There are many software programs on offer that will claim to magically speed up your computer. The best advice I can give you is to avoid them like the plague, because they will often cause far more problems than they solve. Try some of these "do it…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question