Trojan.Win32.Tdss.abdg

[undergr0und]

Hello
The AVP tool finds the following:

C:\RECYCLER\S-7-9-28-100022055-100015333-100005675-8674.comInfected: Trojan.Win32.Tdss.abdg1
C:\WINDOWS\Temp\2724375.tmpInfected: Trojan.Win32.Tdss.abdg1
C:\WINDOWS\Temp\626546.tmpInfected: Trojan.Win32.Tdss.abdg1
F:\RECYCLER\S-6-6-20-100021997-100016811-100030459-6458.comInfected: Trojan.Win32.Tdss.abdg1
F:\RECYCLER\S-6-8-88-100032719-100015697-100023209-9537.comInfected: Trojan.Win32.Tdss.abdg1
F:\RECYCLER\S-7-9-28-100022055-100015333-100005675-8674.comInfected: Trojan.Win32.Tdss.abdg1

After the scan when i chose to delete the trojan AVP deleted it but the virus is there again, please tell me how can i remove it.

[Rene-gad]

Check your system with CureIt in Safe Mode.

Switch off/Disable:
- Antivirus and and, if you have - Firewall.
- System Restore

- Execute following script in Manual Cure

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('F:\autorun.inf','');
 DeleteFile('F:\autorun.inf');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

After reboot execute following script in Manual Cure

begin
CreateQurantineArchive('C:\quarantine.zip');
end.

- Clean Temp-Maps, Cache of Browsers, Recycler. Use Windows service tool cleanmgr or CCleaner or ClearProg
- Close all the programs and start only Internet Explorer!!!
- Repeat a log file.
- Switch Antivirus and, if you have - Firewall, on.
- Go On-Line
- Upload the C:\quarantine.zip over the link Upload quarantined files on the top of this page.
- Attach a log to your new post..

[undergr0und]

Thank you very much for your help, it looks like the trojan is deleted, unfortunally the C:\quarantine.zip is empty.
I included the log of the last scan which i did after following your virus removal instructions.
Again thanks a lot for your help!

[Rene-gad]

Your system seems to be clean. Don't forget to patch it regular .