Microsoft Anti-Spyware just found trojan.backdoor.small.fb

[scrub]

This just showed up on a daily scan. I run one every morning, so it shouldn't have been on my computer for more than a day. I had MAS delete it, and running Spy-Bot and Ad-Aware didn't find anything. I'm about to run a full AV scan.

I haven't had a lot of success googling to find out what this thing does. If my AV comes up clean, should I do anything else? Specifically, should I change my passwords and/or reinstall my operating system?

Thanks.

scrub

[DQPaulie]

It just showed up for me yesterday also. Any info?

DQPAulie

[goodguy_1]

Same I use MAS and it found it 2 days in a row. Once I'm done multi-tasking I'm going to reboot and see if it regenerates itself.

dude re-install os slow down!

it has been in the same temp. file both times.. jpg34 ..some such. Maybe its a trojan from a certain porn site ..chill.dont do anything drastic to your os.

do you have system restore ?

I havent used it yet just curious.

[goodguy_1]

[ QUOTE ]
do you have system restore ?

[/ QUOTE ]

if you do you may have to disable system restore to remove the virus/trojan effectively. We/you should be able to remove it thu w/o having to go that far.

Also run hijackthis.exe to follow what processes your pc is running. If you call up Symantec this is what they'll tell you to initially scan your system with-pretty lame but true. NIS 2006 has not been doing the job of late.

[SamG]

I had the exact same thing happen to me, scrub. It showed it yesterday. I deleted it, and it showed up again in a scan again today. Other spyware tools don't find anything.

I'm not sure what this thing is either and haven't been able to find much info about it. I installed ZoneAlarm for more protection. I was planning on changing my passwords as well, but I don't want to do that until I'm sure it's off my system.

[goodguy_1]

If it returns check this out:
Generic Trojan / Adware Removal Procedures

[Evan]

This showed up on mine too. Any idea where it's from?

[scrub]

[ QUOTE ]
This showed up on mine too. Any idea where it's from?

[/ QUOTE ]

The only weird link I clicked on yesterday was the facial recognition thing in OOT.

I didn't see if the MAS definitions updated yesterday--there's a chance this is something that showed up as a result of that...

scrub

[wonderwes]

For it to show up on this many 2+2'ers computers in no coincidence. This might be a brand new worm. Let us know if the spyware was able to fully delete it. I might reinstall itself on your machine's bootup. Also post if system restore worked.

[scrub]

It didn't come back for me at startup, nor did it show up on subsequent SpyBot, Ad-Aware, or KAV scans.

I'm wondering if the MAS definitions changed in a way that would cause a false positive on a common temp file...

scrub