My anti-virus keeps on detecting two files over and over again as being infected with "Trojan" virus. I remove/heal it through the anti-virus but it keeps coming back. I tried deleting the main infected file, but windows gave me a warning which said that if I delete this file my computer 'may crash down or not function properly'
Anyway to permanently remove this virus without doing a format? Or risking the integrity of my computer ?
Taking into consideration what trojan viruses can do in regards of hacking and manipulating my computer's files and system, I'm starting to get scared that my privacy is being invaded. Help Please !!!
What are the files and their location?

What is your antivirus and your OS?
Yes, please Jad24. You should give additional details about the files, the OS and the antivirus you're using...
Yes, please give more details, i.e the exact names of the files with their extensions, and exact locations. And what anti-virus are you using? When was it last updated? Mac or Windows, and what version?
I'd install Malwarebytes Antimalware. Its free (there's a free version), and it's really effective. You can get it from cnet, or just google it. Good luck.

EDIT: @georges: he mentioned windows in his post.
Ok I do not intend to hijack the thread or anything but I'd like to ask a question...

My girlfriend has been experiencing some weird errors on her PC. She keeps getting an error telling her that a hard disk drive is missing or something. Also whenever she tries running an application (including the outdated antivirus - Kaspersky 2010) it doesn't run and gets that same error.

I assume that has to be a virus? Because it doesn't make sense that she could log into Windows if her hard disk is missing or corrupted, right?
[img]C:\Documents and Settings\king\Desktop\IMG00173-20101118-1205.jpg[/img]

This is an image of the virus vault.
Ive put these infected files over and over again in the vault.

As for the specs,
Windows XP Professional Version 2002 Service Pack 2
AVG Anti-Virus Free Version: 9.0.869

The virus: the 2 most recurrent are :
C:\WINDOWS\System32\56EA7D\TC-Z5P.EXE
C:\WINDOWS\System32\56EA7D\9C-N9.EXE
and there's:
C:\WINDOWS\System32\56EA7D\ZV90C256.EXE

and in the screenshot at the top you can see one additional infection.

AVG said they were Trojan Viruses :s

HELP!! :s


This is an image of the virus vault.
Ive put these infected files over and over again in the vault.
Hahaha. Seriously dude ? Is this how you share images ?
--
Anyway, back to the main topic. I recommend that you switch to another antivirus. I vote for Kaspersky 2011.
One other way to force the deletion of files is by using Unlocker. Give it a try. It should work.
jadf24,

You can use tinypic.com to upload your picture and get the direct link to use within the img tag.
Use one of the Trojan removers mentioned in other posts. I strongly recommend changing your anti-virus. AVG is not very good based on my experience. I use ESET NOD32, and my computer's been squeaky clean for 3 years now. For other good anti-viruses, refer to this thread : http://www.lebgeeks.com/forums/viewtopic.php?id=7620
Georges Raad wrote
C:\Documents and Settings\king\Desktop\IMG00173-20101118-1205.jpg

This is an image of the virus vault.
Ive put these infected files over and over again in the vault.
Hahaha. Seriously dude ? Is this how you share images ?
I share your laugh . it's the first time i post a pic here so im new to this. give me a break ! lol

anyway, i found a way on the internet on how to permanantly delete the main infected files, but im afraid it may render my computer damaged or disfunctional.
does anyone have an idea on how important these files are for the 'normal' functioning of my computer ?
thank you eurybaric for Malwarebytes Antimalware! it was super effective. I found them al 32 of the infected files, trojans, and worms, and eliminated them and put them in quarintine.. and luckily my computer is stil functioning ! nothing major i think. im posting from the same laptop
Thanks for anyone who helped

here's a full report if anyone is interested:

Windows 5.1.2600 Service Pack 2
Internet Explorer 8.0.6001.18702

11/18/2010 6:42:51 AM
mbam-log-2010-11-18 (06-42-51).txt

Scan type: Quick scan
Objects scanned: 154545
Time elapsed: 40 minute(s), 10 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 5
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 3
Files Infected: 24

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
C:\Documents and Settings\king\Local Settings\Temp\E_N4\krnln.fnr (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\king\Local Settings\Temp\E_N4\HtmlView.fne (HackTool.Patcher) -> Delete on reboot.
C:\Documents and Settings\king\Local Settings\Temp\E_N4\dp1.fne (Worm.Autorun) -> Delete on reboot.
C:\Documents and Settings\king\Local Settings\Temp\E_N4\eAPI.fne (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\king\Local Settings\Temp\E_N4\internet.fne (HackTool.Patcher) -> Delete on reboot.

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\Documents and Settings\George\Local Settings\Temp\E_N4 (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Documents and Settings\Guest\Local Settings\Temp\E_N4 (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Documents and Settings\king\Local Settings\Temp\E_N4 (Worm.Autorun) -> Delete on reboot.

Files Infected:
C:\Documents and Settings\king\Local Settings\Temp\E_N4\krnln.fnr (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\king\Local Settings\Temp\E_N4\HtmlView.fne (HackTool.Patcher) -> Delete on reboot.
C:\Documents and Settings\king\Local Settings\Temp\E_N4\dp1.fne (Worm.Autorun) -> Delete on reboot.
C:\Documents and Settings\king\Local Settings\Temp\E_N4\eAPI.fne (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\king\Local Settings\Temp\E_N4\internet.fne (HackTool.Patcher) -> Delete on reboot.
C:\Documents and Settings\George\Local Settings\Temp\E_N4\cnvpe.fne (Worm.AutoRun) -> Quarantined and deleted successfully.
C:\Documents and Settings\George\Local Settings\Temp\E_N4\dp1.fne (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Documents and Settings\George\Local Settings\Temp\E_N4\eAPI.fne (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\George\Local Settings\Temp\E_N4\HtmlView.fne (HackTool.Patcher) -> Quarantined and deleted successfully.
C:\Documents and Settings\George\Local Settings\Temp\E_N4\internet.fne (HackTool.Patcher) -> Quarantined and deleted successfully.
C:\Documents and Settings\George\Local Settings\Temp\E_N4\krnln.fnr (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Guest\Local Settings\Temp\E_N4\cnvpe.fne (Worm.AutoRun) -> Quarantined and deleted successfully.
C:\Documents and Settings\Guest\Local Settings\Temp\E_N4\dp1.fne (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Documents and Settings\Guest\Local Settings\Temp\E_N4\eAPI.fne (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Guest\Local Settings\Temp\E_N4\HtmlView.fne (HackTool.Patcher) -> Quarantined and deleted successfully.
C:\Documents and Settings\Guest\Local Settings\Temp\E_N4\internet.fne (HackTool.Patcher) -> Quarantined and deleted successfully.
C:\Documents and Settings\Guest\Local Settings\Temp\E_N4\krnln.fnr (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\king\Local Settings\Temp\E_N4\cnvpe.fne (Worm.AutoRun) -> Quarantined and deleted successfully.
C:\Documents and Settings\George\Local Settings\Temp\E_N4\shell.fne (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Documents and Settings\George\Local Settings\Temp\E_N4\spec.fne (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Documents and Settings\Guest\Local Settings\Temp\E_N4\shell.fne (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Documents and Settings\Guest\Local Settings\Temp\E_N4\spec.fne (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Documents and Settings\king\Local Settings\Temp\E_N4\shell.fne (Worm.Autorun) -> Delete on reboot.
Wow... This thread reminded me of those days when I used to find over 50 viruses in my PC when I didn't know much about computers. I've never found one lately. I just keep blocking them before they even enter my system. :(
Glad to be of help Jadf24 :) .

Be careful now though as MalwareBytes does not have live protection (at least not the free version). So you better switch to a better antivirus. I had lots of trouble with AVG and did not like it one bit. Avast free is not bad, and well, its free (obviously).

Cheers
jadf24 wrote[url]C:\Documents and Settings\king\Desktop\IMG00173-20101118-1205.jpg[/url]

This is an image of the virus vault.
Ive put these infected files over and over again in the vault.
why is your computer name : King :) ???
genghis wrote
jadf24 wrote[url]C:\Documents and Settings\king\Desktop\IMG00173-20101118-1205.jpg[/url]

This is an image of the virus vault.
Ive put these infected files over and over again in the vault.
why is ur computer name : KIng :) ???
Haha I swear I was waiting for someone to say that ! .. My account's name is Jad, but initially I named the computer 'KingK like 3-4 years ago! this laptop is kinda old but I just keep it around!
And Yes I am a King ! Hehe
I've been meaning to change that. But never bothered to !
Ok first, Windows XP SP2 is highly vulnerable. Some trojans WILL remain in your computer without your knowledge. Actually, a remote hacker may be sniffing data out of your computer right now. How do I know? Well my workplace once got into deep shit when a hacker began controlling the client computers, and the virus automatically replicated on the network. All that is because of shitty Windows XP SP2. I tried Malwarebytes, Spyware Remover, and other apps but nothing worked. Finally I figured it out; simply update your Windows. I ran update for SP2 to make it SP3. Plus I downloaded later Windows updates and the issue got solved. As long as your Windows stays vulnerable, you will still get shit loads of trojans.

Windows XP SP2 is now legacy, upgrade your Windows as soon as possible.
MrClass wroteOk first, Windows XP SP2 is highly vulnerable. Some trojans WILL remain in your computer without your knowledge. Actually, a remote hacker may be sniffing data out of your computer right now. How do I know? Well my workplace once got into deep shit when a hacker began controlling the client computers, and the virus automatically replicated on the network. All that is because of shitty Windows XP SP2. I tried Malwarebytes, Spyware Remover, and other apps but nothing worked. Finally I figured it out; simply update your Windows. I ran update for SP2 to make it SP3. Plus I downloaded later Windows updates and the issue got solved. As long as your Windows stays vulnerable, you will still get shit loads of trojans.

Windows XP SP2 is now legacy, upgrade your Windows as soon as possible.
You're absolutely right !!
I just re-scanned my computer; 10 infections were detected .. And that's after the Malwarebytes removed the previous 32 infections and another reboot ! :S
This is getting annoying
But every half an hour almost, AVG detects the virus and I senfd it to the vault ! It seems AVG is only detecting the virus when the hacker is trying to gain access !
Ill do my best to upgrade my service pack coul I just delete the main infected file?