Re: Ckrokad Trojan Question

On Mon, 15 Mar 2004 22:44:47 -0500, Dan Rather wrote:

> Hello:
>
> I am running AVG Anti-Virus. It has detected a trojan horse by the name of
> Ckrokad. It has infected a software program I have. Everytime I access or
> start the program AVG seizes my computer and asks if I want to enable
> access. If I press heal the screen goes away but the trojan horse remains.
> I have tried a scan with F-Prot using the latest virus definitions. F-Prot
> detects no trojan horse. Does anyone know anything about this trojan
> horse? I also have system restore disabled. Any advice would be
> appreciated.
>
> Thanks!
What does the AVG website say about this trojan?
Where is the file located?
Maybe it is spyware ... do you have AdAware and Spybot to check?
Do you have a firewall that blocks both incoming and outgoing
transmissions?
Have you emptied your temporary internet files and cache?
Is it a cookie, which can be removed.
Have you done an online virus check with:
http://www.pandasoftware.com/active...n_principal.htm
or
http://housecall.antivirus.com/housecall/start_corp.asp

I have both SpyBot Search and Destroy and Ad-Aware installed. I ran a
scan with both programs and Ad-Aware detected a registry entry. It
said it could be virus related, so I deleted the regsitry entry. It
seems to just infect my FotoTime software. I also have Trojan Remover
installed with the latest updates and it does not see anything either.
I went to the AVG website and they only have the latest virus threads
shown. I always have system restore option disabled. I noticed that
while doing different scans of my system a lot of .cpy files in my
restore/temp folder. So I enabled system restore and rebooted then
disabled it again and restarted my computer. I wonder if this trojan
horse could have enabled system restore on it's own to reside their. I
have not done a online scan because I thought I had enough protection.
I also did a scan with F-Prot for dos with the latest virus
definitions. On the web I cannot find any information about this
trojan horse.


On Tue, 16 Mar 2004 07:54:02 GMT, Dan Shackelford
<danshack@nospam.ix.netcom.com> wrote:

>On Mon, 15 Mar 2004 22:44:47 -0500, Dan Rather wrote:
>
>> Hello:
>>
>> I am running AVG Anti-Virus. It has detected a trojan horse by the name of
>> Ckrokad. It has infected a software program I have. Everytime I access or
>> start the program AVG seizes my computer and asks if I want to enable
>> access. If I press heal the screen goes away but the trojan horse remains.
>> I have tried a scan with F-Prot using the latest virus definitions. F-Prot
>> detects no trojan horse. Does anyone know anything about this trojan
>> horse? I also have system restore disabled. Any advice would be
>> appreciated.
>>
>> Thanks!
>What does the AVG website say about this trojan?
>Where is the file located?
>Maybe it is spyware ... do you have AdAware and Spybot to check?
>Do you have a firewall that blocks both incoming and outgoing
>transmissions?
>Have you emptied your temporary internet files and cache?
>Is it a cookie, which can be removed.
>Have you done an online virus check with:
>http://www.pandasoftware.com/active...n_principal.htm
>or
>http://housecall.antivirus.com/housecall/start_corp.asp
>