TargetSaver (Trojan Downloader)

[Carlos]

I have been infected by this threat (TargetSaver (Trojan
Downloader)) and MS AntiSpyware found it and removed it
but every time I run the scan it detects it again and
again. In there any procedure that allow me to delete
this threat permanently?
Thanks.

 

[Engel]

Holas Carlos

Please submit a suspected spyware report to spynet. (tools-

submit suspected spyware report).

Feel free to say what you've got in place and have tried,
and that it didn't work.

Once that has completed, please reboot into safe mode
logged in as administrator
and run a full AntiSpyware scan
(open Microsoft AntiSpyware, on the scan page choose Scan
options > Full System Scan (check the boxes below) >
click "Run Scan Now" ) scan with the latest signatures to
see if that helps.
It is also important to do a full virusscan with an
updated antivirusprogram in Safe Mode

 

[AndyManchesta]

Hi Carlos ,

Have you got a TSA entry on your add/remove screen if so
press it

This adware may include an uninstaller.


see if this file exists.

C:\Program Files\Common Files\tsuninst.exe.


If the file does exist, double-click it and follow any
prompts. After the uninstaller is finished, to make sure
that it has been removed, follow the instructions below.


Goto start then run and type:


regedit

Find this key,If you unsure either use the search feature
which you can get to my pressing "Edit" on the top bar
then "Find" or start with HKEY_LOCAL_MACHINE then click
the plus + beside it, Then find Software and click the
plus + and so on to you get to the Run folder.


HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersi
on\Run.


On the right, right-click the entry

Tsa

or

Tsa2

and choose 'Delete'.

It will look like this :

"Tsa2"="C:\PROGRA~1\COMMON~1\tsa\tsm2.exe"

Also check for these :


HKEY_LOCAL_MACHINE\SOFTWARE\TSA
HKEY_LOCAL_MACHINE\SOFTWARE\Uninstall\TSA
HKEY_CURRENT_USER\SOFTWARE\TSA



Restart the computer and goto start then c\drive then
program files,then to the common files folder and
delte "tsa" if found

C:\Program Files\Common Files\tsa\
C:\Program Files\Common Files\tsa\rainbow



Regards

Andy

 

[Guest]

-----Original Message-----
I have been infected by this threat (TargetSaver (Trojan
Downloader)) and MS AntiSpyware found it and removed it
but every time I run the scan it detects it again and
again. In there any procedure that allow me to delete
this threat permanently?
Thanks.
.try regseeker 1.35 beta it will search the registry for

the entry u type in and delete it