Trojan horse affecting reboot.exe

[Linda Lyon]

My anti-virus says I have a trojan horse in c:\Documents
and Settings\All
Users\Start\Menu\Programs\Startup\Reboot.exe
and says it is unable to fix the problem.

How do I fix it. I am afraid to reboot my system in case
it will spread it somewhere else.

 

[Sharon F]

My anti-virus says I have a trojan horse in c:\Documents
and Settings\All
Users\Start\Menu\Programs\Startup\Reboot.exe
and says it is unable to fix the problem.

How do I fix it. I am afraid to reboot my system in case
it will spread it somewhere else.

That's not a standard Windows file. It isn't needed by XP to operate and
may even be a part of the trojan. You could safely delete or quarantine
that file.

What trojan did your antivirus say that you have? Did you look it up on the
website for the antivirus program? The extra information about the
intrusion usually includes additional removal instructions that you need to
perform manually.

 

[Linda Lyon]

-----Original Message-----


That's not a standard Windows file. It isn't needed by XP to operate and
may even be a part of the trojan. You could safely delete or quarantine
that file.

What trojan did your antivirus say that you have? Did you look it up on the
website for the antivirus program? The extra information about the
intrusion usually includes additional removal instructions that you need to
perform manually.

--
Sharon F
MS MVP - Windows XP Shell/User
.
It did not say what the name of the trojan was

just "trojan horse" and on the website it gave no extra
information, so I have quarantined it and will hope for
the best. Thank you for the help Sharon.

 

[Sharon F]

just "trojan horse" and on the website it gave no extra
information, so I have quarantined it and will hope for
the best. Thank you for the help Sharon.

You're welcome, Linda. May want to run extra antivirus scans on the system
during the next few days to monitor whether the trojan returns or not.
Sometimes there are multiple parts to these things. If one part is missing
the other part restores the file that you have just removed or quarantined.

 

[Frank Putnam]

Linday,
I'm curious which Virus checker you're using and which signatures. I
received the same indication this morning on a Win98 machine. I'm using
Symantecs Norton Antivirus 2000 with signatures dated yesterday. The reason
for asking is the possiblity that the reboot.exe has been there for a long
time, but there's something in these new signatures that's causing the
alert.
Regards,
Frank W. Putnam

 

[Rick Pearce]

I found the same NAV popup warning on my WinXP Pro machine this
morning. Identified as a Trojan Horse, but no additional info. I
found the file 'reboot.exe' in my All Users/Startup folder. It was
timestamped 8/21/2001, but I can't believe it's been there all this
time. I right-clicked on it and selected Scan with NAV. It was
detected as a virus and I quarantined it. Now running a full system
scan.