Trojan or ??

[pennydog]

Can someone please tell me what this is? TR/Dldr.Small.AZK

This was on our cmputer and I think the AVG deleted it. I have scanned twice since, ran adaware and it has not located again. It must have disabled our firewall, and it kept causing all pages to feeze or not open. I cannot seem to find the definition for this one.

Anyone know? Thanks.

[greengoose1]

You are correct. This is a trojan downloader. Looks like you unloaded an alias called Trojan-Downloader.Win32.Small.azk. The orginal is Troj/Dloader-QE. This is a newcomer apparently.

[pennydog]

Thanks GG1.

I have scanned and clean all afternoon, found some other adaware and removed it and also updated anything I could find to update. For some reason the automatic update for microsoft gets an error 0X80072EFD and I have searched the knowledge base and tried their fixes but it does not work. Sent a request to ms for an answer. I had to update manually. Thanks for the info.

[greengoose1]

Hello pennydog, If you find an answer to this one please post what you did. Found a reference to it as first found July 8 of this year. If this one is similar to others you will have to contend with a replicating situation also.

You, if you are comfortable with this, might check the registry for this trojan. As a reminder make a back up of the registry in case you make a typo error so you can restore quickly.

[pennydog]

Thanks. It has not shown up again. I did disable the restore (or whatever it is called) feature and scanned with my AV, Adaware and then used Tren Micro to scan for viruses/trojans and also for security info. TM has a dual scan on their site now. That is how I found out my automatic updates was not working properly and I found some adaware that was not picked up by the lavasoft program. Ihave 5 updates still left but there are no no porgrams on the computer that those pertain to. I will check the registry later today. After it was not found again, I did not think to check the registry. I do know it disabled the firewall both times, or something did.

Thanks for your help and info.