Hello,

My anti virus software (nortan, avg) keep finding this "trojan a.bat" but say it can't be fixed. What is it and how do I get rid of it? I'm running xp pro. Thanks for any help.

Scott.

Re: Trojan a.bat?

Sorry I was so vague with my question, I have more info now. AVG's warning is"while opening file :c:/a.bat Trojan Zapchast."

I hope this is helpful.

Thanks Scott.

Re: Trojan a.bat?

When the batch runs it starts listening on TCP port 26. What it will do is if someone telnets to port 26 on the PC it should give them a remote cmd.exe prompt. From a hacker point of view that is the equivalent of the keys to the kingdom - they can copy files, use your machine as a zombie - whatever. If you have a firewall that blocks access to port 26 then the risk is minimised but not fixed. Your machine has been seriously compromised. Save your data and format.

Chris B

p.s. Running two AV programs at the same time can result in major issues. Don't do it. Uninstall one before using the next.

Re: Trojan a.bat?

Scott, Files ending in .BAT are (DOS) batch files. When they run they execute a series of commands listed in the batch file. To see what it's doing, and whether benign or sinister, in Windows Explorer, right-click on the file A.BAT (in your C: root directory) and select 'Edit'. This will open the batch file in Notepad, and you can then see the commands in it.

See if any of those commands make any sense to you, or if not, maybe copy and paste them into this forum for further comment by others. Or else just rename the file as (say) A_BAT (ignore the warning about changing file types) and see if anything behaves differently in your system. If everything's working fine after a few weeks, just delete the offending file.

Regards, Daniel

Re: Trojan a.bat?

Download Killbox and get rid of it, here>>>

http://killbox.net/

Re: Trojan a.bat?

Scott,

Firstly, you may find you will experience problems trying to run both Norton and AVG. IMHO, scrap the Norton, as a large number of people who use this site will testify, Norton gives more problems than it is worth.

Firstly turn off your System Restore, then boot into Safe mode and run the AVG. Reboot again and turn the System Restore back on (if you use it).

Are you running the full suite of AVG products, apart from the Anti-virus, they have an Anti-spyware and Root-kit (for trojans) products available for free download as well that I have found to be excellent and well worth the download.

Hope this helps.

Matt

Re: Trojan a.bat?

Firstly I'd like to thank you all for responding to my problem.

I ran avg in safe mode and it found the Trojan and locked it into the virus vault but says this infection can't be healed as it's a back up file that's infected. Then running other scans with other AVS in normal mode found nothing, except SS&D found an Rbot which it deleted. When I reboot, Norton keep's warning me about the same Trojan which can't be found in any scans so I have removed Norton from my pc and all seem's well but I would still like to remove the Trojan completely.

I shall look into this a bit more when I have some free time, so in the mean time please feel free to add more advice.

Thankyou Scott.

all of friends use k7 inet security antivirus ,remove that a.bat virus

Merci d'avoir un blog interessant