Spyware, Viruses, & Security forum

General discussion

Need Help Removing Spyware.Netrat and Trojan Horse

by tonyzeng / March 15, 2008 7:29 AM PDT

My computer is affected with Spyware.Netrat and TrojanDownloader:Win32/Harnig.gen!L (trojan Horse) but my antivirus can't remove it. I use the Norton AntiVirus 2008 with Antispyware and I have Window XP. Both of the Spyware and Trojan are from a compressed file. I try to manually deleted it but i didn't find the file stated in the manual (http://www.symantec.com/security_response/writeup.jsp?docid=2003-080811-2822-99&tabid=3
http://www.symantec.com/security_response/writeup.jsp?docid=2004-021914-2822-99&tabid=3) Can you please help me out on how to remove it because the computer has been affected over a month and i don't know if any of my information was taken by a third-party? Thanks in advanced.

Discussion is locked
You are posting a reply to: Need Help Removing Spyware.Netrat and Trojan Horse
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: Need Help Removing Spyware.Netrat and Trojan Horse
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
I guess, since
by JonathanCase / March 15, 2008 1:10 PM PDT

you posted the links to the removal advisories, you attempted to follow them but couldn't.
When your AV flags this/these, what are the detected names/paths? That would be a place to start looking.
You will need to display hidden files, which you can do via "tools>folder options" in any explorer window.
http://www.superantispyware.com/ has a good reputation for helping to remove this sort of nasty, give it a whirl.

Collapse -
Norton 2008
by Michael_York / March 18, 2008 4:56 AM PDT

Hi Tony,

This is Mike from the Norton authorized Support team responding to your post regarding infections on your computer. Norton AntiVirus 2008 does have the ability to detect and remove threats in compressed files. The first thing I would recommend is that you manually run LiveUpdate from the main Norton AntiVirus window. Run LiveUpdate manually as many times as needed until you are informed that no more updates are available.

After you update your installation, please reboot into Windows Safe Mode and then run a Full System scan from there.

Please let me know if you are successful after updating and running the scan in Safe Mode.

Thank you,

Collapse -
Spyware and Trojan Horse
by tonyzeng / March 20, 2008 9:41 AM PDT
In reply to: Norton 2008

Hey Mike

I did what you told me to do but it still couldn't remove the the Torjan Horse and Spyware.Netrat.

Collapse -
tony, check my link, it is computer associates
by darclew3-2215827575258062 / March 20, 2008 10:52 AM PDT
Collapse -
Did you complete the steps in the Symantec document?
by Michael_York / April 1, 2008 7:01 AM PDT

Hi Tony,

I'm sorry to hear that you are still having problems removing the threats on your computer.

In your posting, you give the links on the Symantec support site which describe the instructions for manually removing these threats. Can you please let me know if you followed the instructions on the 'Removal" tab in these two documents? This would include, for example, turning off System Restore and also backing up your Windows registry and manually deleting the entries. Please let me know if you have followed all of the steps in the "Removal" tab, located in both of the documents that you referenced.

You may also want to try using the Symantec Online Security Scan, which must be run using Internet Explorer 5.5 or higher.

Please make sure that all applications are closed and then click on the following link and run both of the tests.


Thank you,

Michael York
Norton Authorized Support Team
Symantec Corporation

Popular Forums

Computer Newbies 10,686 discussions
Computer Help 54,365 discussions
Laptops 21,181 discussions
Networking & Wireless 16,313 discussions
Phones 17,137 discussions
Security 31,287 discussions
TVs & Home Theaters 22,101 discussions
Windows 7 8,164 discussions
Windows 10 2,657 discussions


Your favorite shows are back!

Don’t miss your dramas, sitcoms and reality shows. Find out when and where they’re airing!