Results 1 to 7 of 7

Thread: [Resolved] Trojan-Downloader.JS.lframe.bkz

  1. #1
    morey Guest

    Default [Resolved] Trojan-Downloader.JS.lframe.bkz

    I just picked up a High risk apparent virus: Trojan-Downloader.JS.lframe.bkz

    It was file: Local Settings\Temporary Internet Files\Content.IE5\IHVVB07MF\index[1].htm

    Since it was in the folder, "Temporary Internet Files," it appeared not to have any value to my software. Thus, I just deleted it.

    I am using ZASS version 9.1.008.000; anti-virus engine 8.0.2.42, DAT file 1018710432.

    Has anyone else had a similar detection and how did you handle it?
    Last edited by GeorgeV; May 26th, 2010 at 05:27 AM. Reason: Edit title

  2. #2
    Join Date
    Jun 2006
    Location
    The 3rd Coast - South Central Texas
    Posts
    10,465

    Default Re: Trojan-Downloader.JS.lframe.bkz

    Please Follow ALL of the Instruction in the Sticky Post at the Top of the Malware Section that you posted in..

    Malware Clean-up Guidance

    http://forums.zonealarm.com/showthread.php?t=70448
    GeorgeV
    ZoneAlarm® Extreme Security


    Click here for ZA Support
    Monday-Saturday__ 6am to 10pm Central time
    Closed Sundays and Holidays

  3. #3
    Join Date
    Jun 2006
    Location
    The 3rd Coast - South Central Texas
    Posts
    10,465

    Default Re: Trojan-Downloader.JS.lframe.bkz

    Quote Originally Posted by morey View Post
    I am using ZASS version 9.1.008.000; anti-virus engine 8.0.2.42, DAT file 1018710432.

    Has anyone else had a similar detection and how did you handle it?

    The AV DAT file has been Updated three times since DAT file 1018710432, it is safer to configure ZA to Update AV/AS as often as possible..

    http://forum.zonealarm.com/showthread.php?t=72655
    GeorgeV
    ZoneAlarm® Extreme Security


    Click here for ZA Support
    Monday-Saturday__ 6am to 10pm Central time
    Closed Sundays and Holidays

  4. #4
    morey Guest

    Default Re: Trojan-Downloader.JS.lframe.bkz

    George,

    In that link you said to run a Super Scan in safe mode. I notice ZASS only allows: Quick, Normal, Deep, Ultra Deep and Rootkit. Which is equivalent to "Super?"

    The virus was picked up in a Normal Scan at which point I deleted it from the ZASS table view since it was in the Temporary Internet Content folder. It was not attached to any necessary file it appears. Thus, I did not need to send it to Kaspersky for analysis.

    Doesn't that end the problem unless picked up again?

    I usually do a Normal Scan once per week.
    Last edited by morey; May 24th, 2010 at 06:57 PM.

  5. #5
    Join Date
    Jun 2006
    Location
    The 3rd Coast - South Central Texas
    Posts
    10,465

    Default Re: Trojan-Downloader.JS.lframe.bkz

    Quote Originally Posted by morey View Post
    George,

    In that link you said to run a Super Scan in safe mode. I notice ZASS only allows: Quick, Normal, Deep, Ultra Deep and Rootkit. Which is equivalent to "Super?"

    The virus was picked up in a Normal Scan at which point I deleted it from the ZASS table view since it was in the Temporary Internet Content folder. It was not attached to any necessary file it appears. Thus, I did not need to send it to Kaspersky for analysis.

    Doesn't that end the problem unless picked up again?

    I usually do a Normal Scan once per week.
    Thank your for your Feedback..

    The Untra Deep Scan = Super Scan..

    But it looks like you may be OK now..

    Please Post back if the problem re-occurs..
    GeorgeV
    ZoneAlarm® Extreme Security


    Click here for ZA Support
    Monday-Saturday__ 6am to 10pm Central time
    Closed Sundays and Holidays

  6. #6
    morey Guest

    Default Re: Trojan-Downloader.JS.lframe.bkz

    George,

    Thanks for the help. I updated ZASS to version 9.1.507.000. I set data files to update every 3 hours. I now have data file version 1018769248. I now have options for scans as: Quick, Normal, Deep and Super.

    I did a Deep Scan and no problems were found. The suggestion in the software is to do that every 6 months so I noted that to be done on my Outlook calendar. I set it to do a Normal Scan every week.

    I notice that the new ZASS version seems more active than the old version. It is using 39 Mb of memory by VSMON.EXE with 804,000 reads and 532,000 writes. This is resulting in about 3% of CPU usage.

    The old version did that as well when first updated. After a awhile it quieted down to where before the update there was practically no noise from the hard disk. Now the hard disk seems very active. Perhaps this is just a normal characteristic of ZASS after an update.

    PS: I shut down the PC. Then started it up again. Now VSMON.EXE only uses 17.9 Mb of memory and has 154,000 reads and has 47,000 writes. The hard disk is quiet again. It appears that high activity is only present after the initial install.
    Last edited by morey; May 25th, 2010 at 06:15 AM.

  7. #7
    Join Date
    Jun 2006
    Location
    The 3rd Coast - South Central Texas
    Posts
    10,465

    Thumbs up Re: Trojan-Downloader.JS.lframe.bkz

    Thank you for your Feedback..

    You are correct..

    " PS: I shut down the PC. Then started it up again. Now VSMON.EXE only uses 17.9 Mb of memory and has 154,000 reads and has 47,000 writes. The hard disk is quiet again. It appears that high activity is only present after the initial install. "

    Sometimes, after a New install, and after the first deep scan, it may take two or more reboots of the computer, for ZA to ajust to the new settings and settle down to normal quite activity..
    Last edited by GeorgeV; May 26th, 2010 at 05:31 AM. Reason: typo

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. New Trojan Trojan-Downloader.WMA.Wimad.n ????
    By pgrant in forum ZoneAlarm Anti-virus & Anti-spyware
    Replies: 0
    Last Post: December 25th, 2008, 10:44 AM
  2. trojan-downloader.win32.fraudload.vadn & trojan-downloader.win32.agent.vur
    By kspartsman in forum ZoneAlarm Anti-virus & Anti-spyware
    Replies: 1
    Last Post: July 10th, 2008, 06:21 PM
  3. Replies: 2
    Last Post: April 19th, 2007, 02:39 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •