Hi,

I canīt seem to find any info about a trojan which was spotted by AntiVir perhaps someone can help me, this was the trojan:

TR/Virtl.Breaker.SN

TIA

Hi Rasheed187,

TR/Virtl.Breaker.SN is a Hacktool:-

http://www.symantec.com/avcenter/venc/data/hacktool.html

You can see some of the names it goes under here:-

http://www.viruslist.com/en/viruses/encyclopedia?virusid=65901

Some more details of Hacker Tools, Exploits and VirTools can be found here:-

http://www.viruslist.com/en/virusesdescribed?chapter=152540538#hack

Did the Guard pick this one up, or was it the scanner? I'm assuming AntiVir managed to deal with the problem O.K. and you are just posting out of curiosity; but if you are having problems removing it please give the full filepath and your operating system.

Hi,

It was found by the scanner, and I have deleted the file. But if it was in memory, AntiVir should have spotted it with the realtime Guard right? Because I didnīt get a warning.

However MSAS reported that the "restrict anonymous guest access" setting was trying to be changed so I think a hacker tried to exploit it.

But itīs a bit strange that I couldnīt find any details about this trojan, so thatīs why I asked. Itīs always interesting to see what a specific trojan can do exactly.

Hi,

Thanks for the feedback, I was looking at my system events log and it seems like AntiVir spotted the trojan in my browser cache. Iīm not sure if the trojan was active at on point or not, but the MSAS notifications did make me a bit suspicious.

And yes, I forgot AntiVir doesnīt scan the memory. But at the moment there doesnīt seem to be any trojan active, will scan with A Squared and Ewido just to be sure.