4226
General Software Discussion / Re: Does anyone know how I may remove Trojan Dropper:MSIL/Livate.A ?
« Last post by tomos on November 08, 2013, 10:39 AM »From Zatiac
"Thanks for the response but I got it solved, I reset internet explorer and uninstalled java....that got all traces of the dropper off my laptopI suspect the dropper is how the fbi moneypacks ransom got on my laptop as well. "
-patteo (November 08, 2013, 09:59 AM)
that was something similar to what I cleaned of a laptop this summer - but that was with help of the german language www.trojaner-board.de (thread link).
They got me to scan with a whole bunch of apps:
1) AV (Avira was on the machine)
2) Malwarebytes
3) Oldtimer (think a German lang. only app - comparable to "Hijackthis") - which was also later used to erase some files when rebooting
4) Malwarebytes AntiRootkit
5) AdwCleaner
6) Emsisoft Anti-Malware
7) a "Windows repair tool" they had creasted themselves
8) ESET Online Scanner
Scans 1, 2, and 3 found files related to the trojan.
The Oldtimer scan found a *.js file and a *.pad file in Program Data
Other files were found in:
Users\[USER NAME]\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\
Users\[USER NAME]\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56\
(I presume the 6.0 above was the Java version number)
Users\[USER NAME]\AppData\Local\Temp\
Users\[USER NAME]\
and a shortcut in the Startup Menu:
Users\[USER NAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Recent Posts
I suspect the dropper is how the fbi moneypacks ransom got on my laptop as well. "



