Microsoft Office Forums

Go Back   Microsoft Office Forums > >

Reply
 
Thread Tools Display Modes
  #1  
Old 01-02-2009, 05:08 PM
mlgraves mlgraves is offline
Novice
 
Join Date: Jan 2009
Posts: 2
mlgraves is on a distinguished road
Default Another discussion

Here is another solution - again not my work just directing other unfortunate souls such as myself

Trojan.Encoder.33 (FileError_22001) - Norton Internet Security / Norton AntiVirus - Norton Community

Excerpt from the above link

Hi Guys

This Infection has a catch 22 situation as the tool from Dr Web to decrypt the original files needs the infection to still be on the system, well the registry keys, though you can stop it from running in Msconfig.
In saying that if your Security software like Norton has the Malware flagged as High Risk then the infection is removed automatically without asking the user what to do, and there is the Problem. If the Registry Keys are removed by Norton or by people doing the usual scanning with SuperAntispyware or Malwarebytes, then the decrypter doesn't work.

Steps to take as long as Norton hasn't removed the infection.

1. Use "Msconfig" to deselect the startup process in the startup tab, The process you are looking for looks something like "43718D7A.exe" Then apply and restart the PC. After the Trojan should not be active.

2. Backup the 2 folders with the encrypted original files


\Documents and Settings\<username>\Local Settings\Application Data\CDD,
\Documents and Settings\<username>\Local Settings\Application Data\FLR.

To pendrive, CD or DVD etc. In case the decryption goes bad.

3. Now use the Dr Web decrypting tool to decrypt the .fcd files in the folders above back to their original state. If the tool doesn't work when in your account try when logged in via the others users accounts if any available.

4. Once you have your original files back, back them up for safety, once you are satisfied all your photos etc are back.

5. Remove the Trojan completely

Quads
Message Edited by Quads on 12-23-2008 09:25 AM
Reply With Quote
Reply



Similar Threads
Thread Thread Starter Forum Replies Last Post
Possible virus in Microsoft Word which alters the formatting of documents Shirley Munro Word 8 09-18-2010 12:37 AM
Help-overwriting files-could it be macro virus? Timpotty Word 0 03-06-2009 04:28 PM
Possible Virus in Word which alters formatting of entire document Shirley Munro Word 2 02-09-2009 02:43 PM

Other Forums: Access Forums

All times are GMT -7. The time now is 06:13 PM.


Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2025, vBulletin Solutions Inc.
Search Engine Optimisation provided by DragonByte SEO (Lite) - vBulletin Mods & Addons Copyright © 2025 DragonByte Technologies Ltd.
MSOfficeForums.com is not affiliated with Microsoft