Pesky Trojan Golid [Archive]

mcdhu

13th Feb 2006, 08:27

PC has been behaving oddly on startup for a while and I was therefore highly suspicious, but Norton found nothing time after time, nor did Trend Micro's online scan. However a similar online scan from Kaspersky discovered Trojan.Win32.Golid.g but gave me no options for dealing with it, It also said the file was C:\WINDOWS\system32\ExMenu.dll

Google gives only limited and unhelpful results so my question is can anyone please help me deal with this little pest or can I just locate and delete this file?

Dell Dimension PC, WinXp SP2, AOL 2 Meg BB, NAV, MacAfee Firewall, Netgear Firewall Modem Router

Many thanks
mcdhu

Coconutty

13th Feb 2006, 09:05

mcdhu :

The following two Anti Virus web sites have information about this ...

McAfee say it's NOT a Trojan virus as such, but is Adware and is knows as
"Adware.IAGold"

Removal instructions are for the use of their anti virus software products, with plenty of info on the McAfee site that may be helpful.

mcafeesecurity.com (http://vil.mcafeesecurity.com/vil/content/v_122016.htm#RemovalInstructions)

symantec.com (http://securityresponse.symantec.com/avcenter/venc/data/adware.iagold.html)

Good luck !

http://i34.photobucket.com/albums/d129/coconut11/coconut.jpg
Coconutty

mcdhu

13th Feb 2006, 10:07

Coconutty, Love the name and the 'icon'.

Thanks for your help. As the complete IT technophobe, I thought I'd disable NAV, download a trial version of Kaspersky AV and run that since it was their online scanner that found it in the first place. Happily, it found it and offered to deal with it - an offer which I happily accepted. I hope that's it now!

I don't understand why NAV fails to deal with this sort of thing!

Cheers,
mcdhu

mcdhu

13th Feb 2006, 11:06

..........and do I now need to replace/download the dll file ExMenu.dll??

Cheers
mcdhu

hobie

13th Feb 2006, 15:57

I don't understand why NAV fails to deal with this sort of thing!

because it's adware and not a virus is my guess .... :confused:

have a look at this symantec link ....

http://securityresponse.symantec.com/avcenter/venc/data/adware.iagold.html (http://securityresponse.symantec.com/avcenter/venc/data/adware.iagold.html)

note the remark on the Symantec link ....

This risk can be detected only by Symantec products that support security risks. For more information on security risks, please go here (http://securityresponse.symantec.com/avcenter/security_risks/index.html).

i.e. Norton Internet Security would have picked it up .....