[zaknbou]

when i try to open my website anti virus captured this trojan (anicmoo.b)trying to install itself it is in my webspace ....please guys i am newbie it took me mounth to do my website and now it ruined nobody will check a webiste with a trojan trying to install itself ... i need help...how could solve this problem .
thanks in advance



Trojan.Anicmoo.B is a downloader Trojan that exploits the Windows User32.DLL ANI File Header Handling Stack-Based Buffer Overflow Vulnerability (as described in the Microsoft Security Bulletin MS05-002). The Trojan exists as a malformed animated cursor (.ani). The Trojan downloads a copy of SecurityRisk.Downldr

[RoiPerez]

Maybe get your host to erase all of your webspace? OR to atleast remove the trojan?

[zaknbou]

is there another way ?

[b v]

delete all .ani files? why the fuck would you want an animated cursor anyway

[zaknbou]

even that i am newbie i still have a common sense ...the first things i do is i searched for the .ani extension but i didn't find any on my webspace that is the big surprise ......could northon make a mistake ? maybe there is no virus !! cause no .ani file ...any comment

[Dusteh]

you host should have some form of antivirus running so that this shouldn't happen in the first place. Tell them to wipe the server so you can reinstall the site, better yet, get a new host.

[pgo]

Have you contacted your host about this? If not, that's the first thing you should do.

[zaknbou]

thanks guys for your replies ,
i already contacted my host but he assured me that there no such viruses on his server , could anti virus symantec is being paranoid ? could he be mistaken by the code ?