Endpoint Protection

 View Only
  • 1.  Trojan.tracur "removed", but...

    Posted Nov 17, 2014 02:30 PM

    Just as the title says. I ran a scan and it caught a trojan and supposedly removed it, but I'm still getting these strange redirects to websites I've never visited. I've tried to run more scans in safe mode, but everything has come up clean.  Does anyone know how to permanently get rid of this, preferably manually?



  • 2.  RE: Trojan.tracur "removed", but...

    Posted Nov 18, 2014 02:43 PM

    Have you tried a threat analysis scan?

    About the Threat Analysis Scan

    http://www.symantec.com/docs/TECH215550

    You may need to try Norton power eraser as well:

    https://security.symantec.com/nbrt/npe.aspx

    There are a few good third party tools as well such as JRT or AdwCleaner



  • 3.  RE: Trojan.tracur "removed", but...

    Posted Nov 18, 2014 03:15 PM

    You might also want to try Malwarebytes followed by the appropriate version of HitManPro.



  • 4.  RE: Trojan.tracur "removed", but...

    Posted Nov 18, 2014 05:24 PM

    Symantec recomended removal.

    http://www.symantec.com/security_response/writeup.jsp?docid=2011-071504-5259-99&tabid=3

     

    Trojan.Tracur is a Trojan horse that redirects web search queries to a malicious URL and may also drop other malware.

     

    If Sep is not detecting and not removing then there may be new varients which need to be submited for definitions set to remove the files properly.

     

    You can submit it from the quarantine folder.

     

    http://www.symantec.com/business/support/index?page=content&id=TECH97449&profileURL=https%3A%2F%2Fsymaccount-profile.symantec.com%2FSSO%2Findex.jsp%3FssoID%3D14163494376911303gX7A2248RP9gYw05Zx9Q6V0h30JXpZbv2



  • 5.  RE: Trojan.tracur "removed", but...

    Posted Nov 19, 2014 01:09 AM

    Agree with brian. You can run symhelp utility for clean the threat. All process for run the symhelp for virus is available in attach article

    How to run the Threat Analysis Scan in Symantec Help (SymHelp)

    Article:TECH215519  |  Created: 2014-03-03  |  Updated: 2014-07-10  |  Article URL http://www.symantec.com/docs/TECH215519


  • 6.  RE: Trojan.tracur "removed", but...

    Posted Nov 21, 2014 01:50 PM

    Thank you for the suggestions, however I tried both and the Threat Analysis scan came back clean, but the Norton Power Eraser did find something. It was called "yxqvjyq.dlll" I removed it, but it didn't fix my issue. Neither did.



  • 7.  RE: Trojan.tracur "removed", but...

    Posted Nov 21, 2014 01:51 PM

    I tried this, but it came back clean. Thank you, though.



  • 8.  RE: Trojan.tracur "removed", but...

    Posted Nov 21, 2014 01:54 PM

    Thank you for replying, I checked the quarantine folder and it was empty. I also tried both the Norton Power Eraser and the  Threat Analysis scan. The latter came back clean, but the Norton Power Eraser found "yxqvjyq.dlll" I removed it, but it didn't solve my issue.



  • 9.  RE: Trojan.tracur "removed", but...

    Posted Nov 21, 2014 06:18 PM

    Have you tried either of the third party tools I mentioned? You can also reset your browser settings as well to clear any remnants out.