Some torjan detected by my Symantec AV

Hi,

I was watching a program over bbc iplayer over the net and suddenly I found my symantec AV popped up and showed backdoor.trojan (1.exe), trojanhorse (2.exe, 4.exe). The first one got deleted and other two ot quarantined. I tried to serach those two exe but didn't find them on the system.
The status is still shown as infected.
Any idea how to remove these two files. I've tried to delete them using AV but no success.
Moreover, if someone explains me how I got them and how to avoid them next time it'd be great.
At that time I ran netstat and found the following output (pls. see attached screenshot)

Cheers

Didnt you put a post up earlier about the strange connections your computer was trying to make? have you ran any of the malware scanners yet? like Malwarebytes, Adaware, spybot, etc. Id say try those first and see what comes from that =-)

Also, i would say you would have better luck if you put these types of threads in the Spyware/Adware section because gcc threads doesnt show up on the main page and people might not see it. (right?)

Quote:

---

Originally Posted by mungyun

Also, i would say you would have better luck if you put these types of threads in the Spyware/Adware section because gcc threads doesnt show up on the main page and people might not see it. (right?)

---

Agreed, thus now this thread has now been moved into Spyware / Adware.

:)

Try running hijackthis and copy/paste the log file here. Those logs tell you a LOT about what's going on in your system.

Try MalWareBytes first. I recently was infected with a similarly described trojan
that was putting files like 360.exe and 419.exe in my Local Settings/Temp folder
under my profile. Check msconfig to see if there a "winlogon.exe" enabled on
startup (winlogon shouldn't be there!). The rogue winlogon.exe will be hiding (and
I mean HIDING) in "C:\Recylcer\S-5-some-unique-sid". Both MalWareBytes and
Avira's AntiVir cleaned it out. Be sure to scan any portable USB drives you may
be using. My impression is I got infected off one of those, though I download a
lot of BBC stuff.