F-Secure
Tools
BAT.FTP
Summary
Trojan-Downloader.BAT.FTP is usually a batch script that opens a connection to a remote FTP site (using a built-in Windows FTP client) in order to download one or more files and to activate them.Such trojans are commonly used my malware writers to update or download malicious files to an already compromised computer.
Disinfection
To get rid of the batch trojan itself and the files that are downloaded by the trojan, it is enough to delete them from an infected hard disk. The latest versions of F-Secure Anti-Virus can automatically disable (rename) the infected files. If automatic disinfection fails, please select 'Delete' disinfection action for all files described below, when they are detected.
Instructions are here:
Please remember to restart the computer after disinfection.
It is also recommended to scan a computer with a rootkit detector because those downloaders might downloaded rootkit to compromised computers.
The F-Secure BlackLight Rootkit Eliminator can be downloaded from here:
Please do not disinfect a computer using BlackLight if you do not have enough experience! If you remove wrong files (rootkits sometimes hide not only their own files and malware, but also system files), your system might stop working.
Instructions are here:
Please remember to restart the computer after disinfection.
It is also recommended to scan a computer with a rootkit detector because those downloaders might downloaded rootkit to compromised computers.
The F-Secure BlackLight Rootkit Eliminator can be downloaded from here:
Please do not disinfect a computer using BlackLight if you do not have enough experience! If you remove wrong files (rootkits sometimes hide not only their own files and malware, but also system files), your system might stop working.