Tech Support > Computers & Technology > Virus & Worms > Getting rid of Trojan 'Pandax'
Getting rid of Trojan 'Pandax'
Posted by ggb@orcon.net.nz on February 20th, 2008


New to this communications group so please bear with me.
I have a Trojan Pandax ( or Pandex) can't remember which and want to
get rid of it.
I have Symantec protection (older version), AVG (free trial) XoftSpySE
and RegCure (purchased) for virus protection etc, but can not seem to
delete the little blitter.
My scans say the Trojan is living in C\Windows\sys32
My scans also say I can delete 'sys32' but I don't know of any
associations this might have to other programs.
Is it safe to delete 'sys32" or not.\?
If not, how can I get rid of this Trojan and any others that appear
from time to time?
Thanks,
Graeme

Posted by David H. Lipman on February 20th, 2008


From: <ggb@orcon.net.nz>

| New to this communications group so please bear with me.
| I have a Trojan Pandax ( or Pandex) can't remember which and want to
| get rid of it.
| I have Symantec protection (older version), AVG (free trial) XoftSpySE
| and RegCure (purchased) for virus protection etc, but can not seem to
| delete the little blitter.
| My scans say the Trojan is living in C\Windows\sys32
| My scans also say I can delete 'sys32' but I don't know of any
| associations this might have to other programs.
| Is it safe to delete 'sys32" or not.\?
| If not, how can I get rid of this Trojan and any others that appear
| from time to time?
| Thanks,
| Graeme

First get rid of XoftSpy it is an untrusted anti malware scanner. It was listed as a Rogue
on Spyware Warrior but was subsequently de-listed. Based upon current facts it should be
re-listed. However, Spyware Warrior is out-of-date and hasn't been updated in quite some
time :-(

I can't vouch for RegCure but Registry tools can cause more problems then they can cure.

Plaese post the fully qualified name and path to the Pandex Trojan as well as identify what
utility flagged the Trojan.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp