Trojan Help..Again!

Faith

Bite Me!
Administrator
Joined
Oct 31, 2003
Messages
8,458
Age
44
Location
Edinburgh, Scotland
Black Thorn
Last time I asked for help it was for a friend well now its for me! I've done all the scans suggested in the thread I made then. The housecall scan via trend micro showed up several trojans as well as 'corefloods' but it won't fix them saying its 'non cleanable'. There must be something I could do? Any ideas? I thought about deleting the infected files but don't really know if they are files that have been downloaded or files my computer needs that have been infected.

Any help would be appreciated 🙂
 
I'd advise caution with that.

Google the trojan names. There's often removal instuctions.

Failing that there are forums where experts will give you instuction with malware that's difficult to remove.

Here's a couple:

http://forums.tomcoyote.org/index.php?showforum=28

http://forums.net-integration.net/index.php?showforum=32

You might want to read around a bit before posting there. They usually want you to post stuff like a Hijack This log.

You also might want to try some other scans when you're finished just to make sure you got it all. Here's some free downloads.

For Spyware and some other malware: SpyBot or Adaware

For Trojans: A2

For Viruses: AVG.
 
I used the delete for some of them but two were in use and I couldn't get to them. Got a copy of Norton but it kept wigging on me so I shut the computer off and came on the laptop. I had enough as i've been sorting it out all day and most of yesterday.
 
Did you try rebooting in safe mode to delete?

Also you may be able to block the trojan from starting at boot by disallowing, or deleting it from the windows startup. There's a nifty little free download program called Startup inspector that will list all the items in startup, give you information on what each one is, and allow you to disable, or delete it.

Or...if you're using XP, doesn't it come with a task monitor thing that will allow you do see what's running and kill the process. If not, I'm pretty sure you can still download free task monitors. The one I use is old. It's not available anymore, so I can't think of one to recommend of the top of my head.

Sometimes malware comes with stuff like registry entries that will reinstall the thing after you clean it on the next reboot. That's why I suggest googling the name of the trojan. It's tricky in the registry if you don't know what you're doing.

BTW, you've backed everything up you can't afford to lose, just in case something goes wrong, right?

Often other people have had the same problem you're having, and you'll find an expert on some website explaining in detail the proper way to clean the same malware you're having the problem with. Again, that's why I say Google it first.

The problem with using an anti virus such as Norton (other than the well known fact Norton is buggy) to clean a trojan is they often specialize in viruses, and neglect some trojans expecially commercial, spyware trojans.

Edit: You were talking about the worry you might delete something you need. One thing I've heard of people doing is rather than delete it, rename the extension. Eg. If you have something called something like malware.dll, rename it malware.old. If things screw up go back and give it it's old extension. If it fixes the problem with no ill effects after a couple of days, delete it. I'm not telling you to do this, I'm just saying I've seen it done.

Even better advice is Google the name of anything, if you don't know exactly what it is.
 
Adaware is free at www.lavasoft.com

Also check out www.mcafee.com as they have a great virus dictionary complete with removal instructions and in some cases, free downloads to remove the trojan. I used it at my office computer when it contracted the bagle virus 😀
 
I'll check all that stuff later today thanks 🙂

Cordy - I tried adaware and found it really crappy. I did get rid of the daemonize trojan which was the one that was causing the most trouble.
 
my sis's boyfriend managed to get his hands on a copy of adaware professional if anyone wants...sorry to hear of its crapola faith 😀 hope your comp problems sort themselves out 😀
 
Spybot sometimes finds stuff Adaware misses. A2 is free and built for trojans. You might try a demo version of Spysweeper, also. That one often finds stuff others miss. I sometimes think they might be false positives though.
 
Had spysweeper full programme. Gargage also! I got a copy of Pestpatrol (not the free version) and it worked like a charm. After I ran it I did a system check again through housecall and it came up clean 🙂
 
Back
Top Bottom