Help I've got a trojan

Latest Articles

Help I've got a trojan

Downsizer Forum Index -> IT Matters

Author

Message

Silas

Joined: 29 Oct 2004
Posts: 6848
Location: Staffordshire

Posted: Thu Dec 02, 04 9:35 am Post subject: Help I've got a trojan
I appear to have the mersting b trojan on my pc. I am a complete nerd when it comes to pcs, I don't even know the difference between a file and a folder - can anyone help me remove this thing in very simple language? Thanks

jema
Downsizer Moderator

Joined: 28 Oct 2004
Posts: 28235
Location: escaped from Swindon

Posted: Thu Dec 02, 04 9:42 am Post subject:
https://www.trendmicro.com/en/home/us/enterprise.htm has a free online scan and removal service. jema

Silas

Joined: 29 Oct 2004
Posts: 6848
Location: Staffordshire

Posted: Thu Dec 02, 04 4:53 pm Post subject:

jema wrote:

https://www.trendmicro.com/en/home/us/enterprise.htm

has a free online scan and removal service.

jema

Don't work

jema
Downsizer Moderator

Joined: 28 Oct 2004
Posts: 28235
Location: escaped from Swindon

Posted: Thu Dec 02, 04 4:58 pm Post subject:

Silas wrote:

jema wrote:

https://www.trendmicro.com/en/home/us/enterprise.htm

has a free online scan and removal service.

jema

Don't work

How about there trial download, and what do you mean by don;t work?
1) Doesn't scan at all?
2) Doesn't find the trojen?
3) Finds but does not clean?

jema

anneka

Joined: 28 Oct 2004
Posts: 158

Posted: Thu Dec 02, 04 6:02 pm Post subject:
Go to Marks website https://www.two3five.com and look at the IT section. Anneka

Silas

Joined: 29 Oct 2004
Posts: 6848
Location: Staffordshire

Posted: Thu Dec 02, 04 6:23 pm Post subject:

jema wrote:

Silas wrote:

jema wrote:

https://www.trendmicro.com/en/home/us/enterprise.htm

has a free online scan and removal service.

jema

Don't work

How about there trial download, and what do you mean by don;t work?
1) Doesn't scan at all?
2) Doesn't find the trojen?
3) Finds but does not clean?

jema

Well, the first time i tried it, it found the trojan and deleted it, apparantly, but my AV programme still says I.m infected, even though rescanning with trend micro and my own cant see it.

It is definatly there, but scanning doesmnt show it up!

jema
Downsizer Moderator

Joined: 28 Oct 2004
Posts: 28235
Location: escaped from Swindon

Posted: Thu Dec 02, 04 6:36 pm Post subject:
It could be that it has been deactivated, but a another virus checker still sees the dead body so to speak. jema

Silas

Joined: 29 Oct 2004
Posts: 6848
Location: Staffordshire

Posted: Thu Dec 02, 04 6:43 pm Post subject:
No, its definatly still there. I am waiting for Yahoo to phone me back.

jema
Downsizer Moderator

Joined: 28 Oct 2004
Posts: 28235
Location: escaped from Swindon

Posted: Thu Dec 02, 04 6:49 pm Post subject:

Silas wrote:

No, its definatly still there. I am waiting for Yahoo to phone me back.

How do you know it is there?

jema

mrutty

Joined: 28 Oct 2004
Posts: 1578

Posted: Thu Dec 02, 04 6:56 pm Post subject:

Silas wrote:

No, its definatly still there. I am waiting for Yahoo to phone me back.

Why Yahoo, their not an AV company, watch the advise you get there

Note: No disrespect to yahoo IT as I've worked with you guys in the past on issues and you're been very good

mrutty

Joined: 28 Oct 2004
Posts: 1578

Posted: Thu Dec 02, 04 6:59 pm Post subject:

anneka wrote:

Go to Marks website https://www.two3five.com and look at the IT section.

Anneka

Thanks for the advert and I'm pleased to say that the Virus Countermeasures guide I'm writing for my company should be finished tomorrow which should mean that I can reformat it for the site over the weekend.

mrutty

Joined: 28 Oct 2004
Posts: 1578

Posted: Thu Dec 02, 04 7:08 pm Post subject:
It's an old Troj and looks to be low risk but try these instructions. https://www.sophos.com/support/disinfection/trojan.html

Silas

Joined: 29 Oct 2004
Posts: 6848
Location: Staffordshire

Posted: Thu Dec 02, 04 8:43 pm Post subject:
Thanks for the advice mrutty, but it is all greek to me I dont understand any of the jargon. When I said yahoo, I really meant ezantivirus that I bought via btyahoo.

mrutty

Joined: 28 Oct 2004
Posts: 1578

Posted: Thu Dec 02, 04 10:01 pm Post subject:

From CA

Quote:

This trojan has been seen in the wild, used by businesses with unethical marketing practices in order to increase the flow of traffic to their web sites. Its "payload", of changing the user's startpage or search page is not destructive, but could certainly be classified as annoying.

Looks like if your homepage is OK and so is search you just have some dead code in the reg so nothing to worry about

	Downsizer Forum Index -> IT Matters	All times are GMT
Page 1 of 1

View Latest Posts