Computing.Net > Forums > Security and Virus > possible virus/trojan

possible virus/trojan

Reply to Message Icon

Original Message
Name: arran
Date: December 4, 2007 at 12:15:50 Pacific
Subject: possible virus/trojan
OS: windows xp
CPU/Ram: 2.80 ghz, 1 gb ram
Model/Manufacturer: hp
Comment:

i have had ie new windows pop up, mainly ad sites and one straneg one about working from home in a hammock
i ran adaware and it found 16 trojans apparantly, i deleted them
but the windows still pop up
i ran adaware again but nothing came up
and i ran hijackthis and have the log - i used the online analyzer and it spotted nothing too suspicious
any help or suggestions?


Report Offensive Message For Removal

Response Number 1
Name: XpUser4Real
Date: December 4, 2007 at 12:27:13 Pacific
Subject: possible virus/trojan
Reply: (edit)

There are some good free progs listed in the red link. I would suggest running all of them and also do a free scan:
http://www.spywareinfo.com/xscan.php
and remove all it finds

Some HELP in posting on Cnet plus free progs and instructions Glad to Help!


Report Offensive Follow Up For Removal

Response Number 2
Name: arran
Date: December 4, 2007 at 13:00:25 Pacific
Subject: possible virus/trojan
Reply: (edit)

i tried this and it seems to find nothing
i'm considering rebooting my computer, i have already backed up everything required off my computer and i have all the cd's for my software
i don't know this problem seemed to surface when i installed internet explorer 7, but it probably goes back to an old problem i had which i though had been solved involving trojans
i have my hijackthis file if poeple want to look through that before i be hasty and reboot my computer?


Report Offensive Follow Up For Removal

Response Number 3
Name: XpUser4Real
Date: December 4, 2007 at 13:07:21 Pacific
Subject: possible virus/trojan
Reply: (edit)

>>i'm considering rebooting my computer<<
Do you mean reformatting it?

Some HELP in posting on Cnet plus free progs and instructions Glad to Help!


Report Offensive Follow Up For Removal

Response Number 4
Name: arran
Date: December 4, 2007 at 13:27:55 Pacific
Subject: possible virus/trojan
Reply: (edit)

yes, i have a seperate partition on my hard drive for recovery already set up, i'll reset it to factory settings

and i just ran adaware and it found win.32.trojan files again


Report Offensive Follow Up For Removal

Response Number 5
Name: btk1w1
Date: December 4, 2007 at 23:59:31 Pacific
Subject: possible virus/trojan
Reply: (edit)

You can also try SUPERAntispyware and see what it detects and remove everything. I have found this program to be very effective.

If you continue to detect malware afterwards you may find that they are memory resident trojans which basically means they may be hiding in your restore folders and reintroducing themselves after removal.

Before you reformat you might want to try flushing your restore folders.

Click "start" > "accessories" > "system tools" > "system restore". Select the "turn off system restore" box, click "ok" then click "yes" to confirm.

While system restore is turned off boot into safe mode by tapping the f8 key during start-up and selecting safe mode. Run all your antispyware programs and your antivirus program one at a time while in safe mode and deleting all they find.

Once they have finished scanning reboot your computer and let it start up normally. Run some more scans while in normal mode and with any luck your scans will come back clean.

P.S. before running any scans make sure all your programs are up to date.

P.P.S. Remember to turn your system restore back on after all scans.



Report Offensive Follow Up For Removal


Response Number 6
Name: arran
Date: December 5, 2007 at 16:35:34 Pacific
Subject: possible virus/trojan
Reply: (edit)

my computer wasn't very happy about going into safe mode, its really unstable, i think i'm gonna just go ahead and reformat it and that way at least i know what son my hard drive and don't have to worry about lurking nasties


Report Offensive Follow Up For Removal






Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: possible virus/trojan

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software