Computing.Net > Forums > Security and Virus > Trojan problem...please assist!

Trojan problem...please assist!

Reply to Message Icon

Original Message
Name: Aaron_in_LA
Date: January 5, 2005 at 15:07:13 Pacific
Subject: Trojan problem...please assist!
OS: Win98se
CPU/Ram: Intel Celeron 400mhz 64mb
Comment:

I have a trojan problem on my pc and no one I know can help. I'm running a pretty old pc...Hewlett Packard with win98se, intel celeron 400mhz, 64mb sdram, etc. I have AVG and it alerted me of a trojan on my pc. I ran the scan and it didn't get rid of it, so I downloaded and used Ad-aware, spybot S&D, Asquared (some trojan/spyware removal program) and have ran several tests with all of them. I have gotten rid of many things but the core of the trojan is yet to be found because every so often a folder named 'autoupdate6' or something like that keeps appearing every so often in my C:WINDOWS/TEMP folder (which I keep manually deleting) and another file appears every so often in my C:WINDOWS/SYSTEM32 folder called 'randrec.exe'(which I also manually delete) ...any suggestions or thoughts of programs that may work better to get rid of this thing? Please help!

Live long and prosper!


Report Offensive Message For Removal

Response Number 1
Name: www
Date: January 5, 2005 at 16:07:14 Pacific
Subject: Trojan problem...please assist!
Reply: (edit)

tds-3 @ http://www.diamondcs.com.au/
after download and install, download radius.td3 @
http://www.diamondcs.com.au/tds/radius.td3
to the tds folder in program files, overwriting the older one with the new. this will update the defintions. then run a scan , this is one of the better trojan cleaners.
(a-squared is ok, but gives a lot of false detections)


Report Offensive Follow Up For Removal

Response Number 2
Name: KrisCardona
Date: January 5, 2005 at 21:27:32 Pacific
Subject: Trojan problem...please assist!
Reply: (edit)

Also try McAfee Stinger. It worked for me so maybe it will work for you. You can download this program at www.mcafee.com.


Report Offensive Follow Up For Removal

Response Number 3
Name: JackG
Date: January 6, 2005 at 01:50:45 Pacific
Subject: Trojan problem...please assist!
Reply: (edit)

I doubt that you have a Trojan on your system now. More likely the items you are seeing is just left over from some of the junk installed by hardware manufactures. Do you happen to have a Sound Blaster product (sound card, CD-Rom)?

HP installs a host of such programs on their systems. Look through your Add/Remove Programs and MSCONFIG startup list and see if you have any of the following BACKWEB versions running on your system: ActivSurf, Backwebagent, hp center, HP Info Express, HP Updates, Kodak Software Updater, LDM, Logitech Desktop Manager, Sccenter, Updates from HP.

Or any other auto update programs for hardware/software you have installed.


Report Offensive Follow Up For Removal

Response Number 4
Name: White Hat
Date: January 10, 2005 at 10:16:00 Pacific
Subject: Trojan problem...please assist!
Reply: (edit)

Check registery

31337


Report Offensive Follow Up For Removal

Response Number 5
Name: Aaron_in_LA
Date: January 11, 2005 at 20:47:32 Pacific
Subject: Trojan problem...please assist!
Reply: (edit)

Hey, it's me again. Thanks for the suggestions everyone. The TDS-3 program did find a registry file (that my other programs didn't find) that was named RAT (remote access trojan or whatever) and i deleted it. However the random pop-ups when I'm online still appears. They don't appear as often when I use Firefox instead of IE tough. I downloaded Stinger and it didn't find anything. And Jack G, I have taken all of the stuff that hp puts on their computers off a long time ago, so I know that's not the problem. I had already disabled startup stuff with msconfig, removed programs, etc.
I think White hat might have a good idea because I don't think anything is on my c:/ drive; I've scanned it with everything...so maybe that RAT file in my registry isn't completely gone? I guess that's all I can do...thanks for the suggestions and input!

Live long and prosper!


Report Offensive Follow Up For Removal







Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: Trojan problem...please assist!

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software