Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I got a bkdr.zcrew.b virus that I found on my computer. Norton did not recognize it, but housecall.antivirus.com recognized it. I am wondering how do I fix it. Every time that I reboot and bring up Internet Explorer, the homepage changes to something other than I put it. It is also giving me java errors and some other small problems. I just want to get the virus off my computer before it does anything serious. Thanks.

Gumby:
A common story, but a TRUE story. 8-)
From your description, spyware has taken control of parts of your computer. Annoying, but not usually fatal.
The good news is that there's an easy remedy. The bad news is that, depending on your connection speed to the Net(say a 28K modem), you might be spending the next couple of hours getting the medicine your PC needs. If you're on cable or DSL,
1. Download and install Spybot; update the utility BEFORE scanning your PC.
2. Download and install Ad-Aware; update the utility BEFORE scanning your PC.Click on the names:
After installation and updating, scan your PC with both utilities.
Delete everything they find. All deletions are reversible.Happy bytes. 8-)
Solarian

hi gumby,
a trojan is not spyware although sometimes you wonder what they are putting in them these days, therefore don't treat it as one. yes download spybot and adaware as they are really good defenses and spybot will catch the occasional one.do the following manually:
in win2000:
End the Trojan process.
press control alt delete once, in task manager go to processes and look for hidden32.exe and delete the process and exit the task manager
Run a full system scan and delete all the files detected as trojan .Zcrew.B or the IRC Trojan.
delete the folder C:\WINNT\system32 \wbem\repository\fs\macromed.
Reverse the changes that the Trojan made to the registry.
here's how:
next go to your registry by clicking on start, then run, then type in regedit, click ok, then go to hklm/software/microsoft/windows/current version/run/
in the right pane of that key delete the value: print sharing=the path of that file\hidden32.exe\the path of the file\explorer.exe
exit from the registry and reboot your machine
to make sure the trojan is gone do another scan and make sure your definitions are up to date.
for more info on trojans go to www.thepublicworks.com security section and link up to simovits consulting, darkE, security dogs, trojan ports, dos help, hacker ports,etc.
a good idea would be to also do a trojan and port scan at www.pcflank, also if you don't have an anti-trojan download a free 30day trial of trojan hunter at www.wilders.org
all the best,
murve

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |