Computing.Net > Forums > Windows XP > Trojan virus removal help!

Trojan virus removal help!

Reply to Message Icon

Original Message
Name: apollon
Date: April 21, 2008 at 20:56:31 Pacific
Subject: Trojan virus removal help!
OS: XP
CPU/Ram: 1 GB
Model/Manufacturer: Vaio
Comment:

Please help me disinfect my computer from the virus Trojan.Win32.Pakes.cdw

Kaspersky beeps at file C:\Windows\system32\asap.dll

It cannot be disinfected or deleted... What can I do?

Thank you,

Ivan


Report Offensive Message For Removal


Response Number 1
Name: Jeruvy
Date: April 21, 2008 at 21:08:46 Pacific
Reply: (edit)

Why is Kaspersky unable to clean this if it detects it?

If you just ran the online version and it didn't clean anything, then post a new msg with the log it generated asking for assistance at manually removing them.

J.
j e r u v y a t y a h o o d o t c o m


Report Offensive Follow Up For Removal

Response Number 2
Name: apollon
Date: April 21, 2008 at 21:34:08 Pacific
Reply: (edit)

I ran an installed copy of Kaspersky. As to why it cannot clean the file, I don't know. I contacted Kaspersky, and someone told me that I should be able to remove the file if I boot in safe mode. Well, it didn't work. They have not been helpful at all; if their software detects a possible Trojan file, it should be able to remove it as well. If this isn't resolved, I am not going to purchase a license extension, obviously.

Thank you,

Ivan


Report Offensive Follow Up For Removal

Response Number 3
Name: Jeruvy
Date: April 21, 2008 at 21:38:58 Pacific
Reply: (edit)

Then don't. The virus name you give is provided by F-Secure and not Kaspersky so I was a bit confused as to how you've determined this.

Please perform this online scan: [B][URL=http://support.f-secure.com/enu/home/ols3.shtml]F-Secure Online Scanner [/URL][/B]

The online scanner is on the bottom right of the page.
Follow the directions in the F-Secure page for proper Installation.

[*] You may receive an alert on the address bar at this point to install the ActiveX control.
[*] Click on that alert and then click "[b][i]Insall ActiveX component[/i][/b]".
[*] Read the license agreement and click "[b]Accept[/b]".
[*] Click "[b]Full System Scan[/b]" to download the scanning components and begin scan and cleaning.
[*] When the scan completes, click the "[b][i]I want to decide item by item[/i][/b]" button.
[*] For each item found, Select "[b]Disinfect[/b]" and click "[b]Next[/b]".
[*] When done, click the "[b]Show Report[/b]" button, then copy and paste the entire report into your next reply.

J.
j e r u v y a t y a h o o d o t c o m


Report Offensive Follow Up For Removal

Response Number 4
Name: Wombat
Date: April 21, 2008 at 22:12:22 Pacific
Reply: (edit)

Did you turn off System Restore before you entered Safe Mode and run the Kaspersky scan?

If you did not do this the trojan / virus is still hiding in the System Restore point files...


Report Offensive Follow Up For Removal

Response Number 5
Name: krayzii
Date: April 21, 2008 at 22:18:27 Pacific
Reply: (edit)

try use a different anti-virus program on safe mode as well.


Report Offensive Follow Up For Removal


Response Number 6
Name: jam
Date: April 22, 2008 at 04:49:14 Pacific
Reply: (edit)

You need a trojan remover:

http://www.simplysup.com/

And make sure to do as Wombat suggested...turn off System Restore, then run the program. When you're sure your PC is virus free, re-eanble System Restore again


Report Offensive Follow Up For Removal

Response Number 7
Name: jefro
Date: April 22, 2008 at 14:39:44 Pacific
Reply: (edit)

I'd suggest a clean install from known good media. Use best practices to avoid this in the future.

"Best Practices", Event viewer, host file, perfmon, are in my top 10


Report Offensive Follow Up For Removal

Response Number 8
Name: apollon
Date: April 22, 2008 at 15:52:17 Pacific
Reply: (edit)

Hello everyone,

Thank you for your helpful comments. I did disable System Restore and used Trojan Remover as suggested; the file was deleted after a triple system boot.

Thanks again!

Thank you,

Ivan


Report Offensive Follow Up For Removal






Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: Trojan virus removal help!

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software




Have you ever used OpenOffice?

Yes, as my main suite.
Yes, occationally.
Yes, but only once.
No, never.


View Results

Poll Finishes In 6 Days.
Discuss in The Lounge