How to get rid of a Trojan Horse?

How to get rid of a Trojan Horse?
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
How to get rid of a Trojan Horse? KristinB 09-19-2006
Posted by =?Utf-8?B?S3Jpc3RpbkI=?= on September 19, 2006, 11:14 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Recently my computer has worked really bad (slow etc). So I uninstalled my
AVG Security shield and downloaded Avast Security Shield. With Avast I
discovered that my computer has been infected with a Trojan Horse virus which
the security system constantly sends me messages about. And also, some of my
Windows programs are working really bad - Words for example. When I try to
open Words messages pops up that the computer tries to install new files... I
try to get out of the installation (which is almost inpossible) but then all
of a sudden I get into Words... When I'm trying to save the things I've
written the install-files starts to pop up again.... ANYONE who can help
me?!!

Posted by Frank Saunders, MS-MVP OE/WM on September 19, 2006, 11:46 am
If you were  Registered and logged in, you could reply and use other advanced thread options
> Recently my computer has worked really bad (slow etc). So I uninstalled my
> AVG Security shield and downloaded Avast Security Shield. With Avast I
> discovered that my computer has been infected with a Trojan Horse virus
> which
> the security system constantly sends me messages about. And also, some of
> my
> Windows programs are working really bad - Words for example. When I try to
> open Words messages pops up that the computer tries to install new
> files... I
> try to get out of the installation (which is almost inpossible) but then
> all
> of a sudden I get into Words... When I'm trying to save the things I've
> written the install-files starts to pop up again.... ANYONE who can help
> me?!!

So How Did I Get Infected Anyway?
http://www.wilderssecurity.com/showthread.php?t=27971

Help with Hijackware
All MS - MVP Sites.
http://aumha.org/a/parasite.htm
(http://aumha.org/a/quickfix.htm)
http://www.elephantboycomputers.com/page2.html#Removing_Malware
(http://mvps.org/winhelp2002/unwanted.htm)
(http://inetexplorer.mvps.org/darnit.html)
(http://www.mvps.org/sramesh2k/Malware_Defence.htm)

Unexplained computer behavior may be caused by deceptive software.
http://support.microsoft.com/kb/827315

--
Frank Saunders, MS-MVP OE/WM
http://www.fjsmjs.com
Answer in newsgroup. Don't send mail.



Posted by David H. Lipman on September 19, 2006, 5:14 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Recently my computer has worked really bad (slow etc). So I uninstalled my
| AVG Security shield and downloaded Avast Security Shield. With Avast I
| discovered that my computer has been infected with a Trojan Horse virus which
| the security system constantly sends me messages about. And also, some of my
| Windows programs are working really bad - Words for example. When I try to
| open Words messages pops up that the computer tries to install new files... I
| try to get out of the installation (which is almost inpossible) but then all
| of a sudden I get into Words... When I'm trying to save the things I've
| written the install-files starts to pop up again.... ANYONE who can help
| me?!!

Avast and AVG ?

I'm not sure that's a good idea !


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal
Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the
PC.

You can choose to go to each menu item and just download the needed files or you
can
download the files and perform a scan in Normal Mode. Once you have downloaded
the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode
[F8 key
during boot] and re-run the menu again and choose which scanner you want to run
in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive
PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by karl levinson, mvp on September 19, 2006, 8:09 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

> Recently my computer has worked really bad (slow etc). So I uninstalled my
> AVG Security shield and downloaded Avast Security Shield. With Avast I
> discovered that my computer has been infected with a Trojan Horse virus
> which
> the security system constantly sends me messages about. And also, some of
> my
> Windows programs are working really bad - Words for example. When I try to
> open Words messages pops up that the computer tries to install new
> files... I
> try to get out of the installation (which is almost inpossible) but then
> all
> of a sudden I get into Words... When I'm trying to save the things I've
> written the install-files starts to pop up again.... ANYONE who can help
> me?!!

We would need to know the exact name of the Trojan, and in what file and
folder it was found. Trojans are somewhat uncommon, so I am suspicious as
to whether you are really infected.

You can and should do a second opinion scan by going to
http://housecall.antivirus.com That won't fix whatever antivirus problem
you may be having, just give you a second opinion.

More info: http://securityadmin.info/faq.asp?virus

--
kind regards,
Karl Levinson, CISSP, CCSA, MCSE [MS MVP]
--------------------------------
Microsoft Security FAQ:
http://securityadmin.info




Similar ThreadsPosted
TROJAN HORSE May 29, 2005, 10:45 pm
trojan horse September 25, 2007, 1:40 am
trojan horse May 27, 2008, 8:16 pm
Bla trojan horse & microsoft February 16, 2006, 9:46 am
My Trojan Horse is dead, BUT ..... September 20, 2006, 5:43 pm
Trojan horse Clicker.BGC--------- C:\WINDOWS\system32 January 4, 2006, 1:53 am
Trojan Horse Discovered On Samsung Site September 9, 2006, 10:07 pm
Norton 2006 Finds Trojan Horse in MS Fax Console on initialization September 27, 2006, 12:11 pm
Trojan-Horse PUSHU Cannot be deleted using anti-virus software. April 1, 2007, 11:06 pm
2) Trojan-Horse PUSHU Cannot be deleted using anti-virus software April 3, 2007, 5:28 pm

The site map in XML format XML site map

Contact Us | Privacy Policy