Can't remove aTrojan Horse type bug
From: Duane (anonymous_at_discussions.microsoft.com)
Date: 11/24/03
- Next message: anonymous_at_discussions.microsoft.com: "Nachi Worm"
- Previous message: Bruce Chambers: "Re: How Effective Are Firewalls and Anti Virus Applications"
- In reply to: Vincyman: "Can't remove aTrojan Horse type bug"
- Next in thread: Ozgirl: "Re: Can't remove aTrojan Horse type bug"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 24 Nov 2003 06:36:50 -0800
>-----Original Message-----
>There is a "trojan horse" program in my PC that refuses
to
>be removed. I have tried Ad-Aware, Spy Bots and also
>tried deleting it from the msconfig Startup tool system,
>and searched for it in the registry, but I am unable to
>remove it. I unchecked it in the msconfig Start up
>program, but it reappears again with a checked box on a
>new line in the list. It listed name is: 2N7NDTN44L@@AN,
>and a command name in the windows system that changes
each
>time it returns in the Startup list, example
>C:\Windows\system\OqxNq.exe. When I tried the Search
>function, neither the listed name or command line name
>produced any results. It constantly generates web page
ads
>on my pc. Is there any other method I can use to remove
>it?. I suspect it was attached to a free copy of a
>downloaded Grisoft AVG Anti Virus software. I have a
>Presario Intel 4,1.7GHZ PC with 256RAM and Win ME.
>
>Peace through understanding,
>
>---------------------------------------
Are you using 2000 or XP?
I had the same problem until I went back to the site that
asked if it could download some software so one could see
more 'offerings'. Let that site come back up, and go to
the bottom of that page where it shows how to uninstall
the automatic redirection of your browser whenever it is
opened. After that uninstallation, then follow the
direction of Norton's page on deleting additional files /
registry enties (Select <Start>; select <Run>; type
<regedit> in the little window; select <OK>. BE CAREFUL
HERE!!!
Also, go to www.trendmicro.com and do a security scan to
see if it can delete the files, or at least identify the
files that are 'bad'. Write down the complete paths of
these infected files. One may not be able to delete these
files in the normal mode of Windows, so boot up into
the 'Safe Mode' of Windows, and use Explorer to to delete
the files, as well as remove any registry entries cited by
Norton.
Good luck.
- Next message: anonymous_at_discussions.microsoft.com: "Nachi Worm"
- Previous message: Bruce Chambers: "Re: How Effective Are Firewalls and Anti Virus Applications"
- In reply to: Vincyman: "Can't remove aTrojan Horse type bug"
- Next in thread: Ozgirl: "Re: Can't remove aTrojan Horse type bug"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
