Re: 'Trojan Horse' found in this file

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 03/21/04


Date: Sat, 20 Mar 2004 18:06:07 -0500

Yes -- But, you had better be sure !

Dave

<anonymous@discussions.microsoft.com> wrote in message
news:10adc01c40ec7$5801cbd0$a401280a@phx.gbl...
| If I know the location of the file, can I delete any
| values added to the registry to solve the problem?
| >-----Original Message-----
| >1) If you are using WinME or WinXP, disable System
| Restore
| >
| http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.ht
| m
| >2) Reboot your PC into Safe Mode
| >3) Using your AV software, perform a Full Scan of
| your platform and clean/delete any
| > infectors found
| >4) Restart your PC and perform a "final" Full Scan
| of your platform
| >5) If you are using WinME or WinXP,Re-enable System
| Restore and re-apply any
| > System Restore preferences, (e.g. HD space
| to use suggested 200 ~ 400MB),
| > reboot your PC.
| >6) If you are using WinME or WinXP, create a new
| Restore point
| >7) Please report back your results
| >
| >Dave
| >
| >
| >
| >"Danny" <anonymous@discussions.microsoft.com> wrote in
| message
| >news:1062301c40e03$da4b8690$a401280a@phx.gbl...
| >| Hi, my anti-virus program picked up a trojan horse
| >| located in C:\WINDOWS\System32\system32.exe and was
| >| unable to delete it.
| >| Further scans have failed to detect it. Do I need to
| re-
| >| install Windows XP ? Any suggestions ? thank you.
| >
| >
| >.
| >



Relevant Pages

  • Re: Virus
    ... If you are using WinME or WinXP, disable System Restore ... Restart your PC and perform a "final" Full Scan of your platform ...
    (microsoft.public.security.virus)
  • Re: trojan help
    ... Perform a Full Scan of your platform and clean/delete any infectors found ... If you are using WinME or WinXP, re-enable System Restore, reboot the PC ...
    (microsoft.public.security.virus)
  • Re: Virus removal
    ... | your platform and clean/delete any ... |>5) If you are using WinME or WinXP,Re-enable System ... | Restore and re-apply any ... | INSTRUCTIONS I FEAR FOR MY COMPUTER IF I DO THE WRONG ...
    (microsoft.public.security.virus)
  • Re: Virus
    ... where is the AV software and what platform? ... >1) If you are using WinME or WinXP, disable System ... >5) If you are using WinME or WinXP,Re-enable System ...
    (microsoft.public.security.virus)
  • Re: Trojan.Downloader.Win32.Keenval.f
    ... >3) If you are using WinME or WinXP, disable System ... >4) Reboot your PC into Safe Mode ... >7) If you are using WinME or WinXP,Re-enable System ... Restore and re-apply any ...
    (microsoft.public.security.virus)