Re: Error message "Trojan.win32.patched"

sam wrote:
i have started getting this above message recently. when i tried to check this message on google. it tells me that your computer is hijacked by porn site and changed some settings. i am getting this message very frequently.

i need microsoft help to get rid of this message urgently



Your computer is infected, not with the "Trojan.win32.patched" but with malware that is *telling* you that you're infected and trying to get you to send money. This could be a variant of the Vundo, Smitfraud, or Zlob trojans but since you didn't tell us the name of the program giving you the message, I can't give you specific removal steps.

Check to see if there are targeted removal steps for your malware here:

Bleeping Computer removal how-to's - http://www.bleepingcomputer.com/forums/forum55.html

If there are, follow the instructions. If not, you can go through these general malware removal steps:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do all scans in Safe Mode. Please see the special Notes regarding using Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://www.pctipp.ch/downloads/sicherheit/35905/multi_av_scanning_tool.html - download site

The site is in German but David's tool is in English so don't let that worry you. Scroll all the way down to almost the bottom of the page and you'll see a box titled "Infos Zum Download - Multi-AV Scanning Tool". You'll see "Download von www pctipp.ch" and the live link to download Multi_AV.

When all else fails, run HijackThis and post your log in one of the specialty forums listed at the Elephant Boy link above (not here, please).

Not all tools used will work in Vista and you will need to run them elevated. If you are unable to remove the infection by following the general steps, register at one of the HijackThis forums as suggested.

Standard caveat: If the procedures look too complex - and there is no shame in admitting this isn't your cup of tea - take the machine to a professional computer repair shop (not your local version of BigComputerStore/GeekSquad). Please be aware that not all local shops are skilled at removing malware and even if they are, your computer may be so infested that Windows will need to be clean-installed. Have all your data backed up before you take the machine into a shop.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
.