*sobbing quetly* trojan in my winxp pro service pro serv. pack 1

[judi in eureka]

it started with a trojan.win32/Anomaly.gen!A (i think). or did it start when
the service pack 2 was not automatically dowloaded nor was i notified i
needed to download it?

i am at this point upable to send out email, or upload files to the
internet. 1 email in 10 go out. my outlook express, none go out. i have
bought CounterSpy and run it twice a day. i am also using nortons, and have
used ad-aware, i have downloaded and used 6 differant virus scanners. i did
pull 6 trojans out, but this one i wrote out above seems to be so imbedded
and in control of my system. i did get the pop-ups and my ie browser to stop
opening on their own while i did word processing here one night.
i can't get windows defender ot live one to download and install. this is
all confusing because it is now way over my head. if i knew what i was
looking for, couldn't i go in and find those files and delete them?

how do i rid myself of this trojan? i also seem to have a "trojan.7" that
my nortons said they can not do anything at all with...my other scanners
don't find such a monster.

i'm only using 30% of my total harddrive. i was also getting messages from
my epson priner that there were print jobs in que. this occured everytime i
rebooted my puter. jobs i did not put there, so i canceled them, and have
finally uninstalled my printer/scanner/copier.

the trojan owns me now. HELP!

judi,
eureka, ca

 

[pcbutts1]

Use Remove-it version 16, it's fast and free. It now has over 6500
signatures to remove All variants of Rogue scanners, Desktop/Homepage
Hijackers, Trojans, Codec's, and related Malware/Spyware. New Feature,
Remove-it will now update your hosts file. This tool is designed to
Specifically remove all variants. Scan time is about 2-10 minutes. Designed
for Windows 2000/XP only.First read this page
http://www.pcbutts1.com/downloads then use the email link on the bottom of
the page to receive the software.


Check my feedback and see what others have said about it
http://pcbutts1-therealtruth.blogspot.com/


--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.
Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell



"judi in eureka" <judi in eureka@discussions.microsoft.com> wrote in message
news:B9EE3511-9234-4089-99CA-81737FE72E66@microsoft.com...
> it started with a trojan.win32/Anomaly.gen!A (i think). or did it start
> when
> the service pack 2 was not automatically dowloaded nor was i notified i
> needed to download it?
>
> i am at this point upable to send out email, or upload files to the
> internet. 1 email in 10 go out. my outlook express, none go out. i have
> bought CounterSpy and run it twice a day. i am also using nortons, and
> have
> used ad-aware, i have downloaded and used 6 differant virus scanners. i
> did
> pull 6 trojans out, but this one i wrote out above seems to be so imbedded
> and in control of my system. i did get the pop-ups and my ie browser to
> stop
> opening on their own while i did word processing here one night.
> i can't get windows defender ot live one to download and install. this is
> all confusing because it is now way over my head. if i knew what i was
> looking for, couldn't i go in and find those files and delete them?
>
> how do i rid myself of this trojan? i also seem to have a "trojan.7" that
> my nortons said they can not do anything at all with...my other scanners
> don't find such a monster.
>
> i'm only using 30% of my total harddrive. i was also getting messages from
> my epson priner that there were print jobs in que. this occured everytime
> i
> rebooted my puter. jobs i did not put there, so i canceled them, and have
> finally uninstalled my printer/scanner/copier.
>
> the trojan owns me now. HELP!
>
> judi,
> eureka, ca

 

[Malke]

Re: *sobbing quetly* trojan in my winxp pro service pro serv. pack1

judi in eureka wrote:
> it started with a trojan.win32/Anomaly.gen!A (i think). or did it start when
> the service pack 2 was not automatically dowloaded nor was i notified i
> needed to download it?
>
> i am at this point upable to send out email, or upload files to the
> internet. 1 email in 10 go out. my outlook express, none go out. i have
> bought CounterSpy and run it twice a day. i am also using nortons, and have
> used ad-aware, i have downloaded and used 6 differant virus scanners. i did
> pull 6 trojans out, but this one i wrote out above seems to be so imbedded
> and in control of my system. i did get the pop-ups and my ie browser to stop
> opening on their own while i did word processing here one night.
> i can't get windows defender ot live one to download and install. this is
> all confusing because it is now way over my head. if i knew what i was
> looking for, couldn't i go in and find those files and delete them?
>
> how do i rid myself of this trojan? i also seem to have a "trojan.7" that
> my nortons said they can not do anything at all with...my other scanners
> don't find such a monster.
>
> i'm only using 30% of my total harddrive. i was also getting messages from
> my epson priner that there were print jobs in que. this occured everytime i
> rebooted my puter. jobs i did not put there, so i canceled them, and have
> finally uninstalled my printer/scanner/copier.

Do not ever download files from unknown sources promising quick fixes
for malware. I'll give you general malware removal steps below, but at
this point it may be more practical for you to back up your data and
clean-install Windows. It's your call, of course.

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://www.pctipp.ch/downloads/sicherheit/35905/multi_av_scanning_tool.html
- download site

The site is in German but David's tool is in English so don't let that
worry you. Scroll all the way down to almost the bottom of the page and
you'll see a box titled "Infos Zum Download - Multi-AV Scanning Tool".
You'll see "Download von www pctipp.ch" and the live link to download
Multi_AV.

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the first link above (not here, please).

Not all tools used will work in Vista and you will need to run them
elevated. Since Vista is so new, it will be a while before removal
techniques and tools are developed. If you are unable to remove the
infection by following the general steps, register at one of the
HijackThis forums as suggested.

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may
be so infested that Windows will need to be clean-installed. Have all
your data backed up before you take the machine into a shop.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User