Jump to content
Microsoft Windows Bulletin Board

*sobbing quetly* trojan in my winxp pro service pro serv. pack 1


Recommended Posts

Guest judi in eureka
Posted

it started with a trojan.win32/Anomaly.gen!A (i think). or did it start when

the service pack 2 was not automatically dowloaded nor was i notified i

needed to download it?

 

i am at this point upable to send out email, or upload files to the

internet. 1 email in 10 go out. my outlook express, none go out. i have

bought CounterSpy and run it twice a day. i am also using nortons, and have

used ad-aware, i have downloaded and used 6 differant virus scanners. i did

pull 6 trojans out, but this one i wrote out above seems to be so imbedded

and in control of my system. i did get the pop-ups and my ie browser to stop

opening on their own while i did word processing here one night.

i can't get windows defender ot live one to download and install. this is

all confusing because it is now way over my head. if i knew what i was

looking for, couldn't i go in and find those files and delete them?

 

how do i rid myself of this trojan? i also seem to have a "trojan.7" that

my nortons said they can not do anything at all with...my other scanners

don't find such a monster.

 

i'm only using 30% of my total harddrive. i was also getting messages from

my epson priner that there were print jobs in que. this occured everytime i

rebooted my puter. jobs i did not put there, so i canceled them, and have

finally uninstalled my printer/scanner/copier.

 

the trojan owns me now. HELP!

 

judi,

eureka, ca

Guest pcbutts1
Posted

Use Remove-it version 16, it's fast and free. It now has over 6500

signatures to remove All variants of Rogue scanners, Desktop/Homepage

Hijackers, Trojans, Codec's, and related Malware/Spyware. New Feature,

Remove-it will now update your hosts file. This tool is designed to

Specifically remove all variants. Scan time is about 2-10 minutes. Designed

for Windows 2000/XP only.First read this page

http://www.pcbutts1.com/downloads then use the email link on the bottom of

the page to receive the software.

 

 

Check my feedback and see what others have said about it

http://pcbutts1-therealtruth.blogspot.com/

 

 

--

 

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads

The list grows. Leythos the stalker http://www.leythosthestalker.com, David

H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.

Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell

 

 

 

"judi in eureka" <judi in eureka@discussions.microsoft.com> wrote in message

news:B9EE3511-9234-4089-99CA-81737FE72E66@microsoft.com...

> it started with a trojan.win32/Anomaly.gen!A (i think). or did it start

> when

> the service pack 2 was not automatically dowloaded nor was i notified i

> needed to download it?

>

> i am at this point upable to send out email, or upload files to the

> internet. 1 email in 10 go out. my outlook express, none go out. i have

> bought CounterSpy and run it twice a day. i am also using nortons, and

> have

> used ad-aware, i have downloaded and used 6 differant virus scanners. i

> did

> pull 6 trojans out, but this one i wrote out above seems to be so imbedded

> and in control of my system. i did get the pop-ups and my ie browser to

> stop

> opening on their own while i did word processing here one night.

> i can't get windows defender ot live one to download and install. this is

> all confusing because it is now way over my head. if i knew what i was

> looking for, couldn't i go in and find those files and delete them?

>

> how do i rid myself of this trojan? i also seem to have a "trojan.7" that

> my nortons said they can not do anything at all with...my other scanners

> don't find such a monster.

>

> i'm only using 30% of my total harddrive. i was also getting messages from

> my epson priner that there were print jobs in que. this occured everytime

> i

> rebooted my puter. jobs i did not put there, so i canceled them, and have

> finally uninstalled my printer/scanner/copier.

>

> the trojan owns me now. HELP!

>

> judi,

> eureka, ca

Posted

Re: *sobbing quetly* trojan in my winxp pro service pro serv. pack1

 

judi in eureka wrote:

> it started with a trojan.win32/Anomaly.gen!A (i think). or did it start when

> the service pack 2 was not automatically dowloaded nor was i notified i

> needed to download it?

>

> i am at this point upable to send out email, or upload files to the

> internet. 1 email in 10 go out. my outlook express, none go out. i have

> bought CounterSpy and run it twice a day. i am also using nortons, and have

> used ad-aware, i have downloaded and used 6 differant virus scanners. i did

> pull 6 trojans out, but this one i wrote out above seems to be so imbedded

> and in control of my system. i did get the pop-ups and my ie browser to stop

> opening on their own while i did word processing here one night.

> i can't get windows defender ot live one to download and install. this is

> all confusing because it is now way over my head. if i knew what i was

> looking for, couldn't i go in and find those files and delete them?

>

> how do i rid myself of this trojan? i also seem to have a "trojan.7" that

> my nortons said they can not do anything at all with...my other scanners

> don't find such a monster.

>

> i'm only using 30% of my total harddrive. i was also getting messages from

> my epson priner that there were print jobs in que. this occured everytime i

> rebooted my puter. jobs i did not put there, so i canceled them, and have

> finally uninstalled my printer/scanner/copier.

 

Do not ever download files from unknown sources promising quick fixes

for malware. I'll give you general malware removal steps below, but at

this point it may be more practical for you to back up your data and

clean-install Windows. It's your call, of course.

 

Go through these general malware removal steps systematically -

http://www.elephantboycomputers.com/page2.html#Removing_Malware

 

Include scanning with David Lipman's Multi_AV and follow instructions to

do all scans in Safe Mode. Please see the special Notes regarding using

Multi_AV in Vista.

 

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions

http://www.pctipp.ch/downloads/sicherheit/35905/multi_av_scanning_tool.html

- download site

 

The site is in German but David's tool is in English so don't let that

worry you. Scroll all the way down to almost the bottom of the page and

you'll see a box titled "Infos Zum Download - Multi-AV Scanning Tool".

You'll see "Download von www pctipp.ch" and the live link to download

Multi_AV.

 

You can also check to see if there are targeted removal steps for your

malware here:

Bleeping Computer removal how-to's -

http://www.bleepingcomputer.com/forums/forum55.html

 

When all else fails, run HijackThis and post your log in one of the

specialty forums listed at the first link above (not here, please).

 

Not all tools used will work in Vista and you will need to run them

elevated. Since Vista is so new, it will be a while before removal

techniques and tools are developed. If you are unable to remove the

infection by following the general steps, register at one of the

HijackThis forums as suggested.

 

Standard caveat: If the procedures look too complex - and there is no

shame in admitting this isn't your cup of tea - take the machine to a

professional computer repair shop (not your local version of

BigComputerStore/GeekSquad). Please be aware that not all local shops

are skilled at removing malware and even if they are, your computer may

be so infested that Windows will need to be clean-installed. Have all

your data backed up before you take the machine into a shop.

 

 

Malke

--

Elephant Boy Computers

http://www.elephantboycomputers.com

"Don't Panic!"

MS-MVP Windows - Shell/User

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...