Home · Compatibility Lists · Support Forums · FAQ · News Archive · Articles · Submit News/Upcoming News
NT Compatible
advertisement


Forum overview » Legacy OS » unknown trojan/worm (1/1)

Reply New Poll

unknown trojan/worm
Author Message
virusmagnet
Junior Member


Posts: 2
Joined: 2004-11-10
Member No.: 47127
Icon 2005-01-04 08:11:29

hi all. i need help. my pc( os: windows ME) was infected by a unknown trojan ( my antivirus/anti trojan software was not able to detect it) it disables the regedit and puts in a nooptionsfolder and no customized webview in the registry. In the past, i'm usually able to delete viruses because they take on a the hidden file - folder.htt and replicates in the folders.
this time, a security window pops up everytime i open any folder, telling me that the web content has been changed and would i allow it to be initialized by scripts. everytime i access the folder options and click on 'show hidden files or folders' the security message would appear and the page would be refreshed. then the option would return to "hide hidden files and folders." I tried getting the system information through windows systems tools and i keep getting a "that is not allowed due to restrictions in this computer"

the trojan also deleted the contents of the dosstart.bat
it may also have deleted or added things to the registry but aside from those mentioned above, i am not aware of it. i don't know what else it does aside from messing my registry everytime i open a folder. i hope someone may be able to help me. Thank you

-vm

Post #154011
Edit Quote Print Solution Plonk Delete
ScinteX
Senior Member


Posts: 317
Joined: 2004-08-23
Member No.: 37788
Icon 2005-01-04 14:02:48

hi,

Sounds like spyware to me- there are subtle differences between spyware, trojans, worms and viruses....

But anyway who cares about that lol lets just try to fix it.

Download Ad-aware from here:
http://www.lavasoftusa.com/support/download/

And then Spybot from here:
http://www.safer-networking.org/en/download/index.htmlom

And then CWS Shredder from here:
http://www.softpedia.com/get/Internet/Popup-Ad-Spyware-Blockers/CWShredder.shtml

Run them all (with Internet Explorer closed) and clean away. Ad-aware is pretty good at restoring various settings to thier former glory.

Give it a whirl and you should be fine.


Post #154038
Edit Quote Print Solution Plonk Delete
virusmagnet
Junior Member


Posts: 2
Joined: 2004-11-10
Member No.: 47127
Icon 2005-01-07 08:28:36

thank you. i have spybot, hijackthis, and spyblaster and only hijackthis was able to undo the 'disable registry' bit.

thanks

Post #154399
Edit Quote Print Solution Plonk Delete
ScinteX
Senior Member


Posts: 317
Joined: 2004-08-23
Member No.: 37788
Icon 2005-01-07 15:59:27

Sweet!

& u r most welcome

Post #154445
Edit Quote Print Solution Plonk Delete
pbuckne
Senior Member


Posts: 148
Joined: 2001-10-25
Member No.: 7421
Icon 2005-01-23 09:49:12

You may want to follow that up with another scan with a program like aluria, you can download it from www.download.com

I would also get another antivirus. Try uninstalling the one you have and downloading the one from www.free-av.com. Once you turn all the configuration options up, like heuristic scanning set all the way up, if finds almost anything virii and even some spyware. I use it to cover my rear when working on a clients machine. You never know what small piece of spyware might remain just waiting to do it all over again.

You can also download a program called enableregedit.vbs, which almost always works to re-enable the registry.

You never can be too helpful.

Post #155751
Edit Quote Print Solution Plonk Delete

Reply New Poll

Forum overview » Legacy OS » unknown trojan/worm

Legend
View   View profile
Solved   Mark this post as solution (topic starter only)
Quote   Reply with quote to post
Edit   Edit post
Delete   Delete post (admin only)

Moderator: Open / Close / Bump / Delete / Move / Merge

All products mentioned are registered trademarks or trademarks of their respective owners.
© 1998-2009 Esselbach Internet Solutions - All Rights Reserved. Terms and privacy policy
Website powered by Esselbach Storyteller CMS System