Forum Home
Press F1
 
Thread ID: 42118 2004-02-01 08:27:00 trojan horse virus tiffy (5212) Press F1
Post ID Timestamp Content User
212112 2004-02-01 08:27:00 How do I get rid of a trojan horse that just doesn't want to go? I run Windows 98se and use the AVG antivirus program. Recently it has detected a trojan (Startpage.DH). Unfortunately it can't remove it. The filename that is infected is C:\WINDOWS\OLEHELP.EXE.
I have tried using the find from the start button to find this file but have had no luck. I'm pretty sure this trojan is responsible for changing my homepage every time the computer is turned off, and swamping me with porn sites on the homepage that replaces mine. Several friends have also had this happen. Is there anyway to remove this??
tiffy (5212)
212113 2004-02-01 12:39:00 Welcome to Press F1, tiffy

You have several options for removing what seems to be one of the many hijacker trojans.

A good start is to put the words startpage dh into the PFi Search on this page. That will show you a post made by beama on 4 Nov 03 about this trojan.

Next take his advice to do a Google search, using Startpage trojan or similar words. If that doesn't lead to an easy fix, read some Press F1 FAQs.

You'll find them at the top right of this page. Relevant ones are 8a, 8b & 8c - written by Susan B. (They take a long time to load, so be patient)

And if all that fails, come back & someone more knowledgeable than me will surely be able to help.

Good Luck
Laura (43)
212114 2004-02-01 12:49:00 spybot
cw shredder.
thecleaner (trojan killer)
metla (154)
212115 2004-02-01 18:24:00 AVG will remove this trogan but theres a trick.
firstly ensure your virus checker is up to date.

Then boot in safe mode, For some reason the trojan is prevented from loading in safe mode .

BTW Avg (windows version) will not load nor will it run in safe mode.

Then browse to the grisoft.. avg directory. in there you will find a dos version of avg double click on this and it will scan your pc. ( sorry cant remeber the exe name)
from there on in its just a matter of following the prompts



I have used this method to remove this trojan a couple of times
beama (111)
1