Forum Home
Press F1
 
Thread ID: 40382 2003-12-06 08:36:00 Virus funkmaster nicknak (4960) Press F1
Post ID Timestamp Content User
197893 2003-12-06 08:36:00 Does anyone know how to remove Winshow.D classed as Trojan Horse.
It comes up on AVG and I run it but it comes up again and again and wont remove. It even comes up when im not connected. AVG finds nothing.

Regards Nick
funkmaster nicknak (4960)
197894 2003-12-06 08:47:00 change your name before yopur acc is deleted

where does it say the virus is? please post a reply under a new name.
tweak'e (174)
197895 2003-12-06 08:49:00 opps scrub that. tho a nicer name would be better. tweak'e (174)
197896 2003-12-06 09:06:00 If XP, turn off the restore function and restart computer. Now scan with AVG, and if clear, turn restore back on. If not clear, go here (www.anti-trojan.net) and download the free anti-trojan scanner.

If you use windows other than XP, download the program above.
Pheonix (280)
197897 2003-12-06 18:08:00 Hi,
a2 didnt find anything. The message came up again and it says it the file is in C:/System Values Information followed by a long line of letters and numbers. Btw, where do i turn off the restore function?

Funkmaster Nicknak
funkmaster nicknak (4960)
197898 2003-12-06 18:23:00 > Btw, where do i turn off the restore
> function?
>
If using XP then > Start > Right click "My Computer" | Properties | System Restore| Tick "turn off restore"

You will need to reboot computer. This will purge any restore points and any virus that are embedded there. Run AVG again to see if it worked then if you want to reverse then follow the above and turn restore back on.

however.......... this will only work if the virus is within System restore to start with. You mention that the virus is in C:/System Values Information................. is the word 'restore' mentioned there at all. I dont think it would be so I dont like the chances of disabling Restore having any effect.

Maybe as it is a trojan try using spybot (download.com.com) to get rid of it. Just make sure that if you update spybot before running it.

sam m
sam m (517)
1