Forum Home
Press F1
 
Thread ID: 92535 2008-08-14 00:47:00 Trojan Virus problems karbren (14078) Press F1
Post ID Timestamp Content User
697094 2008-08-14 00:47:00 Hi there, I have recently encoutered my first trojan with some unfortunate results. I don't know for sure if it's gone but I run Windows XP home edition with service pack 3. The problem is when I thought I had deleted all my bugs I can't seem to find some tabs in my Active Desktop. It is in recery mode but when you do the suggested thing by right clicking the desktop and click properties the Display Properties window comes up. On it is only 3 tabs - Themes, Appearance and Settings. There is no Destop or Screensaver tabs. So I can't restore my wallpaper on my desktop in this way. Is there a way to rectify this without a total restore? I need to find the name of it as the paper I had it written down on is gone. It originally started with an email with update Windows 7 and what downnloaded was a name of an Antivirus 2008 XP and thats when all hell broke loose. The name is TROJ FAKEALER.HO and it kept changing it's location and file names. karbren (14078)
697095 2008-08-14 01:06:00 Get trojan remover (www.simplysup1.com) <-- direct link

Update it then click on scan. Then select al options under utilities

Then get this as well (www.malwarebytes.org)

Install it update it, then click on scan
Speedy Gonzales (78)
697096 2008-08-14 01:09:00 Welcome to press F1 - that Antivirus 2008 is a tricky one to remove.

Several things to try.

Download all the cleaners / antimalware from my sig, malwarebytes really digs out antivirus 2008, but there may be other bugs as well.

Run / Update the cleaners, do full scans not quick scans.

You also need to turn off system Restore - right click My Computer / Properties/ System restore tab, turn off restore.

after the scans go into MY Computer / program files - look for a folder called antivirus --- Delete it if its there other wise it will reinfect.

Download Nod32 Trial (www.eset.com) install, update and run a full scan. before scanning, download This zipped file (dl1u.savefile.com), its how I set up nod to scan better, extract and read the word doc on how to alter Nod32, the Pic's for the links are included in the zipped file, as I'm not to sure how long the links will work from PF1.

Just spent most of last week cleaning out a persons PC with the same bug, they had 4 logons. IF you have more than 1 Logon/ User you need to scan them all one at a time, not just your own log on.
wainuitech (129)
697097 2008-08-14 02:40:00 Restored my tabs on Desktop Display thanks and Trojan remover was enough to start with as well. I am going over the rest of your solutions to be safe. karbren (14078)
697098 2008-08-30 23:21:00 I have further discovered that I have no tabs in my Windows Task Manager. When you open it all that displays is a window with Task and Status at the top. On the bottom is 3 tabs - End Task - Switch to - New Task. I know from previous use that it was all there before. What can be done to replace it? I have removed about as much as I could find my previous threads but not sure what files I may have had to delete with the bugs. karbren (14078)
697099 2008-08-30 23:33:00 From Speedys Signature, in post #2, download Hijackthis - run and select Safe a log, copy paste the complete log file back here.

As I mentioned earlier on in post #3, antivirus 2008 can sometimes be tricky to remove. If your tabs are not back then the system is still infected, as it may still be in the reg and several other places. - Which may mean having to manually remove it.

If you go to This page here (www.spywareremove.com) - look for the removal instructions, there are 3 steps in scroll boxes, all these need to be looked at and confirmed they are not present, if they are there the PC is still infected.

BUT first lets have a look at the Hijack Log Please, as it can also make random names exe files which if not removed will never be clean.
wainuitech (129)
697100 2008-08-31 00:52:00 Have you turned off System Restore as WT said?

Before you begin any removal etc...
bevy121 (117)
697101 2008-08-31 01:45:00 Download Nod32 Trial (www.eset.com) install, update and run a full scan. before scanning, download This zipped file (dl1u.savefile.com), its how I set up nod to scan better, extract and read the word doc on how to alter Nod32, the Pic's for the links are included in the zipped file, as I'm not to sure how long the links will work from PF1.



Link no longer works to the zip file I was hoping to download it but alas too late
gary67 (56)
697102 2008-08-31 01:59:00 Link no longer works to the zip file I was hoping to download it but alas too late Hmm Bit odd, its still there on the site ??

Never mind - try this one (dl4u.savefile.com) - re -uploaded it.
wainuitech (129)
697103 2008-08-31 03:10:00 Brilliant worked on that link, Thanks I keep all such stuff on an external drive for reference along with all the installation files for all the freeware I use regularly as I don't have a home server gary67 (56)
1 2