trojan remover

damien c · 12-05-2008, 07:08

i was hit by a trojan from of all places you tube when trying to watch a vid, now i've scanned using avg 8 and windows defender it found and removed 2 trojans, but ever since then my pc will every now and then lock up and crash but also take ages to open up a program.
now my answer is i'm going to do a reinstall today, but i have over 200gb of data on my second hard drive that i do not want to loose, i dont do back ups because i have never had this problem before.

DipsTheOne · 12-05-2008, 08:23

Download cureit Dr web its a free virus scanner i use it its one of the best and download Hijack this this sort those of problems out this is allso free.

http://www.freedrweb.com/cureit/ http://www.download.com/Trend-Micro-...-10227353.html

theres the links

Delta Whiskey · 12-05-2008, 08:57

Use the freeware tool 'Process Explorer' to try and get a handle on what's slowing the system down.
http://www.microsoft.com/technet/sys...sExplorer.mspx

damien c · 12-05-2008, 09:41

well the slow down has only started happing since the trojan and it has also infected me mobile the n95 because that, has a virus program on it and it picked it up. will try the progs what you suggested dips and delta when i get, home from work today if it doesnt sort it i will just have to wipe and loose everything i can always re d/l it. only take about 4 days so not to bad.

Aragorn · 12-05-2008, 10:43

Damien, first port of call would be HijackThis. There is an online analyser here.
If you have no luck with that, in an old thread I recommended a tool called 'ComboFix' from the Bleeping Computer site - that worked for COL.
If your data is on a second drive, reinstalling Windoze should not affect it, other than having to reinstall any progs that use the data. If in doubt, unplug the second drive while reinstalling. However, are 100% certain the trojan isn't hiding in the data drive.
PS - don't forget to disable the system restore points while trying to clean the trojan - they love to hide in there.

damien c · 12-05-2008, 11:09

i'm not certain that the trojan has hidden itself in the data on the second hdd.
i turn system restore off as soon as i have installed windows i never use it.
also when i reinstall windows i always unplug the other hdd anyway.
this is the first time i have been hit by a trojan or virus for atleast 5 years.
the only stuff thats on me other hdd is:
about 30gb of music
about 30gb of game iso's
and about 135gb of films that i dont watch anymore so not to botherd about them it's more the music as some of it i can't get anymore.
however if i was to say burn it all to a couple of dvd's, ie the music what are the chances that the trojan if on the second hdd being burnt to disc aswell.

Aragorn · 12-05-2008, 11:51

As you say, IF it's hiding on the data disk, burning to DVD will just copy the Trojan.
Start with HJT and/or ComboFix and see if you still have a problem.

damien c · 12-05-2008, 12:13

will do when i get home in about an hour

damien c · 12-05-2008, 16:02

got home and me pc wouldn't even boot in to windows properly so had to format both hdd's to be on the safe side cheers anyway guys

damien c · 12-05-2008, 20:11

well reload done and all is good no more probs to bad i lost all me music etc

TheBruce1 · 14-05-2008, 17:20

Quote:

Originally Posted by Aragorn

If you have no luck with that, in an old thread I recommended a tool called 'ComboFix' from the Bleeping Computer site - that worked for COL.

ComboFix is a dangerous tool and is not for private use. It is strongly suggested by the creator of ComboFix that you do not download and run ComboFix unless you have first posted a HijackThis log, and the procedure is being supervised by an analyst at one of the forums that handles logs. Run at your own risk

Also i would avoid hjt online analyser, they have been know to delete valid registry entries

damien c · 14-05-2008, 18:48

i ran it before i did a reinstall to be honest couldn't understand half the stuff it was on about as most things, i think it was saying was a threat were not they were part of software i had installed. think i will just stay away from you tube now or watch them in work instead

TheBruce1 · 14-05-2008, 22:52

Quote:

Originally Posted by damien c

think i will just stay away from you tube now or watch them in work instead

Can you PM me the link to the video that caused the infection.

cimt · 14-05-2008, 23:19

Quote:

Originally Posted by damien c

i ran it before i did a reinstall to be honest couldn't understand half the stuff it was on about as most things, i think it was saying was a threat were not they were part of software i had installed. think i will just stay away from you tube now or watch them in work instead

If you had posted the log on here then I'm sure someone would of understood it and told you what to do.

damien c · 15-05-2008, 10:55

the bruce - i cant remeber which vid it was my m8 was on me pc and told me about it, so i said show it us and then well infected straight away basically it was really my fault it said it needed a codec, that wasnt installed to play it so tried to install it and bang trojan.

craig - i looked at the info on the screen and just thought to meself forget it just wipe, and reinstall was gonna do it at some point, just didnt want to loose all of me files, luckily me m8 has still got all me wigan pier mp3 discs so not lost that lot and all the rest i can get again.

cheers anyway guys