Author Topic: Win32:Trojano-xxxx [Trj] Help wanted  (Read 4289 times)

0 Members and 1 Guest are viewing this topic.

Anathae

  • Guest
Win32:Trojano-xxxx [Trj] Help wanted
« on: December 25, 2005, 09:43:42 PM »
Any idea how to deal with it?
I got few Trojano with different numbers (3186 and 1728), I'm not sure if this are differet viruses or a doing of one. It infected startup or handle memory [raw translation due to my lacks in tech eng sorry]. Deleting or puttg into quarantine will not do. Avast found Win32:Startpage-145 [Trj] as well. Existence of a backup is questionable. There's plenty of what i don't know, because it's my nephews computer.
   Few certainties tough:
Working on WinXP Pro
with avast only
infected files are in WINDOWS, Doc&Setting and System Volume Inf folders.
avast keep popping up windows with "awating connection time | Time fot awating internet connections is up. Keep on wating?" [raw translation from polish, sorry once again]
Speed of the comp is much lower then ussual.


I'll appreciate help, due to chrismas I can't reach my friend whose the one to deal with comps and I really would love to make it work 4 those littele imp.

Spiritsongs

  • Guest
Re: Win32:Trojano-xxxx [Trj] Help wanted
« Reply #1 on: December 25, 2005, 09:57:24 PM »
 :)  The "[Trj]" indicates this is a TROJAN and I recommend
      you install the Premier & FREE anti-trojan "Ewido" from
      www.ewido.net/en . When you 1st install the program it
      gives a "trial" for about 10+ days, which includes "real-
      time" protection AND automatic updates; after the trial
      ends, those 2 features end as well .
      You may want to consider reading its Tutorial at :

 www.greyknight17.com/spy/Tutorials/ewidoQuickGuide.pdf
     
« Last Edit: December 25, 2005, 10:15:24 PM by Spiritsongs »

..::ReVaN::..

  • Guest
Re: Win32:Trojano-xxxx [Trj] Help wanted
« Reply #2 on: December 26, 2005, 01:26:34 AM »
Yes install Ewido like Spiritsongs suggested as it's really a great program and detects alot of trojans.I would suggest you try to do a Boot time scan with avast! also and see if that helps

start avast! antivirus and right click somewhere in the skin then choose Schedule a boot time scan



And an on line scan with Trend Micro Housecall wouldn't hurt also. ;) Good luck!

P.S:Welcome to the forum!

ReVaN


EDIT: I just saw you mentioned there are some malware files in system volume
information folder.If so please disable System Restore and delete the restore points.
You'll want to do this just in case any malware got backed up with the rest of the programs
Click on the Start button.
Right-click My Computer, and then click Properties.
On the System Restore tab, check Turn off System Restore or Turn off System Restore on all drives as shown below



Click Apply. The following message appears:



This will delete all existing restore points.When you've cleaned the PC from malware you can re-enable Sytem Restore back here in the same menu ;)
« Last Edit: December 26, 2005, 01:56:02 AM by ..::ReVaN::.. »

Anathae

  • Guest
Re: Win32:Trojano-xxxx [Trj] Help wanted
« Reply #3 on: December 30, 2005, 09:45:43 PM »
Well Spiritsongs I went along with Your advices and end up with maim board smashed :| No idea if it was the virus or the av program... Anyway my nephew got a new mainboard and a win reinstalation. Hopefully everything will stay right for a wile :) And will stick with avast for time being.

Squidhead

  • Guest
Re: Win32:Trojano-xxxx [Trj] Help wanted
« Reply #4 on: December 31, 2005, 01:22:02 AM »
hi

nice point about the system restore
i have seen Avast often find entries in the restore folder
in a file with a name somthing like "a000080e.exe".

cheers
« Last Edit: December 31, 2005, 01:32:27 AM by Squidhead »