Trojan Virus Help!

[perodimi]

Avast detected a Trojan Horse so I did a thorough scan as well as Ewido and Adaware but still have the following problems:

-Internet Explorer sometimes won't open completely and gets hung up "detecting proxy settings.
-The taskbar freezes and is partly blank.
-Have to shutdown using Ctrl Alt Delete when the task bar is frozen.
-Computer will not shutdown, hangs up at "Windows is logging off".

Any advise would be greatly appreciated!

Thanks

[mauserme]

Hi perodimi,

What was the name and location of the trojan avast! detected?  Did Ewido and AdAware find anything additional?

Does the trojan re-appear after you reboot?

Do you use a firewall?  Is so, which one?

[Lisandro]

Is there any interesting info in the Windows Events?

[perodimi]

Avast detected "Trojan Horse WIN32-VB-YN [trj]" and yes, it infected C:\windows\system32\cahyqprp.exe\[upx] and C:\systemvolumeinformation\..\[upx] as well as ewido finding several medium risk spyware. The odd thing is, the problem appears to have no consistency. At this moment, everything seems normal but Internet Explorer and all the problems  associated can freeze up without notice as mentioned before.

Also, while infected, I couldn't boot up and the error message said unable to find Windows\config\sys but after several tries, it finally did boot up.

The trojan does not apparently re-appear after reboot.

I'm using the windows XP firewall.

I don't know about info in the windows events?

Thanks for the replies

[mauserme]

OK.  Try this ...

-- Make sure avast! and Ewido signatures are up to date.

-- Turn off System Restore and clear your temporary files (you can use CleaupUp from

    http://www.stevengould.org/software/cleanup/

    or CCleaner

    http://www.ccleaner.com/

-- Schedule an avast! boot scan and reboot.

-- Once booted, scan again with Ewido.

Post again with the results.

You should also consider installing a third party firewall to get outbound protection.  The Windows Firewall only protects you from inbound threats.

[perodimi]

Thanks Mauserme!

I did exactly as you advised and immediately noticed a difference after using cleanup. Shutdown and reboot were all normal. I did the rest as per your instructions and all came up clean. I routinely clear out my temporary internet files under internet options but I suppose clean up must do something more?

Thanks for taking the time to help me out!

[mauserme]

I'm glad it worked out  perodimi.  You can turn System Restore on again now, if you want.

Give some serious consideration to a third party firewall too.