Author Topic: trajoan-302  (Read 4284 times)

0 Members and 1 Guest are viewing this topic.

aleros

  • Guest
trajoan-302
« on: September 17, 2004, 01:38:38 AM »
Hi,

Can somebody help me to destroy definitively this trojan.
Avast detects it and call it win32.trojano-302 Avast ask if I want destroy it, eaven when restarting windows. I delete the virusit , and the problems appears at each time. I did a CleanBoot Scan, and everything I  read in this forum until today. Cleaned the registry hklu Software, microsofot internet explorer main .......
The computer sims cleaned but everytime i connect to Internet it changes the Explorer  Start Page to www.Iwantosearch.com. I am using Windows NT and I got it  update. Thanks

whocares

  • Guest
Re:trajoan-302
« Reply #1 on: September 17, 2004, 04:02:24 AM »
Hi,

please read the link "VirusRemoval" below in my sig and:
- post a hijackthis-Log for diagnosis
- tell us WHERE exactly avast finds the trojan (full path/folder/filename)
- try ad-aware, spybot & cwshredder
- scan the infected file Online with Trend, RAV & KAV for better identification of the variant
- secure your system & browser better..
 ;)

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31072
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:trajoan-302
« Reply #2 on: September 17, 2004, 08:54:54 AM »
Quote
eaven when restarting windows. I delete the virusit , and the problems appears at each time
Looks like system restore needs to be disabled before removing. Disable it and follow whocares suggestions.

aleros

  • Guest
Re:trajano-302
« Reply #3 on: September 17, 2004, 03:33:02 PM »
Does Windows NT have system restore? Where can I find it? thanks.

whocares

  • Guest
Re:trajoan-302
« Reply #4 on: September 17, 2004, 05:04:32 PM »
NT doesn't  have a system RESTORE feature, only ME & XP

please post the hijackthis-log -> http://hjt.klaffke.de/en
and work on the other advice above.. ;)

aleros

  • Guest
Re:trajoan-302
« Reply #5 on: September 17, 2004, 09:35:07 PM »
Finally I could remove it with  Housecall.  I runned it in safe mode and then Edit the Regystry and change start Page In Internet Explorer
Thanks to All.