Getting rid of Trojan

  Steve Mat 12:52 25 Jun 2009
Locked

My son's pc has at least 1 Trojan.

I have followed the steps recommended on this and other forums, run the recommended software but to no avail. I've tried in safe mode and it's the same, Trojan found, trojan dealt with by software, Trojan back on reboot.

I am at the stage where I need to contact one of the specialist sites but to be honest, his pc could do with a clean up and I'm tempted to reformat and fresh install.

Would this get rid of the Trojan?

  AndySD 13:20 25 Jun 2009

Yes

  mfletch 13:47 25 Jun 2009

Don.t give up to easaly,

Try this,

DrWeb-CureIt

Please Download DrWeb-CureIt from here click here & save it to your desktop.

1/ Double-click on drweb-cureit.exe and then click Start
2/ An information notice will appear, click OK.
3/ This starts a short scan that will scan the files currently running in memory.

PS/ If you get a prompt to buy the full version just exit out of the window DrWeb will still work.

4/ If or when something is found, click the Yes button when it asks you if you want to cure it.

5/ Once the short scan has finished and your Back at the main window, select the Complete scan button and then click the Green arrow to start the scan,

6/ Click Yes to all if it asks if you want to cure/move any file(s).

7/ When the scan is done.

8/ In the Dr.Web CureIt menu on top left, click File and choose Save report list

9/ Save the DrWeb.csv report to your Desktop

10/ Exit Dr.Web Cureit and Reboot the computer.

  Steve Mat 14:30 25 Jun 2009

Believe me I'm not giving up easily. The time I have spent following various advise given on several forum, I could have re-formatted several times over.

Most of the threads that are similar to my problem, end up having to go to specialist websites and having someone personally analyse their pc. It's not worth their time and it may remind my son to keep his protection up to date, when he has to reload everything.

Yeh, I know, that's child abuse!

  phono 15:02 25 Jun 2009

A format and reinstall of Windows will get rid of the trojan.

  phono 15:04 25 Jun 2009

If you haven't tried MalwareBytes anti malware download it from click here click the blue, Download free trial version, button, install, update and run a quick scan, if it picks anything up let it deal with what it finds, reboot if requested and then run a full scan.

Report back with any findings.

  Fruit Bat /\0/\ 15:09 25 Jun 2009

Trojan back on reboot.

This is because a copy of the infection is usually hiding in the system restore files.

Find trojan , delet or clean the file and windows replaces it with another infected copy when you reboot.

1. switch off system restore , that will delete all the restore points and and infections hiding in there

2. use the recommended program to find and get rid of the trojan.

3. reboot pc and scan again to make sure its gone.

4. switch system restore back on which will make a clean restore point.

  Steve Mat 15:18 25 Jun 2009

Malwarebitten to death!

Restore point? Now that's one I haven't tried.

One last go I suppose. But then I get to format - right?

  mfletch 15:19 25 Jun 2009

Can I just point out once again that nothing can get out of the system restore unless you actually do a system restore,

SR is best left alone until the computer is clean,

Any restore point is better than none even a infected one,

  phono 15:35 25 Jun 2009

Have to agree with mfletch here, the trojan may be picked up in the restore point during a scan but if that is the only place it is picked up in then the trojan is not actually active on the system.

  Steve Mat 15:39 25 Jun 2009

Houston we have a contradiction.

So am I wasting my time booting to Safe Mode and running Malwarebytes et al?

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Alienware 17 R4 2017 review

These brilliant Lego posters show just what children's imaginations are capable of

Mac power user tips and hidden tricks

Comment réinitialiser votre PC, ordinateur portable ou tablette Windows ?