-
Welcome to Overclockers Forums! Join us to reply in threads, receive reduced ads, and to customize your site experience!
Stubborn Trojans
- Thread starter situman
- Start date
- Joined
- Aug 30, 2004
- Location
- Dayton, OH
If all else fails backup and reformat.
theMonster
Disabled
- Joined
- Jul 22, 2004
- Location
- At the pub
Must resist condom joke.....arrgggghhhhhhhh
Seriously, does your antivirus detect it and not remove it or does it not even detect it. A couple things you may want to try is scanning in SAFE MODE, inspecting the registry for suspicious entries, using HIJACK THIS! to find suspicious entries and using MSCONFIG (if running XP) to shut down anything suspicious at start-up.
Seriously, does your antivirus detect it and not remove it or does it not even detect it. A couple things you may want to try is scanning in SAFE MODE, inspecting the registry for suspicious entries, using HIJACK THIS! to find suspicious entries and using MSCONFIG (if running XP) to shut down anything suspicious at start-up.
- Joined
- Aug 27, 2001
- Location
- Dark side of hell
Why do you think it is a trojan?
follow the spyware guides in the spyware sticky linked in my sig.
If it really is a trojan then try the trial versian of TDS-3 http://tds.diamondcs.com.au/
follow the spyware guides in the spyware sticky linked in my sig.
If it really is a trojan then try the trial versian of TDS-3 http://tds.diamondcs.com.au/
- Thread Starter
- #6
McAfee picks it up, but it seems to replicate itself. I disable it in MSCONFIG and a new version pops up. McAfee sees it as trojan and it can remove the replications, but it cannot remove the main file. I was finally able to get rid of it by uninstalling a program www.Pctuneup.com or some **** like that installed in my comp without my permission.
- Joined
- Aug 27, 2001
- Location
- Dark side of hell
What was the name of the trojan?
- Joined
- Mar 7, 2002
- Location
- San diego or UC Davis
Alot of the newer trojans and spyware will run two processes. The two processes will check on each other and even if you manage to end one, the other will start it back up. Also if you edit the registry/msconfig, the program will continually check to see if its "run" line is in the registry. Best way to remove anything is to boot up into safemode. If for some reason safe mode doesn't work, then I like to edit the registry manually or using hijack this, then right after I make the changes, I pull the plug on the system then reboot. This way the programs have no hope of undoing my work.
Similar threads
