Trojan horse is not being removed !!!!

[sunsh007]

I had window xp on my system with MCAfee 10 installed . i don't have
internet connection in my house so i cud not update it . Since 3
days , when i access C drive in which windows is installed it
automatically vanishes after a few seconds i open C drive. A McAfee
security warning shows that a trojan horse has been detected in system
32 and cannot be cleaned. When i open McAfee to scan my computer ,
it vanishes after scanning a few files and does not do anything. Even
in the tray when i point the cursor on the mcafee icon it shows that
it is disabled. When i try to enable it the same happens.... it
vanishes.. i tried a different thing too ,i tried to install the
latest Bit Defender 2008 but same happens...
Plzzzzzzzzzz tell me some solution for this..... THANX IN ADVANCE.

 

[Malke]

I had window xp on my system with MCAfee 10 installed . i don't have
internet connection in my house so i cud not update it . Since 3
days , when i access C drive in which windows is installed it
automatically vanishes after a few seconds i open C drive. A McAfee
security warning shows that a trojan horse has been detected in system
32 and cannot be cleaned. When i open McAfee to scan my computer ,
it vanishes after scanning a few files and does not do anything. Even
in the tray when i point the cursor on the mcafee icon it shows that
it is disabled. When i try to enable it the same happens.... it
vanishes.. i tried a different thing too ,i tried to install the
latest Bit Defender 2008 but same happens...
Plzzzzzzzzzz tell me some solution for this..... THANX IN ADVANCE.

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode.
http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://www.pctipp.ch/downloads/sicherheit/35905/multi_av_scanning_tool.html
- download site

The site is in German but David's tool is in English so don't let that
worry you. Scroll all the way down to almost the bottom of the page and
you'll see a box titled "Infos Zum Download - Multi-AV Scanning Tool".
You'll see "Download von www pctipp.ch" and the live link to download
Multi_AV.

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the first link above (not here, please).

Standard disclaimer: I can't see and test your computer myself, so these
are just suggestions based on many years of being a professional
computer tech; suggestions based on what you've written. You should not
take my suggestions as a definitive diagnosis. If you can't do the work
yourself (and there is no shame in admitting this isn't your cup of
tea), take the machine to a professional computer repair shop (not your
local equivalent of BigComputerStore/GeekSquad). Please be aware that
not all local shops are skilled at removing malware and even if they
are, your computer may be so infested that Windows will need to be
clean-installed. If possible, have all your data backed up before you
take the machine into a shop.


Malke

 

[David H. Lipman]

From: <[email protected]>

| I had window xp on my system with MCAfee 10 installed . i don't have
| internet connection in my house so i cud not update it . Since 3
| days , when i access C drive in which windows is installed it
| automatically vanishes after a few seconds i open C drive. A McAfee
| security warning shows that a trojan horse has been detected in system
| 32 and cannot be cleaned. When i open McAfee to scan my computer ,
| it vanishes after scanning a few files and does not do anything. Even
| in the tray when i point the cursor on the mcafee icon it shows that
| it is disabled. When i try to enable it the same happens.... it
| vanishes.. i tried a different thing too ,i tried to install the
| latest Bit Defender 2008 but same happens...
| Plzzzzzzzzzz tell me some solution for this..... THANX IN ADVANCE.


Download MULTI_AV.EXE from the URL --
http://www.pctipp.ch/ds/28400/28470/Multi_AV.exe

http://www.pctipp.ch/downloads/dl/35905.asp

English:
http://www.raymond.cc/blog/archives/2008/01/09/scan-your-computer-with-multiple-anti-virus-for-free/

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file.

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *