trojan.windowsservice.A / trojan.startup.d

[Troy]

My problem is I keep getting popups and my home page
changed to about:blank, also a bunch of websites get
added to my favourites. I have run Microsoft antispyware
beta1 and spybloc as well as my Norton antivirus software
which say i have the foolowing which i cannot remove at
all.
"trojan.windowsservice.A" it seems to recreate itself
everytime I try and delete componenets of it out of the
c:windows and c:windows/sytem32 directories. I have been
trying to delete the registry entries and as soon as they
are deleted the program reinstalls them. Help!!!

 

[JohnF.]

You are going to need to do several things:

1. Ensure that SHOW HIDDEN FILES is enabled.
2. Reboot into SAFE MODE
3. Run MSAS twice Full scan in deep mode.
4. Clean out all temporary file locations, some are in the documents and
settings areas, the other is under the windows folder.
5. Delete temporary Internet files from the TOOLS OPTIONS section of IE.

Reboot and test.

Still infested? Disable System Restore and run through steps 1 thorugh 5
again just to be sure everything is clean.

JohnF.

 

[Steve Wechsler [MVP]]

Troy,

"spybloc" is a rogue program :
http://www.spywarewarrior.com/rogue_anti-spyware.htm

It may be reinfesting the system as a goad to purchase it. Uninstall it
then follow John F's advice.

Steve Wechsler (akaMowGreen)

MS-MVP 2004-2005
Windows Server - Software Distribution
Windows - Security