after trojans removal

[Bjanka]

I'm having large dificulties after avast moved 4 trojans into its virus
chest. I have used all freeware for trojan removal, including sophos
sav32cli with most recent ides for after avast procedure because things
are bad. Right now trojan remover is doing its last scan but seems taht
disc have been disinfected. I think trojans messed up the registry keys
and maybe some other things. In device manager there is WAN miniport with
exclamation mark which I don't need but it is unpossible to unninstal it.

Does someone have any advice?

 

[Randem]

Most likely you still may have some virus/trojans/worms/malware and may
neeed to remove them also. try http://www.randem.com/virusproblems.html for
that.
The next thing is to clean the registry after removal. As for the WAN
miniport are you referring to the 1394 port? You can delete the device from
device manager and have device manager re-install it, perhaps that will
solve this issue.

--
Randem Systems
Your Installation Specialist
The Top Inno Setup Script Generator
http://www.randem.com/innoscript.html
http://www.rndem.com/installerproblems.html
http://www.randem.com/vistainstalls.html
http://www.financialtrainingservices.org

 

[Mick Murphy]

You have been reported for SPAMMING, GERM.
--
Mad Mike


:








































phos

 

[Malke]

I'm having large dificulties after avast moved 4 trojans into its virus
chest. I have used all freeware for trojan removal, including sophos
sav32cli with most recent ides for after avast procedure because things
are bad. Right now trojan remover is doing its last scan but seems taht
disc have been disinfected. I think trojans messed up the registry keys
and maybe some other things. In device manager there is WAN miniport with
exclamation mark which I don't need but it is unpossible to unninstal it.

Since you left out all the details about what you were infected with and the
symptoms aside from missing drivers, I can only guess that whatever you had
messed up your operating system. Probably the most efficient thing to do is
back up your data and clean-install Windows.

http://michaelstevenstech.com/cleanxpinstall.html - Clean Install How-To
http://www.elephantboycomputers.com/page2.html#Reinstalling_Windows - What
you will need on-hand

Malke

 

[Ken Blake, MVP]

I'm having large dificulties after avast moved 4 trojans into its virus
chest. I have used all freeware for trojan removal, including sophos
sav32cli with most recent ides for after avast procedure because things
are bad. Right now trojan remover is doing its last scan but seems taht
disc have been disinfected. I think trojans messed up the registry keys
and maybe some other things. In device manager there is WAN miniport with
exclamation mark which I don't need but it is unpossible to unninstal it.

Does someone have any advice?

It's very important to realize that viruses, trojans, etc. typically
do damage to your system if they are on the system long enough. That's
why it's very important that you make sure that you do not *get*
infected, rather than remove the infections after the fact.

You haven't identified what trojans you have, so it's very difficult
to be sure, but my guess is that there's a strong probability that at
this point you will need to reinstall Windows cleanly.

 

[Kayman]

I'm having large dificulties after avast moved 4 trojans into its virus
chest. I have used all freeware for trojan removal, including sophos
sav32cli with most recent ides for after avast procedure because things
are bad. Right now trojan remover is doing its last scan but seems taht
disc have been disinfected. I think trojans messed up the registry keys
and maybe some other things. In device manager there is WAN miniport with
exclamation mark which I don't need but it is unpossible to unninstal it.
Does someone have any advice?

As suggested by Malke and Ken Blake:
Reformatting of HDD is the preferred course of action!

"The only way to clean a compromised system is to flatten and rebuild.
Thatÿs right. If you have a system that has been completely compromised,
the only thing you can do is to flatten the system (reformat the system
disk) and rebuild it from scratch (re-install Windows and your
applications)..."
http://www.microsoft.com/technet/community/columns/secmgmt/sm0504.mspx

There are however a number of valid reasons where this may not be possible
or achievable. Not everybody is technically versed to do so or has an
experienced acquaintance who may be able to assist. There are many users
who reside in less developed environments where professional help just does
not exist or is very hard to come by. Therefore, a user may find the
procedures as per:
http://michaelstevenstech.com/cleanxpinstall.html
http://www.elephantboycomputers.com/page2.html#Reinstalling_Windows
too overwhelming and shy away from the perceived complexeties of
re-installing the OS.
The procedures as per:
http://www.claymania.com/removal-trojan-adware.html
(especially David's MULTI_AV Tool) have had helped solving malware issues
for uncountable users for many years; And is (IMO) the next best thing to
flatten and rebuild an operating system. It can keep you going until
experienced and/or professional is available for thorough examination
and/or reformatting of HDD.

Other quality Standalone Malware Scanners are:
Kaspersky® AVPTool
http://avptool.virusinfo.info/en/
http://downloads5.kaspersky-labs.com/devbuilds/AVPTool/
There's no updating involved since the scanning engine is updated
several times a day and you simply download the updated scanner whenever
you want to do a scan.
and
Dr.Web CureIt!® Utility - FREE
http://www.freedrweb.com/cureit/
and
Malwarebytes© Corporation - Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
and
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html

Once the scanners are updated it is suggested to scan in Safe-Mode. However
the co-author of Malwarebytes does not recommend to use the safe mode
option for his scanner).

Prior scanning do this:
Click Start==>Run... then type (or copy/paste) "inetcpl.cpl" (w/out
quotation marks) into the box, then click the 'OK' button.
In Internet Properties panel 'General' tab, under 'Browsing history', click
'Delete...'button, in 'Delete Browsing History' panel, click the 'Delete
all...'button then place a checkmark into the box beside 'Also delete files
and settings stored by add-ons', Click 'Yes' and exit the Internet
Properties panel by clicking the 'OK' button.
--and--
Click Start==>Run... then type (or copy/paste) "cleanmgr" (w/out quotation
marks into the box, then click the 'OK' button. Select your drive
(presumably WinXP (C and click OK.

Good luck

 

[Bjanka]

Most likely you still may have some virus/trojans/worms/malware and may
neeed to remove them also. try http://www.randem.com/virusproblems.html
for
that.
The next thing is to clean the registry after removal. As for the WAN
miniport are you referring to the 1394 port? You can delete the device
from
device manager and have device manager re-install it, perhaps that will
solve this issue.

Yes, I have had problems after trojans removal because they choked up
computer so much that I have to reformat the system partitions. I couldn't
solve this on better way.

Thanks for info.

Bjanka

 

[Patrick Keenan]

Yes, I have had problems after trojans removal because they choked up
computer so much that I have to reformat the system partitions. I couldn't
solve this on better way.

Thanks for info.

Bjanka

Sometimes that is actually the fastest way to a reliable system. Sometimes
fixing takes longer than replacing.

 

[Kayman]

Sometimes that is actually the fastest way to a reliable system. Sometimes
fixing takes longer than replacing.

Excellent point. IMO, the average homeuser should acquire a good-quality,
comprehensive hard disk recovery program and become familiar with its
functions. A complete rebuild of the operating system can be achived in a
relative short time.

Educational reading:
http://www.microsoft.com/technet/community/columns/secmgmt/sm0504.mspx