cannot remove trojan.startup.nameshifiter.mszp32trogan

[robin]

Microsoft spyware software will not take this trojan off. I have run it in
safe mode with system restore off (xp home sp2) and as soon as I reboot the
trojan comes right back. IE opens with a ad:blank page with porn Google and
popups of porn and page changes.

I have tried everything- any suggestions on how to get this off?

I tried counterspy, trojanhacker, spybot, adaware and not one of them will
remove this trojan

now what?

robin

--

 

[Andre Da Costa]

From APTGuru and Plun
Use your AntiVirus with updated definitions and do a full system scan in
safe mode:
How do I delete System Restore restore points I do not need?

Answer: You have the option to delete all but the latest restore point
from your machine or delete all the restore points on your machine. To
do this:

? To delete all but the latest restore point on your machine by using
the disk cleanup utility: Go to 'Start > All Programs > Accessories >
System Tools > Disk Cleanup'. Click on the more options tab and then
click 'Clean up' in the System Restore box.

? To delete all the restore points on your machine disable and
re-enable system restore on the system: Go to the Control Panel ('Start >
Control Panel') and open the 'System' applet. Click on the 'System
Restore' tab on the system applet. Check mark 'turn off system restore
on all drives' and click the apply button. Then uncheck the box again
to re-enable System Restore on the machine and click OK.

? You can also reduce the number of restore points saved on your
machine by lowering the total amount of disk space available to system
restore. Remember that the lower the disk space available to system
restore, the lower the number of restore points that will be available
on your machine and smaller the safety net available to you through
System Restore.. To do this please see 'How can I adjust how much space
System Restore uses on my disk?'

I had a variation of this caused by CWS Home Search Assistant. The
directions at the following site got rid of it for me.
http://www.malwarebytes.biz/forums/index.php?showtopic=673
--
Andre
Extended64 | http://www.extended64.com
Blog | http://www.extended64.com/blogs/andre
http://spaces.msn.com/members/adacosta
FAQ for MS AntiSpy http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

 

[Linuxgirl]

From APTGuru and Plun
Use your AntiVirus with updated definitions and do a full system scan
in safe mode:
How do I delete System Restore restore points I do not need?

Answer: You have the option to delete all but the latest restore point
from your machine or delete all the restore points on your machine. To
do this:

? To delete all but the latest restore point on your machine by using
the disk cleanup utility: Go to 'Start > All Programs > Accessories >
System Tools > Disk Cleanup'. Click on the more options tab and then
click 'Clean up' in the System Restore box.

Or log in as administrator, go to windows explorer, right click on the
System volume information folder click on properties/security and change the
security settings to give yourself full control. Then you can delete as many
or as few restore points as you wish at any time.

LG

 

[Boberuski]

or a quick way to get rid of restore points is to turn
off restore in the system settings and that will delete
all restore points, then simply turn it back on. As to
removal of the "trojan" you might want to try cleanup
v4.0 run it in safemode, if the file is in the temp
directory this will delete it, I would also recommend
Hijackthis! and if not the full version then at least the
trial version of Spysweeper, I would also recommend not
being connected to the internet, then run scans w/
spybot, adaware, MS anti, Spysweeper, w/o rebooting as
well as cleanup v4.0, make sure all you defs are up to
date, also you should start you system w/ networking
enabled and go to microtrends website and run their
online virus scan Housecall. Then after all
that...reboot and run all these scans again to see if it
is still there, you can also post your hijackthis! logs
and recieve help w/ those, just do a google search if
possible, I hope this helps...If all else fails you
could take it to Geek Squad.

-----Original Message-----


Or log in as administrator, go to windows explorer, right click on the
System volume information folder click on

properties/security and change the