oh goody now I have a trogan

[Guest]

I resently bought my computer from a store, the guy there had said I do not
want the SP2 installed on my PC and instead had installed a limited Zone
firewall (which I can't update without buying into it). I realize the error
I have made by listening to him and his poor advice not to have the service
pack installed. My 3 week old PC now has a trogan called FURootkit. My Mc
Afee virus scan catches it and says it has been removed and to scan my PC.
After my scan is complete it shows no viruses, however the congratulation box
that use to pop up and says you have no viruses, doesn't appear. At first I
thought it was taken care of, but the same message comes up stating that
'FURootkit has been deleted to complete the cleaning process.' now do a scan.
this message box comes up at least 2 times an hour. Yesterday I ran a total
of 6 scans after being promted to do so by McAfee. I am scared to death that
what happened to my last PC will happen to my new one. I am using Spybot
search and destroy, McAfee and a Lavasoft scan a Zone firewall and the xp
firewall. What more do I need to do to prevent this? How do I assure myself
that the trogan is gone? Is it gone, why does it keep coming back? Is McAfee
really doing what it says and removing this trogan each time? Should I feel
confident in my preventative measures or should I do more?
I am fairly inexperinced with computers and am doing my best to learn what I
need to know. I am not looking for a 5min. fix, I am looking for solutions
to a problem that has cost me alot of money this year. Any more of this and
I'll have to drop out of college and get a job to support the trogans and
viruses.

Thanks
Monique
--
I have windows xp with ahigh speed cable internet connection.
I have no networked computers.
I am using mcafee virus protection. And an out dated Zone alarm
I have a 256mb 128 hard drive.
I have just enabled the xp firewall against my PC salesman's advice

 

[Guest]

Ok first I think you can relax. I like spybot search and destroy but what I
like better is microsofts antispyware beta version which you can get for free
from microsoft.com. Its self automates so you dont have to do anything after
you install it. As for the virus yes its gone so relax. I reconmmend getting
service pack 2 from microsoft as well . I am not a computer pro, everything I
learned I learned myself. but i only speak about things I know, k as for the
congradulations box it doesnt pop up for me either, a setting has been
changed or it just doesnt do it when it knows it told you about a virus. in
short no worries. I use avg free addition for antivirus as well as mcaffee, I
use mcaffee firewall though I do have windows firewall as well. Important
note: you cant run both firewalls at sametime. If you do it will block access
to internet for everything. Xp firewall is good enough but if you prefer
mcaffee it works too. if you have any more questions my email is
(e-mail address removed)

 

[Gabe]

go to www.grisoft.com and download their trial version, AVG is great at
picking up trojans that mcafee misses. also you can go to
housecall.trendmicro.com which is a free online virus scan that will
remove low level tojans, as far as getting something to prevent this
indefinately that would be hard most A/V software is about 80% success
rate, same for anti spyware, I will tell you though that spysweeper and
AVG for me do a great job. also check out spysweeper it's a great app
and always finds more stuff that ad-aware and spybot don't find. that
and also the microsoft beta isnt' bad but I still haven't made the leap
of installing it on my main machine.

 

[Michael Stevens]

In

I resently bought my computer from a store, the guy there had said I
do not want the SP2 installed on my PC and instead had installed a
limited Zone firewall (which I can't update without buying into it).
I realize the error I have made by listening to him and his poor
advice not to have the service pack installed. My 3 week old PC now
has a trogan called FURootkit. My Mc Afee virus scan catches it
and says it has been removed and to scan my PC. After my scan is
complete it shows no viruses, however the congratulation box that use
to pop up and says you have no viruses, doesn't appear. At first I
thought it was taken care of, but the same message comes up stating
that 'FURootkit has been deleted to complete the cleaning process.'
now do a scan. this message box comes up at least 2 times an hour.
Yesterday I ran a total of 6 scans after being promted to do so by
McAfee. I am scared to death that what happened to my last PC will
happen to my new one. I am using Spybot search and destroy, McAfee
and a Lavasoft scan a Zone firewall and the xp firewall. What more
do I need to do to prevent this? How do I assure myself that the
trogan is gone? Is it gone, why does it keep coming back? Is McAfee
really doing what it says and removing this trogan each time? Should
I feel confident in my preventative measures or should I do more?
I am fairly inexperinced with computers and am doing my best to learn
what I need to know. I am not looking for a 5min. fix, I am looking
for solutions to a problem that has cost me alot of money this year.
Any more of this and I'll have to drop out of college and get a job
to support the trogans and viruses.

Thanks
Monique

Monique,
Look on this page for RootKit Revealer, a freeware rootkit scanner from
Sysinternals. :Look in the scanners help for additional information on
removal and links.
RootKit Revealer
http://www.michaelstevenstech.com/software_tools.htm
--
In memory of, MVP Alex Nichol may his legacy live on.

Michael Stevens MS-MVP XP
(e-mail address removed)
http://www.michaelstevenstech.com
For a better newsgroup experience. Setup a newsreader.
http://www.michaelstevenstech.com/outlookexpressnewreader.htm

 

[Guest]

Hello, I am assuming that system restore is working on your unit. If so then
the AV program may be picking up the trojan in system restore files. These
are segregated and will do no harm unless you use system restore. To remove
trojan from system restore files it should be disabled. Right click
MyComputer click properties click system restore tab place a check in the
turn off systrem restore box ok out and reboot, upon rebooting follow the
same procedure in reverse removing the check in the turn off system restore
box ok out reboot this will activate system restore and create a new restore
point then run your AV program. You can use several online sites "PCPitStop,
Panda" etc. to recheck your unit. Make sure you have updated your AV program
then consider installing SP2. You can download a free firewall from Kerio or
Sygate or use the firewall that is part of WindowsXP. Choose one firewall and
one AV program as defaults "active" and keep others as backup "not active".
There is no perfect solution, try to practice online safe usage.
If your planning on dropping out of college stop using the computer and
donate your income to a "Sane and Safe World without Computers" a NGO that I
am starting when I receive your first money order.
Take Care.
beamish.