trojan horse message

[Guest]

I recently tried to post a message on another site.My McAfee virus scan
popped up and said I had been infected with a trojan horse virus that could
not be removed.I immediately closed down the site and deleted the temp. files
and cookies.I'm new at this so I don't know if this was the thing to do.I ran
a compleat McAfee virus scan and anti spyware scan from Microsoft and they
both came back negative (no virus detected).My question is, what else should
I be doing with this thing?Everything seems to be running all right.
My os is windows XP SP2.....Now be gentle with your answers. I am new at
this (o:
Twoiron

 

[RoadRunner]

Hi ... Try doing the following , it will help

First thing you should do is download hijackthis and have someone to view
your log , here where you can get hijackthis from
http://www.snapfiles.com/get/hijackthis.html

Here where if you like you can post your hijackthis log for assistance

http://spywarewarrior.com/index.php

http://forums.net-integration.net/

http://computercops.biz/forums.html

Now if you have an Anti-Virus Program which is fairly new ( mostly under a
year )and you are sure that you are still recieving update definitions ?
Then update yours now ....
Then afterward download a few programs , Like these here below

first one is Ad aware ( free Version )

http://www.lavasoft.de/support/download/

Start up this program , What you need to get is the most latest update for
it ,run JUST the "updated" option and afterward close the program for later
use ...

Next program >> Spybot Search and Destroy ( Free )

http://www.safer-networking.net/en/download/index.html

Next Program >> SpywareBlaster ( Free )

http://www.javacoolsoftware.com/sbdownload.html

Next Mcafee Stinger

http://vil.nai.com/vil/stinger/

Okay now perform this operation from this website below

http://support.microsoft.com/?kbid=310405

Okay this is next to perform below :

Click Start. >>Open My Computer. Select the Tools menu and click Folder
Options. Select the View Tab.
Under the Hidden files and folders heading select Show hidden files and
folders. Uncheck the Hide protected
operating system files (recommended) option. Click Yes to confirm. Click OK.
DON'T WORRY ABOUT THE WARNING POP UP WINDOW THIS IS NORMAL , just click yes

Now its time to start your computer in Safe Mode
How to start up in safe mode , there is 2 ways in doing so , just choice one
method only ... Look at this website below

http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo

Okay once in safe mode do the following : Clear out the Temporary internet
files and other temp files.
Go to Start > Settings > Control Panel >Internet Options.
Under the General tab click the Delete temporary internet files,
delete all Offline content as well. Clear out Cookies ... Now close
eveything and be back at your desktop

Now click the start buttom > then the Search/Find option > click Files or
folders > in the named box, type: *.tmp , click search afterward choose Edit

select all -> File > delete.

Empty/delete the entire contents of the C:\Windows\temp folder and C:\temp
folder, (Contents only but not the folder itself.)

This one too if it is there C:\Documents and Settings\username\Local
Settings\Temp\
Delete the recycling bin ...

Now start up Mcafee Stinger and afterward Ad Aware and just basically
perform the options its set at for now ... And remove whatever it finds ...
Start spybor search and destory and do the same with this program
Also with the spyware blaster , just clean what it finds ....

Now use your Anti - Virus Program and run it and see what it finds ...If
your anti-virus finds anything try the repair option first, if that can't be
done then delete the file...
Now restart your computer back to normal mode and reset the setting back
too...Once your computer is up and running do the following :
http://support.microsoft.com/?kbid=310405
and this next >>> :
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/xpsysrst.mspx
Okay after all that was done and you want to be sure its clean go to these
anti virus scan sites and do the scan from each site if you like

http://www.trendmicro.com/download/dcs.asp

http://windowsxp.mvps.org/Scanners.htm

http://www3.ca.com/securityadvisor/virusinfo/scan.aspx



....

 

[RoadRunner]

I should add when you turn "system restore" off , Turn it back on when you
have finish doing everything that I suggested , So when you get to the part
to turn it off , do so and , when youa re finish doing everything that I
said to do , restart your computer and then turn system restore back on ...

....

 

[Guest]

Hi RoadRunner:
Thank you for your help.I will try some of these.One more question.
Is it possible there was a glitch in McAfee virus scan that brought up the
message?I'm still getting a negative(no virus detected)when I scan online
with McAfee.
Again thank you very much for your help.
Still learnin........Twoiron

 

[RoadRunner]

Hi ... No I doubt it , I believe your anti-virus program did what it should
do , protect you from viruses, When ever your anti-virus does find a virus ?
Try the repair option first , If that can't correct the problem ? Then
deleted ... Just make sure you are recieving your update definitions ...
Also if you have a good knowledge with computers ? You should also have a
firewall install but , If your not to familar with computers ? Having a
firewall can give you a headache , its because you need to know how it
works and that can be a little tricky but , not impossible

ZoneAlarm (Free and up)
http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp

Kerio Personal Firewall (KPF) (Free and up)
http://www.kerio.com/kpf_download.html

Outpost Firewall from Agnitum (Free and up)
http://www.agnitum.com/download/

MY FAVORITE RIGHT HERE BELOW ( PRO )
Sygate Personal Firewall (Free and up)
http://smb.sygate.com/buy/download_buy.htm

Symantec's Norton Personal Firewall (~$25 and up)
http://www.symantec.com/sabu/nis/npf/

BlackICE PC Protection ($39.95 and up)
http://blackice.iss.net/

Tiny Personal Firewall (~$49.00 and up)
http://www.tinysoftware.com/



.......