Trojan Stuck in Registry, System Restore Unavailable

[wltdnfaded]

Hiho,

I have a Trojan. Packed. 9 and other spyware trapped in my WinXP
registry and I can't get it out. It is intefering with my IE as well
as all my other online programs (AOL, gaming, etc). Norton and
SpyDoctor do nothing. Will a registry cleaner solve my problems? Or
should I just reinstall WinXP?

Some files I wrote down:

Trojan: C:\ Documents and Settings: gulpxc [1]. htm

C:\rawpy.exe

C:\ybaxd.exe

Any info would be greatly appreciated.

Ivy

 

[Ron Martell]

Hiho,

I have a Trojan. Packed. 9 and other spyware trapped in my WinXP
registry and I can't get it out. It is intefering with my IE as well
as all my other online programs (AOL, gaming, etc). Norton and
SpyDoctor do nothing. Will a registry cleaner solve my problems? Or
should I just reinstall WinXP?

Some files I wrote down:

Trojan: C:\ Documents and Settings: gulpxc [1]. htm

C:\rawpy.exe

C:\ybaxd.exe

Any info would be greatly appreciated.

Ivy

I seriously doubt if the trojan itself is contained withing your
registry. The registry is just a very large and structured text
file. But there probably are entries in the registry that refer to
(and launch) the trojan, which is a legitimate concern.

Norton doing nothing may not be that bad - at least it didn't make the
problem worse.

And SpyDoctor is something you would be better off without. According
to http://www.spywarewarrior.com/rogue_anti-spyware.htm this product
is marketed under a variety of names including Spyware Killer,
SpyFirewall, Spyinator, SpyKiller 2005, SpyLax, SpySpotter,
SpywareThis, & Spyware Protection Pro. All of these feature the use
of false positives which work as goad to purchase and poor scan
reporting.

Get a second opinion regarding your system before you do anything
drastic. Best way is to do a free online scan at one of the
following free scanning sites:
Bit Defender http://www.bitdefender.com/scan8/ie.html
Trend Micro http://housecall.trendmicro.com
Kaspersky Online Scanner http://www.kaspersky.com/virusscanner
Panda ActiveScan http://www.pandasoftware.com/activescan
WindowSecurity.com TrojanScan http://windowssecurity.com/trojanscan
Webroot http://www.webroot.com/

Good luck

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca
Syberfix Remote Computer Repair

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."

 

[Elmo]

Hiho,

I have a Trojan. Packed. 9 and other spyware trapped in my WinXP
registry and I can't get it out. It is intefering with my IE as well
as all my other online programs (AOL, gaming, etc). Norton and
SpyDoctor do nothing. Will a registry cleaner solve my problems? Or
should I just reinstall WinXP?

Some files I wrote down:

Trojan: C:\ Documents and Settings: gulpxc [1]. htm

C:\rawpy.exe

C:\ybaxd.exe

Any info would be greatly appreciated.

Ivy

Schedule a boot scan, or go to Safe Mode and run the a/v (Norton) there.
If it still won't remove the malware, get AVG from Grisoft.com or
Avast! from Avast.com

 

[Bert Kinney]

Here are some steps to take for Virus and Spyware removal and prevention:
http://bertk.mvps.org/html/spyware.html

Regards,
Bert Kinney MS-MVP Shell/User
http://bertk.mvps.org
Member: http://dts-l.org