Munku

I got this Trojan a few days ago, detected by my virus scanner, and deleted. But it keeps coming back, with a different number in the name each time, and is deleted again. If I leave my computer on at night I end up with 7-12 of these windows open saying Norton has deleted this virus. Anyone have any idea how to rid myself of this thing? I ran my spyware checkers and antivirus and can't get anything fixed..



Thanks for your help guys!

Martian

http://securityresponse.symantec.com...n.stwoyle.html

Looks like you need to go into the registry for this one.

SARC doesn't mention it, but prior to the steps listed on the site there, you're gonna want to boot into safe mode. It'll only start system critical processes, which means that you'll be pretty much guaranteed the virus isn't in memory.

__________________
I wake up in the morning more tired than before I slept
I get through cryin' and I'm sadder than before I wept
I get through thinkin' now, and the thoughts have left my head
I get through speakin' and I can't remember, not a word that I said

- Ben Harper, Show Me A Little Shame

Munku

Well, I'm still getting the virus and I dont have any of those keys in the registry.. =[

soccerchamp76

Run your computer in safe mode (upon restart, hit F8 til the option appears).
Run your virus/spyware scans now. There could be a part of the virus that tells the antivirus program that it was removed but it really wasn't. Running your computer in safe mode gaurantees the virus will not be loaded as only the basic drivers are run during safe mode.

__________________
Brian Griffin: Ah, if my memory serves me, this is the physics department.
Chris Griffin: That would explain all the gravity.

viejo gringo

Ran into a bad one like this last week...used AVG and scaned the WHOLE PC...it found seven occurancaes of it in the recovery files...

so check them and be sure you turn off recovery before you start...sometimes they are in the protected system files..VG

santafe5000

Yes, you must turn off system restore and get all the updates for your spyware and anti-virus. Then reboot and TAP F8 continuosly til it brings up the screen to chose how to start. Choose SAFE MODE and run your spyware and anti virus. After it cleans the machine, reboot to normal mode, make sure the culprit is gone, then make sure you re-enable system restore. By turning off sys. restore, the trojan can't store itself in memory and re-install on the next boot cycle.
Good luck .

__________________
When all else fails, QUIT.