PDA

View Full Version : Help; Trojan ?


thekochs
07-17-06, 08:11 PM
OK, I received a system back from a friend I had configed about a year ago. It was loaded with XP Home and Norton SystemWorks 2005 (AV & Worm). The machine was fine when I gave it....mucked up good when I got it back. The AV was off....Norton did not work correct. I uninstalled alot of software including Norton. I also noticed that the Network connections did not work (although Internet did) and also the Windows Update for latest IE Security Update KB916281 & Windows Security Update KB917344 would download but not install....says SP error. So, I went ahead and used a XP Pro CD and did an upgrade install which kept all the old software, etc. I installed Norton SW/AV....ran scan and nothing came up. I ran Microsoft Malicious software tool full scan and nothing came up. I checked (based on recommendations) and services.exe is in the Windows\System32 and the other two files which I understand are indicitive of a Trojan (fservice.exe & sserivce.exe) are not on my PC. The new XP Pro Upgrade install solved the Network problem but the two MS updates listed above still down't install. Interesting though, because the SP2 version of the CD was a little old there were many other Security Updates which did download and install.

Anyway, is there a good Worm/Trojan scanner that I can try ? I want to ask for a suggestion that someone has tried/recommend since all these scanners want to donwload to the PC and run.....which I'm worried they are a virus since I'm sure Norton won't like them running and give me an error or message to allow it to run....so once passed my firewall I'm in trouble.

Any recommendations on what to try ?

Thanks in advance.

hayc59
07-17-06, 08:44 PM
thekochs, hello wrong section moving to Spam Control & Privacy
also you can try this program
a-squared Anti-Malware
http://www.emsisoft.com/en/software/antimalware/

wonderful program

mnosteele52
07-31-06, 06:32 PM
Prior to doing anything XP users MUST disable System Restore!!! You can re enable it after you are clean.

1. Download, install and run CrapCleaner (http://www.ccleaner.com) to remove any temporary and junk files.

2. Download Ad-Aware SE 1.06 (http://www.majorgeeks.com/download506.html) and set it up as shown HERE (http://www.drtweak.com/index.php?topic=40.0).

3. Download SpyBot Search & Destroy 1.4 (http://www.safer-networking.org/index.php?page=download) and set it up as shown HERE (http://www.drtweak.com/index.php?topic=41.0).

4. Download and run CWShredder 2.19 (http://www.trendmicro.com/cwshredder).

5. Download Ewido Anti-Malware 4.0 (http://www.ewido.net/en/download).

6. Do a FREE online virus scan from BitDefender Online Scan (http://www.bitdefender.com/) and remove all that it finds.

7. It it also a good idea to run the Winsock Fix (http://www.snapfiles.com/get/winsockxpfix.html) to repair your TCP/IP stack. (you will have to redo any tweaks for your connection if this is used)

8. If after doing ALL of the above and you are still having problems please scan with HijackThis 1.99.1 (http://www.majorgeeks.com/download3155.html) as shown HERE (http://www.drtweak.com/index.php?topic=58.0) and post a log here in this forum for us to look at.

9. Download SpywareBlaster 3.5.1 (http://www.javacoolsoftware.com/spywareblaster.html) and set it up as shown HERE (http://www.drtweak.com/index.php?topic=42.0) to help stay spyware free.

10. Make sure you have ALL of the latest Windows Updates.

:D :cool: