Please help me!

  • Thread starter Thread starter Pat Scott
  • Start date Start date
P

Pat Scott

I have done just about everything but completely clear my
computer and starting over again. I have this thing
called a Trojan Horse. I went to Major Geeks and Alan
has been trying to help me but I still have this trojan
horse. I have run everything under the sun and nothing
has worked. I really need help. This thing is in
C\windows\system32.sysdebug32.ext Is called Clicker
2.S I have done online scans and nothing shows us but
when I run Avast it sure shows up. Now I have
TrojanHunter, Adaware, Spybot, Zone Alarm, Ccleaner,
CWshreder, Macafee stinger, spyblaster.
Ok do I need to reformatt my hard drive to get rid of
this thing? I have one file I have to keep, and it is a
Family Tree program. It has always scanned clean.
Please, I have been fighting this thing way too long.
Nothing seems to work. HELP>>>>>>
Pat
 
I have done just about everything but completely clear my
computer and starting over again. I have this thing
called a Trojan Horse. I went to Major Geeks and Alan
has been trying to help me but I still have this trojan
horse. I have run everything under the sun and nothing
has worked. I really need help. This thing is in
C\windows\system32.sysdebug32.ext Is called Clicker
2.S I have done online scans and nothing shows us but
when I run Avast it sure shows up. Now I have
TrojanHunter, Adaware, Spybot, Zone Alarm, Ccleaner,
CWshreder, Macafee stinger, spyblaster.
Ok do I need to reformatt my hard drive to get rid of
this thing? I have one file I have to keep, and it is a
Family Tree program. It has always scanned clean.
Please, I have been fighting this thing way too long.
Nothing seems to work. HELP>>>>>>
Pat
Click to expand...

Have you tried to get rid of it in the Safe mode (F8 during startup)?
If not, then try.

Do you protect your computer with a firewall software? Do you have the lates
updates to the system? If not - protect it and perform the actualization.

And at least you can start the computer in the Safe mode, delete this
suspected file manualy, then start IE and check all the add-ons to the
browser (IE-> Tools-> Manage addons
http://www.microsoft.com/windowsxp/using/web/sp2_addonmanager.mspx ) and
disable the suspicious.
 
And before going to 'safe mode'. turn off system restore.
Then after rebooting to 'regular mode', turn sysstem
restore back on. Some trojans find a way to hide inside
the system restore structure.
 
If you are under attack and MSAS does not seem to help:

*Submit suspected spyware report in the tools menu of MSAS*

*Here is an excellent page showing you how to kill off spyware!*
http://tinyurl.com/awnad (smitfraud, in this case)

*Symantec Adware/Spyware removal tools:*
http://tinyurl.com/5y9cx

PREP YOUR MACHINE FIRST!
- IF you are using Spybot S/D, UN-Immunize your computer
- IF you are using Adaware, turn off AD-Watch
- Disable all other active anti-spy applications
- Dump all temporary file locations and Internet files

1. Download:
lspfix.exe www.cexx.org/lspfix.htm
winsockxpfix.exe www.snapfiles.com/get/winsockxpfix.html
ccleaner.exe www.ccleaner.com
killbox.exe www.bleepingcomputer.com/files/killbox.php

2. Clean out all temp file locations with ccleaner.exe

3. Install and use killbox to delete stubborn files

4. Reboot into safe mode - http://tinyurl.com/pfca
5. Run MSAS at least twice in full/deep mode
6. Run a robust, updated antivirus software scan
7. Reboot into normal mode,see if problem has been corrected

8. If you think something is there but can't see it, download:
- Blacklight by F-Secure
www.europe.f-secure.com/exclude/blacklight/blbeta.exe
- RootKitRevealer by SysInternals
www.sysinternals.com/ntw2k/freeware/rootkitreveal.shtml

9. If your problem is Virus or Security patch related:
In the United States or Canada, call 1-866-PCSAFETY
MS will provide free support for those issues.

Battle Notes:
- If you have trojans (files that won't go away),
you may have to disable System Restore on XP:
http://tinyurl.com/movy

- If your Internet connectivity quits:
http://support.microsoft.com/kb/892350
http://support.microsoft.com/kb/811259
LSPFix - www.cexx.org/lspfix.htm
Winsockxpfix - www.snapfiles.com/get/winsockxpfix.html

- This program will not detect or remove viruses
http://www.microsoft.com/athome/security/viruses/default.mspx

Application Notes:
Registering a VB6 dll seems to fix missing agents:
1) Open up a command prompt (start -> run -> cmd)
2) Type in the following "regsvr32 msvbvm60.dll" (without the quotes).
3) Close and re-open Windows AntiSpyware
4) If that fails, install VB6 runtime files:
http://www.softwarepatch.com/windows/vbrun6download.htm

- To report false positives:
www.microsoft.com/athome/security/spyware/software/isv/fpform.aspx
- To submit disputes or requests:
www.microsoft.com/athome/security/spyware/software/isv/cdform.aspx
- To learn more about how MS analyzes suspected spyware:
www.microsoft.com/athome/security/spyware/software/isv/analysis.mspx
- To Run MSAS in passive mode:
http://support.microsoft.com/kb/892375

Alternative Anti-Spyware Applications:
- Spybot Search and Destroy
http://www.majorgeeks.com/download2471.html
- LavaSoft AdAware
http://www.majorgeeks.com/download506.html
- AdAware VX2 Cleaner Plugin
http://www.majorgeeks.com/download4283.html
- PestPatrol
http://www.majorgeeks.com/download1187.html
- Webroot Spysweeper
http://www.majorgeeks.com/download3263.html
- Ewido Security Suite
http://www.ewido.net/en/
- CounterSpy (Same Giant Company Engine as MSAS)
http://www.sunbelt-software.com
- A Squared Free
http://www.emsisoft.com/en/software/free/


Recommended Software to help protect you:
- Windows XP Service Pack 2
http://www.microsoft.com/windowsxp/sp2/default.mspx
- SpywareBlaster
http://www.javacoolsoftware.com
- Outpost Firewall Pro
http://www.agnitum.com/products/outpost
---------------------------------------------
 
Back
Top