Monday, August 9, 2010

Trojan Downloader removal help?

One of my family members went to some website and a trojan downloader was installed. When I start up Lavasoft ad-aware virus protection, rau001978.exe (something like that) keeps coming up and when I erase, it keeps coming back when I reboot it. I erased some of the files and folders it created in Program Files folder. I disabled system restore and started up regedit in safe mode, erasing some files in HKEY_LOCAL_MACHINE/Software/microsoft/Wi... Version/Run but did not erase all(the ones that i think are trojans). Please help and thanks



Trojan Downloader removal help?antivirus scan



This reminds me of the Spywarequake virus my friend got hit with a couple months ago. In that virus, there is a couple of files that needed to be removed, otherwise it will re-download itself again.



In your next virus scan, jot down the files that the program is reporting. I would assume there to be more than one file. Those would be the files you need to get rid of.



[In Spywarequake, it performed a virus scan and tell you that it found infected files, but you cannot remove it until you buy their software. I took the list of corrupted files it reported and I got rid of those files and the virus was gone]



I suggest the following:



--Restart in Safe Mode. Are you getting the same popups? if you are then it is running. If you do not experience the popups, then you should be able to delete the files and it should be gone.

No comments:

Post a Comment