I got infected by a trojan.

[Boris]

I'm in no way computer savvy and have been trying to get this damn trojan out of my system for almost a week.

AVG find some things, heals them but the pop up adds return.
Spybot, deletes it but the shait comes back.


It's gotten so bad that to type this took about 20 minutes because of all the pop up crap.

Is there a trojan sweeper program out there that works or should I just reformat the f-ing drive before I go nuts.


Trojan downloader Agent KGR

[rasper99]

For starters try using Firefox instead of IE.
http://www.mozilla.com/en-US/firefox/
It's a lot less prone to infections. At least you will be online. Then have someone who knows what they are doing fix it without rushing.

This stuff is very nasty these days. You need to find someone who knows someone who can fix it. Don't go to places like Geek Squad. They were delivery pizza last week.

[Fathom]

For starters try using Firefox instead of IE.
http://www.mozilla.com/en-US/firefox/
It's a lot less prone to infections. At least you will be online. Then have someone who knows what they are doing fix it without rushing.

This stuff is very nasty these days. You need to find someone who knows someone who can fix it. Don't go to places like Geek Squad. They were delivery pizza last week.
Firefox is great at initially blocking crap in the first place. For ultimate protection, use one of these.

[Boris]

I tried firefox a while ago but never got the benefits.
To me they all work about the same.

I downloaded this thing my self when I was trying to get some radio shows I missed lately and one file was corrupted.
The problem is that I can't seam to find the location of the f-ing trojan.


If all fails I'll reformat.

[Dirtybird]

I was gonna say. I hate stds :haha:

[JC15 :aka Josh:]

instead of healing a virus with AVG, move it to the virus vault.

I'm playing with a similar trojan right now.

[JC15 :aka Josh:]

So far AVG isn't busting these IE pop up programs, and Adaware didn't find anything either. I'm trying the trend micro house call right now to see if that finds it.

[Boris]

Moved all my files to the back up drive and am about to pull the plug on the drive.

Must eat something first as this will take a while.


Last time I had shait like this was about 2 years ago and I'm not looking forward to going through all this again.

[JC15 :aka Josh:]

The trend Micro House call found EVERY problem, but the machine I'm playing with is REALLY slow, so I can't get the trend micro house call page to remove them without locking up.

you may want to try house call before you kill the HD.

[Boris]

Hell yes.

anything would be better than the hours of installing all the drivers and stuff.

[h2odesperado]

google security tango and try that. I had to do it once. Its this whole process. Takes a while but when you're done you should be clean.

Did you try googling the name of the virus? I've done that and I was able to find a specific program to remove it.

[JC15 :aka Josh:]

trendmicro.com

and it worked just fine. I had too many process going (trying to analyze the trojan), so I rebooted and tried again.

[surferdude345]

I have kapersky not cheap but the best clean-up/virus protection i have used

[JC15 :aka Josh:]

kapersky is good. I thought AOL was branding Kapersky as thier own and giving it away free for a while.

[2nd nature]

any more links to get rid of it im dealing with trojan on my computer.

[Peter123]

I got infected by a trojan.

Hmmm, and you would have thought that a Trojan would have used a condom.

[Boris]

Hmmm, and you would have thought that a Trojan would have used a condom.

Screw the condom, the "no lube" part hurt the most.

I tried several sweeps and each found parts of the problem but never the original program.
So I reformatted the drive and now all is well.


These trojans are getting better at hiding so from now on I'll just use the system restore or just reformat.

F-viruses.

[Peter123]

If I were rich and didn't have to work, I'd infiltrate one of these hacker groups and find out where they all lived.

If they had a nice yard, one night I'd dump rock salt throughout it and leave a note saying "Beware the doesn't your yard look like crap virus".

If they had a nice car, one night the tires would be slashed and there would be sugar in the gas tank. Note - "You've been infected with the walking your a$$ to the store virus".

You get the point. Let them see what it feels like to have anonymous people screw up there stuff.

[keefer]

Whenever I have encountered trojans I usually could find them and initially fix them with various utilities but they would always come back because the are set to start or respawn with windows. I had to run the PC in safe mode and find / fix with a removal tool and then while still in safe mode I used "Hijack This" to find the entry in the registry and remove it. Use "Hijack This" with caution as you can remove entries that are vital to windows starting properly. Read the help files and this will probably solve the nasty trojan from coming back,

[JC15 :aka Josh:]

Screw the condom, the "no lube" part hurt the most.

I tried several sweeps and each found parts of the problem but never the original program.
So I reformatted the drive and now all is well.


These trojans are getting better at hiding so from now on I'll just use the system restore or just reformat.

F-viruses.

I still have this virus. My little bro picked it up at almost the same time, and he is 200 miles away.

The virus keeps replicating and making pops ups. After I nuke the virus, it seems to come back after a while, less than an hour.

So... Looks like I'm gonna do that Ubuntu upgrade early :)

Also, I found the phone number of one of the companies that had pop up ads on my computer. As soon as I find out where there offices are, I'm gonna pretty much make an example out of them.

[goXtreme]

I still have this virus. My little bro picked it up at almost the same time, and he is 200 miles away.

The virus keeps replicating and making pops ups. After I nuke the virus, it seems to come back after a while, less than an hour.

So... Looks like I'm gonna do that Ubuntu upgrade early :)

Also, I found the phone number of one of the companies that had pop up ads on my computer. As soon as I find out where there offices are, I'm gonna pretty much make an example out of them.

Sick 'em!!!!!!!!!!!!!!

Let us know the progress, this might be kinda interesting.

:popcorn: :popcorn: :popcorn: :popcorn: :popcorn: :popcorn:

[JC15 :aka Josh:]

The trojan is called smitfraud-c.toolbar888

Here is the link to directions on how you might be able to get rid of it.

http://forums.spybot.info/showthread.php?t=14046


By the way, the only program that detected it was Spybot Search and Destroy. A program I have HATED, but apparently is proving to be a good program with good support!