Page 1 of 2
Help. trojaned
Posted: Fri Apr 13, 2007 3:38 pm
by ian.stewart
Boff question, I have got a trojan in my PC at the moment
Runs under the name of "Windows Safety Alert" I have tried to remove the programme, but it will not let me, so I have gone down the usual Macafee, Spybot, and Smitfraudfix routes and they have failed to remove the fooker, last week I am pretty certain there was another trojan running "Asafetyproject" which appears to have been deleted, are they related??
How the thing was downloaded, I dont know, I assume it was one of the kids, but its being a real pain in the butt ro remove, HELP
Posted: Fri Apr 13, 2007 3:58 pm
by katanaman
try this
http://help.lockergnome.com/windows/win ... 61512.html if not let me know as I have more suggestions.
Posted: Fri Apr 13, 2007 5:11 pm
by HairbearTE
Some of that crap hides in the registry, be careful if you're deleting files from there. I got "Spy Doctor" running on my PC for a couple of years now and its very good imo.
Posted: Fri Apr 13, 2007 5:24 pm
by IainB
Ian,
Have you tried deleting this in safe mode?
If its XP, rolling back to a 'cleaner' version?
Posted: Fri Apr 13, 2007 5:54 pm
by GreenV8S
If your machine has been compromised then unless you believe you are smarter than the guy who wrote the virus, the only safe remedy is to reinstall everything from scratch. You'll often find that one infection is used to install others; even if you find one, there's no realistic way to be sure you've got them all.
Posted: Fri Apr 13, 2007 6:23 pm
by JP.
Aaaaaaaaaaaaaa got that one a month ago, came with an audio download and even Norton Internet Security 2007 did do nothing....
XP's system recovery didn't work anymore also.
Took me twelf hours to get rid of it.....................
By fckn FORMAT C
And again two days to get my system on line ( by luck I make backups all the time on a second harddisk)
Good luck
Posted: Fri Apr 13, 2007 6:45 pm
by HairbearTE
Usually a quick search of the net will find you a solution. Often you will find detailed step by step procedures to follow that will enable you to delete viruses. The problem is that these procedures themselves often assume you are an all knowing PC boffin yourself! I had plenty of fun with the "about: blank" virus a while back. I tried for 3 days to remove it and couldn't, only my brother was able to remove it (he's an IT bod).
Posted: Fri Apr 13, 2007 9:07 pm
by kev_the_mole
Ian,
buy the kids a cheap PC and keep them off yours! It's the only way to stop this sort of thing happening again. When my kids PC last stopped we removed 326 seperate pieces of spyware and 70-odd viruses. I have a laptop and their PC is their own problem except of course when it goes wrong.
Ian
Posted: Fri Apr 13, 2007 11:42 pm
by katanaman
GreenV8S wrote:If your machine has been compromised then unless you believe you are smarter than the guy who wrote the virus, the only safe remedy is to reinstall everything from scratch. You'll often find that one infection is used to install others; even if you find one, there's no realistic way to be sure you've got them all.
Oh come on reinstall is only if its completely knackered lol. I know I do this for a living so this kind of thing just makes me role my sleeves up but there is no reason why nobody else could do it. There are many tools out there that get rid of this kind of stuff, hijackthis being one of the best although its more fun hunting them down manually.
Posted: Sat Apr 14, 2007 11:42 am
by GreenV8S
katanaman wrote:Oh come on reinstall is only if its completely knackered lol. I know I do this for a living
I don't do it for a living, but I spend *far* too much time fixing systems including a great many that people have had a go at fixing themselves and got in a right mess. If you're willing and able to roll your sleeves up, get down into the bowels of the system and sort out boot cylinders, root kits, registry, infected files etc then you can spend your time doing that and if you're good enough you'll get there eventually. It will usually be quicker to reinstall though, and it will definitely cure it whereas repairing the existing installation may or may not.
A clean install also does the system good imo, it removes the debris left behind from adding and removing applications and patches, the system usually ime runs noticeably faster afterwards.
Posted: Sat Apr 14, 2007 9:12 pm
by katanaman
In an ideal world yes reinstall is quick, I can do it at the work in around 15 mins because I have an image of every pc. However at home people seldom have their data separate from the OS so a reinstall is a no no unless they want to loose everything. Besides what we are on about here is a trojan so it wont have done major damage if any to the OS. I once spoke to a tech at Edinburgh university who reinstalled every pc they had because of MS blast where in reality once understood it took about 5 mins to sort it out. It was even possible to sort it out with a bit of VB script on the active directory. What should have taken him a day or two to sort out took three weeks.
Anyway how are you getting on with it Ian?
Posted: Sat Apr 14, 2007 9:18 pm
by Coops
I use to suffer from these sort of problems with my PC.
i had tried norton, etc with no luck,
went over to AVG and touch wood been ok for the past 2.5 yrs now
Posted: Sun Apr 15, 2007 12:06 am
by ian.stewart
katanaman wrote:In an ideal world yes reinstall is quick, I can do it at the work in around 15 mins because I have an image of every pc. However at home people seldom have their data separate from the OS so a reinstall is a no no unless they want to loose everything. Besides what we are on about here is a trojan so it wont have done major damage if any to the OS. I once spoke to a tech at Edinburgh university who reinstalled every pc they had because of MS blast where in reality once understood it took about 5 mins to sort it out. It was even possible to sort it out with a bit of VB script on the active directory. What should have taken him a day or two to sort out took three weeks.
Anyway how are you getting on with it Ian?
I was fortunate enough to have a mate round this afternoon who runs another web site, mentioned the problem to him, and off he went running a scan, took 2.5 hours to run the scan, but it appears to have worked, I was able to manually remove the trojan, in fact I had 2 trojans running, I cant beleive how fast the thing is now, thanks for the help chaps, BTW I dont have a clue what he set up to run, and I cant find it im the computer, so I will ask him tomorrow what it was he ran,----------- Just found it, Noadware.
Posted: Sun Apr 15, 2007 11:50 am
by Coops
You got a link Ian?
i downloaded one from noadware.net and it scanned my machine said i got 34 and to remove i have to pay

Posted: Sun Apr 15, 2007 12:10 pm
by katanaman

is your friend
http://www.2007noadware.net/
Glad you got it sorted out Ian