Posted 07 April 2009 - 09:02 PM
Please forgive my ignorance here, and please let me know if I'm posting in the wrong location. A friend recommended posting here for help.
Basically, I think that I was infected with a trojan. I'm thinking that it is now removed, but am not sure of the damage it may have caused. My scans are coming up clean, but there continues to be suspicious activity. Below is the sequence of events:
1. I get a warning from Avira that TR/Dropper.gen has been detected. I select quarantine, and then my computer starts freezing frequently and seemingly randomly. I can't remember if it was Avira or another scanner, but it was also once identified as mal/sinowa -A.
2. After multiple runs of both Avira and Webroot, I'm getting a detected trojan, but neither can remove the offender.
3. I try multiple free online virus scans, but the only one that seems to work is f-secure, which successfully removes the trojan. Somewhere around this time, every time I open IE or Windows Explorer, Windows Installer comes up asking me to insert my disc for Microsoft Money 2003.
4. After removal, the computer continues to act strangely. Freezing randomly, and hard shutdowns automatically reboot the computer, instead of just shutting it down, as I would expect. I decide that I should go through my msconfig file as well as "add/remove programs" in the control panel and remove items I no longer need, as well as anything suspicious. I used a website providing information on what was in the msconfig file to make my decisions. I can't remember which one it was, but it seemed basic and trustworthy (and familiar, I think I've used it before). I bring this up mainly because I uninstalled multiple HP printer options. After one of my hard shutdowns / reboots, I noticed that the printers were back. I'm not sure if it's possible to force system restores, or if this is a simple case of an uninformed user removing a program incompletely, but thought this could be important.
5. Several of the times I attempt to restart the computer, I get a blue screen forcing "check disk" to run. After I get back into Windows, I get a message that states that "The system has recovered from a major error". Sorry, but I don't have a screenshot.
6. I've run several scans using Webroot, Avira, and Zone Alarm. Each time, the computer either freezes or comes up clean.
I'm not sure if I'm still infected, or if the trojan did damage that is now evident. I've got some files on my machine that I'd like to save if at all possible (photos that can't be replaced). I've copied some of these to an external drive, but I suppose the health of that drive is a separate question.
Please let me know if you have any thoughts on what my problem may be, or how I should proceed.