Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Problem With Trojan Need Help

  • Please log in to reply
3 replies to this topic

#1 melissa5244


  • Members
  • 4 posts
  • Local time:10:44 AM

Posted 31 March 2006 - 05:31 PM

I have a trojan called fakealert-b and cant seem to get rid of it have tried and tried since last night and when i try to clean, delete or quarantine it with my mcfee program it tells me to make sure its not write protected its in my win32 program somewhere and i cant find it can someone help me

BC AdBot (Login to Remove)


#2 Klinkaroo


  • Members
  • 1,139 posts
  • Gender:Male
  • Location:British Columbia, Canada
  • Local time:07:44 AM

Posted 31 March 2006 - 05:47 PM

I think this is posted in the wrong place you should try "Am I infected? What do I do?".

#3 Enthusiast


  • Members
  • 5,898 posts
  • Location:Florida, USA
  • Local time:10:44 AM

Posted 31 March 2006 - 07:06 PM

Use the following two web based trojan scans:

Sygate Trojanscan

Windows Security Trojanscan
See instructions for it here:


Run both Adaware and Spybot Search and Destroy from safe mode, updating each program before you scan and setting both to fix what they find.

*AdAware SE: http://www.majorgeeks.com/download506.html

*Spybot S&D: http://www.safer-networking.org/en/index.html

Following that that I suggest you post a “HijackThis” log for expert assistance with your problem.

Read the pinned post in our “HijackThis” forum, here
Carefully read and follow all directions explicitly.

Following instructions run a log, and post it in following HJT forum,
at this link. Include a brief description of your computer (ie, processor, amount of RAM, brand or motherboard, etc, and the problem you are experiencing.)

Unless you are expert at editing the registry, Do not as yet attempt to fix anything by yourself using Hijack This as even what may seem to be a small mistake can render your op system inoperable.
Some files when in one folder may be fine while in another may be malware.

A member of our HJT Team will analyze your log, make recommendations and offer assistance.

It may take a period of time to get a response to the log you posted because the members of our HJT Team are kept very busy.
Please be patient as this team is manned by volunteers. They will help you in order received as soon as possible.

Once you have posted your HJT log, please DO NOT make any additional posts in the HJT forum thread you created until you get a response from a member of our HJT expert team, and do not make any changes to your system (changes, including any attempted repairs, will make it different than displayed in the log you posted and therefore make your log inaccurate).

The first criteria they have when looking for logs that need replies are posts showing 0 replies. If you make an additional post, it will show as having 1 reply.
A team member, looking for a new log to work on might well assume another HJT Team member is already assisting you and might not open the thread to respond.

So, make your post and wait for a response from a team member.

Edited by Enthusiast, 31 March 2006 - 07:08 PM.

#4 petetacoma


  • Members
  • 3 posts
  • Local time:08:44 AM

Posted 07 April 2006 - 04:53 AM

my virus scan cleaned the PWS-WebMoney.gen trojan .... but every time I start IE it keeps coming back and virus scan cleans it again
it looks like there is something in the IE that triggers that ...
my firewall can not trace the IP where it is coming from so I can not ban the address

please help me

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users