Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I'm Hit With A Trojan And Can't Remove It


  • Please log in to reply
2 replies to this topic

#1 Tempest1961

Tempest1961

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Location:San Raphael, Trinidad
  • Local time:09:54 PM

Posted 23 October 2006 - 06:55 AM

PC-Cillin has advised me that my"winmfu.32.dll" file has a Troj_AGENT.flo virus. It couldnt quarantine nor delete the file. So i tried to delete it myself. That did not work as Access to the file was denied.

I decided then that the most appropriate step would be to reboot my system with the XP cd. That I am having problems with as follows:

(1) The CD drive is not allowing a reboot as I get the message - "STrike F1 to retry reboot or go to F2 for setup
(2) When I start the system normal and then try to run setup from the CD, my message is - "CAnt continue, version of XP on system is newer than the CD" This is because the system is running SErvice Pack 2 while the CD has SErvice Pack 1. I had it reinstalled a few weeks ago when it crashed and the guy did not use my cd.

What can I do to bypass this.

BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:09:54 PM

Posted 23 October 2006 - 07:14 AM

There are several ways to delete this file (but it won't necessarily fix all the problems or remove the entire infection).

1) Use a free program like KillBox or Eraser to delete the file on reboot.
2) Go into the security settings for the file, take ownership of it, then give yourself Full Control permissions. Then it should delete for you.
3) Try this free, online scan that has proven to be pretty reliable: http://safety.live.com/
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:08:54 PM

Posted 23 October 2006 - 08:20 AM

After you run the Windows OneCare scan as usasma advised, run the following scans using Internet Explorer.
Allow the Active X download when prompted:

Trojan scans
Sygate Trojanscan
http://scan.sygatetech.com/pretrojanscan.html

Windows Security Trojanscan
http://windowsecurity.com/trojanscan
See instructions for it here:
http://www.windowsecurity.com/trojanscan/trojanscan.asp

Parasite scan from Aumha:
http://www.aumha.org/a/noads.php
or here:
http://www.aumha.org/win5/a/noads2.htm




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users