want to get rid of this trojan desperately.

[John]

Hi all,

My XP SP2 professioanl got this trojan as this link indicated.

http://www.symantec.com/security_response/writeup.jsp?docid=2007-050812-3659-99&tabid=1

It constantly sent me fake messages and drive me crazy. I used symantec
Norton to do a full scan and could not find anything. then I used spybot
and adware to scan which were able to find them and removed them. But, the
fake messages still on the screen constantly. so, I booted to safe mode and
try to use adware, norton to remove and the fake messages still show up. I
do not not which product can remove them? Can anyone help?

Thank you.

 

[Tom [Pepper] Willett]

Re: want to get rid of this trojan desperately.

Did you follow all the instructions given on the Symantec page, including
cleaning out the registry?

"John" <John@discussions.microsoft.com> wrote in message
news31506B5-745D-449F-A947-435F285C7FFB@microsoft.com...
: Hi all,
:
: My XP SP2 professioanl got this trojan as this link indicated.
:
:
http://www.symantec.com/security_response/writeup.jsp?docid=2007-050812-3659-99&tabid=1
:
: It constantly sent me fake messages and drive me crazy. I used symantec
: Norton to do a full scan and could not find anything. then I used spybot
: and adware to scan which were able to find them and removed them. But,
the
: fake messages still on the screen constantly. so, I booted to safe mode
and
: try to use adware, norton to remove and the fake messages still show up.
I
: do not not which product can remove them? Can anyone help?
:
: Thank you.

 

[John]

Re: want to get rid of this trojan desperately.

yes. I do not have all registry mentioned in the article.

"Tom [Pepper] Willett" wrote:

> Did you follow all the instructions given on the Symantec page, including
> cleaning out the registry?
>
> "John" <John@discussions.microsoft.com> wrote in message
> news31506B5-745D-449F-A947-435F285C7FFB@microsoft.com...
> : Hi all,
> :
> : My XP SP2 professioanl got this trojan as this link indicated.
> :
> :
> http://www.symantec.com/security_response/writeup.jsp?docid=2007-050812-3659-99&tabid=1
> :
> : It constantly sent me fake messages and drive me crazy. I used symantec
> : Norton to do a full scan and could not find anything. then I used spybot
> : and adware to scan which were able to find them and removed them. But,
> the
> : fake messages still on the screen constantly. so, I booted to safe mode
> and
> : try to use adware, norton to remove and the fake messages still show up.
> I
> : do not not which product can remove them? Can anyone help?
> :
> : Thank you.
>
>
>

 

[PA Bear]

Re: want to get rid of this trojan desperately.

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.org/

John wrote:
> Hi all,
>
> My XP SP2 professioanl got this trojan as this link indicated.
>
> http://www.symantec.com/security_response/writeup.jsp?docid=2007-050812-3659-99&tabid=1
>
> It constantly sent me fake messages and drive me crazy. I used symantec
> Norton to do a full scan and could not find anything. then I used spybot
> and adware to scan which were able to find them and removed them. But,
> the
> fake messages still on the screen constantly. so, I booted to safe mode
> and
> try to use adware, norton to remove and the fake messages still show up.
> I
> do not not which product can remove them? Can anyone help?
>
> Thank you.

 

[Gerry]

Re: want to get rid of this trojan desperately.

John

I think Tom is specifically referring to this page:
http://www.symantec.com/security_response/writeup.jsp?docid=2007-050812-3659-99&tabid=3

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
John wrote:
> Hi all,
>
> My XP SP2 professioanl got this trojan as this link indicated.
>
> http://www.symantec.com/security_response/writeup.jsp?docid=2007-050812-3659-99&tabid=1
>
> It constantly sent me fake messages and drive me crazy. I used
> symantec Norton to do a full scan and could not find anything. then
> I used spybot and adware to scan which were able to find them and
> removed them. But, the fake messages still on the screen constantly.
> so, I booted to safe mode and try to use adware, norton to remove and
> the fake messages still show up. I do not not which product can
> remove them? Can anyone help?
>
> Thank you.

 

[wheelman]

Re: want to get rid of this trojan desperately.

i just seen this.i know its old..but awhile back,i had these fake
trojans/malware..comeing in to my computer.drove me crazy.i think microsoft
was leting these come in.you clicked on the little blinking box and it took
you to this companys program.you buy it and they would get rid of the fake
trojan they installed on your computer.i bet uncle billy,was geting a cut of
that money.too many people finally complained and mal ware fix came out.i
tried to find out how to fix this.i searched and searched.no one knew what to
do.i finally figured it out.simple.system restore.go back.to a time when the
fake trojan was not around.it fixes the problem.i do manual restore points
since then..they install as an exe.so norton was missing them.hope this helps
some one..

"PA Bear" wrote:

> Unexplained computer behavior may be caused by deceptive software
> http://support.microsoft.com/kb/827315
>
> Run a /thorough/ check for hijackware, including posting your hijackthis log
> to an appropriate forum.
>
> Checking for/Help with Hijackware
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://aumha.net/viewtopic.php?t=5878
> http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://defendingyourmachine2.blogspot.com/
> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>
> When all else fails, HijackThis v2.0.2
> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
> It will help you to both identify and remove any hijackware/spyware with
> assistance from an expert. **Post your log to
> http://forums.spybot.info/forumdisplay.php?f=22,
> http://castlecops.com/forum67.html,
> http://forums.subratam.org/index.php?showforum=7,
> http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
> analysis, not here.**
>
> If the procedures look too complex - and there is no shame in admitting this
> isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>
> --
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (IE, OE, Security, Shell/User)
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.org/
>
> John wrote:
> > Hi all,
> >
> > My XP SP2 professioanl got this trojan as this link indicated.
> >
> > http://www.symantec.com/security_response/writeup.jsp?docid=2007-050812-3659-99&tabid=1
> >
> > It constantly sent me fake messages and drive me crazy. I used symantec
> > Norton to do a full scan and could not find anything. then I used spybot
> > and adware to scan which were able to find them and removed them. But,
> > the
> > fake messages still on the screen constantly. so, I booted to safe mode
> > and
> > try to use adware, norton to remove and the fake messages still show up.
> > I
> > do not not which product can remove them? Can anyone help?
> >
> > Thank you.
>
>

 

[PA Bear]

Re: want to get rid of this trojan desperately.

I want some of what you're smoking, WM.

wheelman wrote:
> i just seen this.i know its old..but awhile back,i had these fake
> trojans/malware..comeing in to my computer.drove me crazy.i think
> microsoft
> was leting these come in.you clicked on the little blinking box and it
> took
> you to this companys program.you buy it and they would get rid of the fake
> trojan they installed on your computer.i bet uncle billy,was geting a cut
> of
> that money.too many people finally complained and mal ware fix came out.i
> tried to find out how to fix this.i searched and searched.no one knew what
> to do.i finally figured it out.simple.system restore.go back.to a time
> when
> the fake trojan was not around.it fixes the problem.i do manual restore
> points since then..they install as an exe.so norton was missing them.hope
> this helps some one..
>
> "PA Bear" wrote:
>
>> Unexplained computer behavior may be caused by deceptive software
>> http://support.microsoft.com/kb/827315
>>
>> Run a /thorough/ check for hijackware, including posting your hijackthis
>> log to an appropriate forum.
>>
>> Checking for/Help with Hijackware
>> http://aumha.org/a/parasite.htm
>> http://aumha.org/a/quickfix.htm
>> http://aumha.net/viewtopic.php?t=5878
>> http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://defendingyourmachine2.blogspot.com/
>> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>>
>> When all else fails, HijackThis v2.0.2
>> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
>> It will help you to both identify and remove any hijackware/spyware with
>> assistance from an expert. **Post your log to
>> http://forums.spybot.info/forumdisplay.php?f=22,
>> http://castlecops.com/forum67.html,
>> http://forums.subratam.org/index.php?showforum=7,
>> http://aumha.net/viewforum.php?f=30, or other appropriate forums for
>> expert
>> analysis, not here.**
>>
>> If the procedures look too complex - and there is no shame in admitting
>> this isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>>
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-Windows (IE, OE, Security, Shell/User)
>> AumHa VSOP & Admin http://aumha.net
>> DTS-L http://dts-l.org/
>>
>> John wrote:
>>> Hi all,
>>>
>>> My XP SP2 professioanl got this trojan as this link indicated.
>>>
>>> http://www.symantec.com/security_response/writeup.jsp?docid=2007-050812-3659-99&tabid=1
>>>
>>> It constantly sent me fake messages and drive me crazy. I used symantec
>>> Norton to do a full scan and could not find anything. then I used
>>> spybot
>>> and adware to scan which were able to find them and removed them. But,
>>> the
>>> fake messages still on the screen constantly. so, I booted to safe mode
>>> and
>>> try to use adware, norton to remove and the fake messages still show up.
>>> I
>>> do not not which product can remove them? Can anyone help?
>>>
>>> Thank you.

 

[wheelman]

Re: want to get rid of this trojan desperately.

i dont want nothing to do with what you are smokeing or drinking or
takeing..i just gave the guy.the answer to get rid of fake trojans..it works
and its easy to do..

"PA Bear" wrote:

> I want some of what you're smoking, WM.
>
> wheelman wrote:
> > i just seen this.i know its old..but awhile back,i had these fake
> > trojans/malware..comeing in to my computer.drove me crazy.i think
> > microsoft
> > was leting these come in.you clicked on the little blinking box and it
> > took
> > you to this companys program.you buy it and they would get rid of the fake
> > trojan they installed on your computer.i bet uncle billy,was geting a cut
> > of
> > that money.too many people finally complained and mal ware fix came out.i
> > tried to find out how to fix this.i searched and searched.no one knew what
> > to do.i finally figured it out.simple.system restore.go back.to a time
> > when
> > the fake trojan was not around.it fixes the problem.i do manual restore
> > points since then..they install as an exe.so norton was missing them.hope
> > this helps some one..
> >
> > "PA Bear" wrote:
> >
> >> Unexplained computer behavior may be caused by deceptive software
> >> http://support.microsoft.com/kb/827315
> >>
> >> Run a /thorough/ check for hijackware, including posting your hijackthis
> >> log to an appropriate forum.
> >>
> >> Checking for/Help with Hijackware
> >> http://aumha.org/a/parasite.htm
> >> http://aumha.org/a/quickfix.htm
> >> http://aumha.net/viewtopic.php?t=5878
> >> http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
> >> http://mvps.org/winhelp2002/unwanted.htm
> >> http://inetexplorer.mvps.org/data/prevention.htm
> >> http://inetexplorer.mvps.org/tshoot.html
> >> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> >> http://defendingyourmachine2.blogspot.com/
> >> http://www.elephantboycomputers.com/page2.html#Removing_Malware
> >>
> >> When all else fails, HijackThis v2.0.2
> >> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
> >> It will help you to both identify and remove any hijackware/spyware with
> >> assistance from an expert. **Post your log to
> >> http://forums.spybot.info/forumdisplay.php?f=22,
> >> http://castlecops.com/forum67.html,
> >> http://forums.subratam.org/index.php?showforum=7,
> >> http://aumha.net/viewforum.php?f=30, or other appropriate forums for
> >> expert
> >> analysis, not here.**
> >>
> >> If the procedures look too complex - and there is no shame in admitting
> >> this isn't your cup of tea - take the machine to a local, reputable and
> >> independent (i.e., not BigBoxStoreUSA) computer repair shop.
> >>
> >> --
> >> ~Robear Dyer (PA Bear)
> >> MS MVP-Windows (IE, OE, Security, Shell/User)
> >> AumHa VSOP & Admin http://aumha.net
> >> DTS-L http://dts-l.org/
> >>
> >> John wrote:
> >>> Hi all,
> >>>
> >>> My XP SP2 professioanl got this trojan as this link indicated.
> >>>
> >>> http://www.symantec.com/security_response/writeup.jsp?docid=2007-050812-3659-99&tabid=1
> >>>
> >>> It constantly sent me fake messages and drive me crazy. I used symantec
> >>> Norton to do a full scan and could not find anything. then I used
> >>> spybot
> >>> and adware to scan which were able to find them and removed them. But,
> >>> the
> >>> fake messages still on the screen constantly. so, I booted to safe mode
> >>> and
> >>> try to use adware, norton to remove and the fake messages still show up.
> >>> I
> >>> do not not which product can remove them? Can anyone help?
> >>>
> >>> Thank you.
>
>

 

[PA Bear]

Re: want to get rid of this trojan desperately.

Though the machine may behave better after doing so, System Restore does NOT
remove most hijackware/Trojans.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.org/

wheelman wrote:
> i dont want nothing to do with what you are smokeing or drinking or
> takeing..i just gave the guy.the answer to get rid of fake trojans..it
> works
> and its easy to do..
>
> "PA Bear" wrote:
>
>> I want some of what you're smoking, WM.
>>
>> wheelman wrote:
>>> i just seen this.i know its old..but awhile back,i had these fake
>>> trojans/malware..comeing in to my computer.drove me crazy.i think
>>> microsoft
>>> was leting these come in.you clicked on the little blinking box and it
>>> took
>>> you to this companys program.you buy it and they would get rid of the
>>> fake
>>> trojan they installed on your computer.i bet uncle billy,was geting a
>>> cut
>>> of
>>> that money.too many people finally complained and mal ware fix came
>>> out.i
>>> tried to find out how to fix this.i searched and searched.no one knew
>>> what
>>> to do.i finally figured it out.simple.system restore.go back.to a time
>>> when
>>> the fake trojan was not around.it fixes the problem.i do manual restore
>>> points since then..they install as an exe.so norton was missing
>>> them.hope
>>> this helps some one..
>>>
>>> "PA Bear" wrote:
>>>
>>>> Unexplained computer behavior may be caused by deceptive software
>>>> http://support.microsoft.com/kb/827315
>>>>
>>>> Run a /thorough/ check for hijackware, including posting your
>>>> hijackthis
>>>> log to an appropriate forum.
>>>>
>>>> Checking for/Help with Hijackware
>>>> http://aumha.org/a/parasite.htm
>>>> http://aumha.org/a/quickfix.htm
>>>> http://aumha.net/viewtopic.php?t=5878
>>>> http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
>>>> http://mvps.org/winhelp2002/unwanted.htm
>>>> http://inetexplorer.mvps.org/data/prevention.htm
>>>> http://inetexplorer.mvps.org/tshoot.html
>>>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>>>> http://defendingyourmachine2.blogspot.com/
>>>> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>>>>
>>>> When all else fails, HijackThis v2.0.2
>>>> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to
>>>> use.
>>>> It will help you to both identify and remove any hijackware/spyware
>>>> with
>>>> assistance from an expert. **Post your log to
>>>> http://forums.spybot.info/forumdisplay.php?f=22,
>>>> http://castlecops.com/forum67.html,
>>>> http://forums.subratam.org/index.php?showforum=7,
>>>> http://aumha.net/viewforum.php?f=30, or other appropriate forums for
>>>> expert
>>>> analysis, not here.**
>>>>
>>>> If the procedures look too complex - and there is no shame in admitting
>>>> this isn't your cup of tea - take the machine to a local, reputable and
>>>> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>>>>
>>>> --
>>>> ~Robear Dyer (PA Bear)
>>>> MS MVP-Windows (IE, OE, Security, Shell/User)
>>>> AumHa VSOP & Admin http://aumha.net
>>>> DTS-L http://dts-l.org/
>>>>
>>>> John wrote:
>>>>> Hi all,
>>>>>
>>>>> My XP SP2 professioanl got this trojan as this link indicated.
>>>>>
>>>>> http://www.symantec.com/security_response/writeup.jsp?docid=2007-050812-3659-99&tabid=1
>>>>>
>>>>> It constantly sent me fake messages and drive me crazy. I used
>>>>> symantec
>>>>> Norton to do a full scan and could not find anything. then I used
>>>>> spybot
>>>>> and adware to scan which were able to find them and removed them.
>>>>> But,
>>>>> the
>>>>> fake messages still on the screen constantly. so, I booted to safe
>>>>> mode
>>>>> and
>>>>> try to use adware, norton to remove and the fake messages still show
>>>>> up.
>>>>> I
>>>>> do not not which product can remove them? Can anyone help?
>>>>>
>>>>> Thank you.