WinXPTalk.com

Aquaboy · Guest

Somehow managed to get a trojan virus on my computer that tries to re-install
at reboot. McAfee picks it up and deletes it but have not been able to
remove the tag. Upon startup I get "svchost.exe application error." McAfee
then pops up and says "spytofger.dll" trojan found and deleted. I searched
the web and found this solution at
www.sophos.com/virusinfo/analyses/trojtofgeraw.html but am not sure about
altering registry. Anyone hlep with this.

Thanks

David H. Lipman · Guest

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.scripting.virus.discussion
microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

1) Download the following two items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt325.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM .

2) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode then shutdown as many applications as possible.
4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) Create a new Restore point
9) Please report back your results

Dave

--
Dave

"Aquaboy" <Aquaboy@discussions.microsoft.com> wrote in message
news:E212C176-4374-4B1C-BCA5-8044B874D421@microsoft.com...
| Somehow managed to get a trojan virus on my computer that tries to re-install
| at reboot. McAfee picks it up and deletes it but have not been able to
| remove the tag. Upon startup I get "svchost.exe application error." McAfee
| then pops up and says "spytofger.dll" trojan found and deleted. I searched
| the web and found this solution at
| www.sophos.com/virusinfo/analyses/trojtofgeraw.html but am not sure about
| altering registry. Anyone hlep with this.
|
| Thanks

Carey Frisch [MVP] · Guest

There is a very helpful virus removal newsgroup you may wish to post to:
news://msnews.microsoft.com/microsoft.public.security.virus

Symantec Security Check
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Virus Removal Tools
http://securityresponse.symantec.com/avcenter/tools.list.html

Online Virus Removal Tutorials
http://www.symantec.com/techsupp/virusremoval/virusremoval_info_tutorial.html

3 Simple Steps to Insure the Security of Your PC
http://www.microsoft.com/athome/security/protect/default.aspx

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

---------------------------------------------------------------------------------------------

"Aquaboy" wrote:

| Somehow managed to get a trojan virus on my computer that tries to re-install
| at reboot. McAfee picks it up and deletes it but have not been able to
| remove the tag. Upon startup I get "svchost.exe application error." McAfee
| then pops up and says "spytofger.dll" trojan found and deleted. I searched
| the web and found this solution at
| www.sophos.com/virusinfo/analyses/trojtofgeraw.html but am not sure about
| altering registry. Anyone hlep with this.
|
| Thanks

	WinXPTalk.com Forum Index -> Security	All times are GMT
Page 1 of 1