Assistance from comp boffins needed

[Buckledmac]

i currently have 2 trojans & 1 script fucking up my laptop royally

my virus software detects and deletes them but when i reboot they are back again

now im getting errors on start up telling me parts of the registry are missing


in a word HELP

[Alf uckem]

http://www.strangecosmos.com/images/content/112492.jpg

sorry i wasnt helpful

[Kloaked Spirit]

www.moosoft.com - Just get the trial version, but it's one of the better trojan cleaners out there. Get rid of the trojans first, and then work on the virus.

[Buckledmac]

thanx KS i'll give it a whirl

[Nickything]

Kaspersky has the best trojan detection rate of any AV, I think they now do an online scan too if you go to their site.. google it

[Buckledmac]

thanx nicky, i'll give that a blast too

[Jacx]

i currently have 2 trojans & 1 script fucking up my laptop royally

my virus software detects and deletes them but when i reboot they are back again

now im getting errors on start up telling me parts of the registry are missing


in a word HELP


name and shame them...that way we got far better chance of helping u, sometimes its a simple thing that removal programs just cannot do

[Nickything]

Oh and anything you do use to get rid of it, TURN OFF System Restore, reboot then run the tool. A lot of people get hit and hit again by not doing that. If you get messages saying things like xxxx file cannot be deleted as it is in use or whatever, reboot into safe mode and run the tool there. Once done reboot again and turn system restore back on.

[Buckledmac]

excellent, thanx again nicky

jacx i'll be right back with names to shame LOL


***edit***

W32/NoChad@MM

TR/kilwin.BL


^^ thats the 2 motha fukas

[Jacx]

http://securityresponse.symantec.com/avcenter/venc/data/w32.chod@mm.html

TR/kilwin.BL
u sure...i cannot find nothing on that on a few sites i tried


BL: Third party blocked sender server Numerical IP address or
canonical name of a third party BL:ie: spl.spamhaus.org

oh i think thats a new one...oooooohhhhhhuuuuuuurrrrrrffffffuuuuccckkkedd


what anti virus u using

[Buckledmac]

that wot it says mate :(

[steff]

Boot your computer up in safe mode then run the antivirus stuff. That worked for me anyway and mine were self fixing and disabled and corrupted my firewall and stuff.

[CrayZii-InDiaN]

as steff said.. go through safemode and do a scan or dissconnect from the net and do it so at that time no ports are being openned or if you are running XP go back the day before this thing happened.. do all your backups thow....

[Dymond]

http://securityresponse.symantec.com/avcenter/venc/data/w32.chod@mm.html

TR/kilwin.BL
u sure...i cannot find nothing on that on a few sites i tried


I was helping Simon too and had no luck excpet for a few sites in german I believe.

[Davecat]

All this talk about kaspersky... its rated 2nd best in all the tests and is what i use... if you can get a hold of a copy Arcavir is the mutts nuts...

[Buckledmac]

silly question maybe but how do i enter safe mode?

<insert huge red faced smillie here>

[Davecat]

It's a bit of a random science... i find hammering the F8 key repeatedly while botting up usually does it brings up a menu and then you select safe mode :w00t2:

[Dymond]

silly question maybe but how do i enter safe mode?

<insert huge red faced smillie here>

Start cranking that key pretty early but F8 is the one you need.

[Buckledmac]

thanx bong & D, i'll try when i get home

[Jacx]

If you got Xp, then go to Start and click Run.


the lil run box will open and you need to enter: msconfig
and press ok.

The system Config box will now show.

Click the BOOT.INI tab

click the /SAFEBOOT and the Minimal tabs and reboot
do ur scans and stuff.

then reverse process to boot normal.

while ur in there also click the startup tab and remove any programs u dont want running at startup (this is also the way to stop some virus programs loading at startup so u can delete them.)

hope it helps bro

[Dymond]

NICE Jacx!! I totally forgot about that! When I was at Iomega we used that for the F8 challenged!