mangogrooveworkshop
|
posted on 25/5/04 at 12:50 PM |
|
|
Revop C infection
Avg is catching it and moving it to the vault but we seem to reinfect when we attempt to play mpegs in the windy media player. Anyone got a killer
app to sort this trojan.
THANKS IN ADVANCE
|
|
|
flak monkey
|
posted on 25/5/04 at 02:14 PM |
|
|
Tried hijack this? If its a registry entry that will grab it.
If not you need to find the actual file and delete it. Maybe AVG is just getting the reg entry and not deleteing the file.
Cheers,
David...
PS I'll see what mcaffe have to say, but can you tell me the proper name of the trojan?
[Edited on 25/5/04 by flak monkey]
Sera
http://www.motosera.com
|
|
Peteff
|
posted on 25/5/04 at 03:24 PM |
|
|
http://www.thespykiller.co.uk/
He has cwshredder and hijackthis downloads on here. Get spybot or adaware and set to scan registry, this should help. Which Windows are you running?
You may need to disable system restore while you clear it out.
yours, Pete
I went into the RSPCA office the other day. It was so small you could hardly swing a cat in there.
|
|
britishtrident
|
posted on 26/5/04 at 10:18 AM |
|
|
Media files are about the bigest source of malware around -- the problem is identifying and stopping the running malignant process before trying
to clear the pest out..
Use the task manager to kill
trojan.win32.revop.c.exe
then search for and delete trojan.win32.revop.c.exe
then immediately do another virus sweep then like others have said run hi-jack this.
You might also find a util called WinStartup also known as startup.exe very handy for identifying what starts up when windows starts and removing
it from the registry.
You might also want to try Free AntVir from http://www.free-av.com/ I use it on some pcs.
[Edited on 26/5/04 by britishtrident]
|
|
britishtrident
|
posted on 26/5/04 at 10:26 AM |
|
|
forgot to add turn off system restore
Forgot to add if you have a post 98se version of Windows which has "System Restore" turn it off first and only turn it back on after a
reboot when you know the system is clear of infection.
[Edited on 26/5/04 by britishtrident]
|
|