had trogan, it is on my back up files still!

lilhitler · Sep 11, 2006

i had a backdoor trojan on my computer(windows xp,sp2, home pc,56 k dial -up with people pc) . i went thru microsoft to get it removed but have come to find out it is on all my backup files. even after i have removed the trojan my files didn't change back to the original way they should be as if my computer never had the trojan. before we discovered the trojan i took the whole system back to as if the computer was first being set-up which in turn backed up the trojan. now that its removed do i need to wipe out the system again snd reset-up the whole system as if it is first being set-up again in order to regain control of my files? they are all set up the way the trojan converted them to (even my back-up files). what should i do to remove all traces of the trojan 's set-up off my system? thanks!! lilhitler!!

TimW · Sep 11, 2006

Read and run first - Malware section
http://forums.majorgeeks.com/showthread.php?t=35407

lilhitler · Sep 18, 2006

well i have ran window's defender in both reg mode and in safe mode . i.ve ran a couple of the other programs looking for programs and they have been deleted from remove programs . i tried some of the special tool removal programs and i'm attaching the reports from webtracer. now im going to go to the next step .if it appears i'm not following the procedures right please let me know because i feel i am doing as am suppose to . thanks! lilhitler

DavidGP · Sep 18, 2006

Hi and welcome

To fully remove any malware/trojans on your PC please do follow the below in the exact steps in which its laid out, then attach the requested logs ( please do not zip them up as zip files can harbour malware/virii etc.

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:

CounterSpy - ONLY IF you were not able to run Windows Defender

Bitdefender - from step 6

Panda Scan - from step 6

runkeys.txt - the log from GetRunKey.bat

newfiles.txt - the log from ShowNew.bat

HijackThis

NOTE: You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!

Log in or Sign up

had trogan, it is on my back up files still!

lilhitler Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

lilhitler Private E-2

Attached Files:

RegSrch.zip

vundofix.txt

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member