nvidia geforce4 4000

Hi All,

Had to restore my computer to factory condition. Now AVG keeps popping up with trojan message. System should be clean (first run of AVG with update6/18/04 came up clean) While typing this, I got the message again, so am running AVG again. Is there something in XP that can cause this message? Am I worrying for nothing?

Also, Can't seem to find a file for my geforce4mx 4000. I got it on the Geeks site and it installed some tabs in my nvidia settings to allow me to overclock both the core and the video card. Can you tell me where the file may be? The tabs I refer to are in the nview properties/desktop manager/geforce4 mx 4000, on the sidetab around where the refresh rate override line is.
Thanks,
Wingnut

 

update: The line I'm getting from the AVG is IRC/BackDoor.SdBot.27 and is located in C:WINDOWS\SYSTEM32\SCRGRD.EXE.

I have moved this to AVG's vault until I hear back from someone. HELP, M.A.!!!!!

 

Dear Halo,


Yep, the nvidia tweak you sent me to was what I needed, thanks.

I will try the housecall (I installed oem Norton which also caught them and claimed to delete them).

I'm noticing that I'm sending twice as much bytes than I am receiving while online which has not happened before. Any way I can find what's sending info out?
Wingnut

 

It's likely the trojan you picked up. AVG is weak on trojan support and removal. Run HouseCall immediately & see if that will get rid of it. If not, they guys here can help you further with that. You may be sending personal data to the originator of the virus, or spreading the virus further, or being used to send spam out for whoever controls it. Installing a good firewall can help curtail outbound traffic that you didn't authorize, but first priority is to get rid of the trojan. Disable System Restore before attempting to clean it, as many viruses/trojans can be in the Restore files as well, and you don't want it there either.

 

***update***

O.K., I'd like to find the line to stand in so I can have a crack at the ***hole that invented the Sasser virus. Housecalls found SasserA in my system. Deleted it on the housecalls site, then came to Geeks and downloaded the Sasser fix tool. I'm rechecking with housecalls again to make sure I'm clean. Boy, this is JUST how I wanted to spend daddy's day...

Thanks for the help, I'll post again when I know I'm clean.