XP problems, trojan???

R

ran

Senior Member
OK. MY wife's machine is XP Pro, SP3, IE8. Our house is on a cable modem. Last nite-problems, Trojan warning (McAfee I guess) and she shut everything off. Turned off modem and she ran all utilties (Malwarebytes, A/V, antispyware). To be safe, had her system restore 1 day. Today: still problems, IE / Update will not connect. Internet Options-OK. Firewall-OK. tried 6 day restore.
IE / UPdate, will not open. Saved sites will open. Google Search will open but searches 'redirect' to other search engines. I doubt I can talk her into a full format. any other ideas?? thanks all, Ran
 
Register to hide this ad
ran, you might wanna try "Reseting" IE settings. Trojans usually changes many system defaults and user settings, removing them will leave IE messed up.

Just make sure no more trojans left. I will scan in safe mode. Then "Reset" back IE (go to advance tab, then click reset) :)
 
IN safe mode, Malwarebytes found one more nasty. Back t real time, still to IE. IN Google Search, we are still getting redirected to other search engines. fun times tonite.
 
You'll need to turn off system restore when digging this nasty out - most competently-written trojans and viruses drop a seed there, so that they may automatically re-infest your computer upon start-up should you succeed in removing them. It stinks to lose those restore points, but unless you turn off that feature, it will keep coming back.

Do you know what virus/trojan was indicated by Malwarebytes and McAfee? That makes all the difference in what method you use (if any) to remove it.

Good luck!

-Tuthmose
 
I was trying to get her into Opera 10 last week. I think System Restore wiped it out. Turned off System Restore, ran Malware and found bamitrol.exe. still cleaning it up. thanks guys.
 
Sunday afternoon update. Win Update still locked out. Google search is redirecting, and IE 8 seems OK. She is Office Admin, big on Windows use. still trying, thanks all
 
Bamital ? Ya thats a nasty biotch man . Different browser would not have made a difference . After the trojan warning , did she follow instructions that the AV program gave her or did she just panic and shut it all down ? Panic and turn off and restart and into the bootup she goes = doomed .

ran said:
Sunday afternoon update. Win Update still locked out. Google search is redirecting, and IE 8 seems OK. She is Office Admin, big on Windows use. still trying, thanks all
Click to expand...
 
Last edited:
events? not sure, so much has happened to her machine since then. I emailed the Win Update site to her, still would not open. That still sounds like a trojen to me. Google not working right could be a Google thing? We keep deleting in Internet Options-all historys, etc. I know if you delete IE 7/8, it goes back to IE 6. She does not want to lose her favorites. life, goes on. thanks.
 
You said it detected Bamital . I think I would just try a repair with the XP disc ( AFTER successful removal ) and see what happens . 2 Windows files are infected with bamital . Its a nasty virus .


here > http://www.symantec.com/security_response/writeup.jsp?docid=2010-070108-5941-99&tabid=3

ran said:
events? not sure, so much has happened to her machine since then. I emailed the Win Update site to her, still would not open. That still sounds like a trojen to me. Google not working right could be a Google thing? We keep deleting in Internet Options-all historys, etc. I know if you delete IE 7/8, it goes back to IE 6. She does not want to lose her favorites. life, goes on. thanks.
Click to expand...
 
Last edited:
ON a search, CNET has a HitManPro35 program. Ran it on a backup machine, fine. Tried it on the infected, no update, or scan. Informed CNET. Will try the Symantec paperwork. I thought Malware got rid of it, wonder if it is something else riding along? fun times tonight. OK, it does work, works great. d/l it. HitMan is finding junk on my laptop that Malware and 2 other programs did not find. Wife is busy with emails, not sure yet about her machine.
 
Ran HitMan again on her machine, found rootkit and cookies. Good little cleaner program. Finds more than my other favorites. Thank You All for your help. Ran
 
You have Bamital?

A good Anti virus can remove that. But some will just remove the toolbars,Browser hijack and browser pluggins. Try Trojan Remover Trial Version.

Check if its still running, open Task manager, search for suspicious processes..if I remember it really has Tojan.Bamital, click end.

You might want to remove the registry entry.
Check if its still located: HKEY_LOCAL_MACHINE\Software\Trojan.Bamital
 
You might want to run your virus software in safe mode . Like the above poster said , good AV software will remove it but run the PC in safe mode while doing that . Make sure your anti virus software virus definitions are current and up to date before you try the removal .
 
Hey there. Used to use spybot, now I prefere SuperAntiSpyware.com. I get full updates daily, finds a lot. Next to that I use Advanced System Care. This gets other spyware, Registry changes and junk files (all those photos of Toyotas we look at). I put that on my neighbors 6 yr old machine, 216 Registry changes. got to build a new computer one of these days! have fun
 
ran said:
Hey there. Used to use spybot, now I prefere SuperAntiSpyware.com. I get full updates daily, finds a lot. Next to that I use Advanced System Care. have fun
Click to expand...


Cool, now i can add another one to my computer. haha... I got Symantec, McAfee, Microsoft, Spybot, Stopzilla, aol optimizer, and some other cheesy-named ones. :pimp:
 
You must log in or register to reply here.

Members online

Total: 437 (members: 5, guests: 432)

Forum statistics

Threads
278,304
Messages
3,554,041
Members
248,016
Latest member
Advally Service

Share this page

Trending content

Back
Top