Since you have Symantec/Norton, I'd do the following:

Note what it states on your start-up screen for changing the boot pathway, and re-boot following those instructions.

Change the pathway to boot from your Norton CD, if you have a copy on CD or someone can lend you one.

See if you can wipe out the trojan.


This is about the trojan:

http://www.google.com/search?hl=en&q...=Google+Search

And, this is a Google cache/archive copy of info. re: the same trojan:

http://209.85.173.104/search?q=cache...lnk&cd=1&gl=us


You might have to take the 'puter to someone for removal if it can't be done on your end. I wouldn't continue using a computer with a known trojan. Not only is it a known security risk, it can also compromise files, etc.


Another thing, I'd try, because I am of the belief one can't really hurt a 'puter that's already messed up: I'd go into SafeMode, and do a System Restore - setting the computer to an earlier time/date or Checkpoint when everything was known to be working well - to put that trojan in a sleep-type mode.

Until I knew that thing was off the drive, I still would not use the computer for everyday use. I'd not want to mess up my files or take the risk of passing it to anyone else.

and if is networked with other computers disconnect it from them.

I goggled " free Trojan cleaner"
here is the results
http://www.google.com/search?hl=en&q...=Google+Search

I like to get downloads from CNET download.com

here's a listing of the cnet editors top free removers -
http://www.download.com/sort/3150-80...&fileSize=&qt=

if you can scan it with those and get it removed
then get a registry cleaner - like ccleaner to clean out any remaining traces of it.
then after it's cleaned do a back up of your important files
and install the threatfire program to assist the nortons AV.

Is your Nortons only AV? does it cover spyware,etc too?

Now I always use an internet suite product - covers Anti Virus, AntiSpy, wifi, email, IM even parental controls & ID protection if you want it.
I bought a year of Zone Alarm for 3 computers - only 49.95 I believe.

I use the threatfire along with it too.

Zone alarm info & comparison- {most of these products & the main brands have a free trail of 30days or so to see how you like it or not.}

http://www.zonealarm.com/store/conte...try=US&lang=en

those two statements I agree with whole heartedly...

trojans are so powerful these days that they do more danger than viruses, IMHO. And they are known to embed so well that if you get rid of them, you would want to run the anti-spy/malware again just to make sure it didn't embed itself again.

Usually what I do for a client is the basics, although I must say that every puter has its own mind and each has to altered a little bit for some odd reason.

Basically, these are the steps when it comes to trojans.

1) If your DD is using any P2P program, uninstall it immediately. More than likely, she got the trojan that way. Most well known P2P programs are "Limewire" "Kazaa and it's offsprings", "ares"

maybe ask her.

2) There should ONLY be ONE anti-virus software. But there should always be MORE than one anti-spy software. Not ONE anti-spyware catches everything. A combination of them helps to catch most of spycrap. But new ones are created almost every hour/day so the spywares are created faster than they can catch them.

On top of that, Malware/greywares are on the rise.

3) If you can log in to safe mode via networking, download the anti-spywares and then do an immediate update. After that, unplug from the internet. Now run the software in safe mode and let it catch everything that it can, delete them all, restart back in safe mode, run the next one, same thing, until you've run them all.

4) run a hijack this file. You can take that file to Castlecop or other volunteer forums that offer FREE service that will help you. I can look at it for you here if you'd like.

5) If you are able to catch them all, update all the anti-spywares again and run them in safe mode again. Making sure that you've caught them all.

6) boot back into regular mode, run them in regular mode and see if they catch anything.

And make sure you run it to all your external drives such as USB sticks and external hardrives that you have informations stored.

whew...yes, it's a long an arduous job but not that hard when you think about your passwords, personal info, even bank account can be compromised somewhere in Russia(for some reason, a lot of the spywares come from Russia because their gov't don't have strict regulations against hackers/spyware people) and they are using your hard earn money as rupies. LOL

If you feel like you can't fix it. Take it to someone that can. It is worth the money vs losing thousands of dollars and compromising everything in your computer.

I told DD her computer was off limits until it was fixed, then ran and waited for her to blow up. She politely informed me while she was on the computer yesterday there was a "virus found on website, can not clean" pop up. She said she didn't down load anything and thought all was okay. I wish she would have told me when it happened as I would have run the anti-virus right away but...

I have decided to let a pro fix it as best they can once I find the money to pay for the help. I appreciate all your suggestions and will look up every link and website you have mentioned. A downed computer means at least one very unhappy human. Not pretty.

Thanks again for all your help.

Just to clarify something...

A person doesn't have to physically/manually download anything while surfing the Net to pick up a potential prob. Pages and images automatically go to Net/Browser cache/temp. files.

If running anti-virus, and if there is the option to surf with protection mode on, I'd turn that baby on after the "cleansing" is done .

I've come across sites, likely very similar to the one your DD visited, yet there is a warning prompt that immediately pops-up if a site may contain a virus. I get out insteading of selecting to visit regardless - of the warning.

I also don't open any file attachments if sent by people I'm not certain also run virus protection and ignore the "jokey" type and electronic greeting card messages all together.

yes...that's the price we pay for high speed streaming...high speed trojans...LOL

most anti-virus/anti-spywares now offer "live" blocks. The trick is to always keep your softwares updated. Usually there is a setting that automatically do that for you...

Whew...I think you are in good hands with Bobbi and Jo.

I am bowing out, good luck!

I know what you mean about downloading stuff. I don't know what DD did or what really happened since I wasn't at her elbow. I just think this is a bigger problem than I can safely handle on my own. I know very little about computers and am terrified I will make things much worse. I will look into beefing up all types of junk blockades on all our computers. Norton is set to always run in the background so I don't know what went wrong. Maybe they know about the virus but don't have a fix for it yet. Who knows.

You're right; it could be that a definition for it hasn't been released or maybe needs a tweak. Then, again, there is no anti-virus that is 100 percent fail-proof.

When I had my first PC, some years ago, it had attracted not one but multiple trojans - while Norton was runnning full-force. At that time, I knew very little about PCs so I couldn't fix it myself.

which Norton product are you using?

http://www.symantec.com/norton/theme...t-most-popular
or
http://www.symantec.com/norton/products/index.jsp

and many of the top rated protection sites have a lot of info about viruses and such -
her's Nortons pages of info-
http://www.symantec.com/norton/secur...onse/index.jsp

http://www.mcafee.com/us/threat_center/default.asp

http://us.mcafee.com/virusInfo/default.asp

[Free Tools @ Trend Micro - http://us.trendmicro.com/us/home/home-user/
HouseCallHouseCall scans your computer for viruses, spyware, and more.
TrendProtectTrendProtect rates a web page and helps you avoid any with unwanted content and hidden threats.
HijackThisTrend Micro™ HijackThis™ is a FREE cleanup utility that helps you find and fix unwanted computer settings.
Transaction GuardTransaction Guard is a FREE software that protects you against spyware while performing sensitive online tasks on a public computer, like Internet banking or other financial transactions. ]

Security Tips for Consumers
http://us.trendmicro.com/us/threats/...ser/index.html

internet security product reviews
http://www.google.com/search?hl=en&q...ws&btnG=Search