Eeeekk! Trojan incoming!

  rotormota 11:46 13 Sep 03
Locked

My NAV advised me of 2 infected files at boot up this morning. It was unable to repair them & their website gave no clues.

This trojan does not appear to have a specific name..just Trojan.

The 2 quarantined files are 'bootconf.exe' & 'msinfo.exe'. Are they important?

Repairs don't seem possible at the moment so what about a Roxio Goback?

Cheers.

  Jester2K II 11:53 13 Sep 03

'bootconf.exe' - click here

Try going back to a point before they arrived. You should be able to search through the GoBack lists to see where they might have been picked up from...

Right click the system tray icon and select Advanced Features...

When loaded hold down CTRL and hit F3 enter the name of one of the files. Then let if find it...

I did it and it keeps pointing at Diskeeper entries... See what yours says...

  VoG II 11:56 13 Sep 03

Also see click here

It is not really a "trojan".

  Jester2K II 11:57 13 Sep 03

click here

Instructions for removal are on this page but you might want to use either

Ad-Aware click here

or

Spybot click here


might also want to look at Spywareblaster click here to block this sort of thing in future...

  Jester2K II 12:00 13 Sep 03

Also CoolWeb Sreader click here specifically targets this software...

  rotormota 13:39 13 Sep 03

Whoooppee! A result! Re: this thread & my other slow scrolling/typing one. Used Coolweb Shredder which detected the bugs & killed them.

The only thing is, what about the qurantined infected files in NAV which still can't be repaired?

Cheers.

  Jester2K II 13:45 13 Sep 03

They are quarantined BECAUSE they can't be repaired. A file can only be repaired if it is an original file INFECTED with a virus. If the file IS the virus then it can't be repaired because theres nothing to repair.

Delete them from the quarantine.

  rotormota 13:51 13 Sep 03

In other words the Trojan was called msinfo & bootconf & they are not actual files critical to the pc operation?

Cheers.

  Jester2K II 13:56 13 Sep 03

Yes.

They are not true viruses but Spyware.

A true virus may attach itself to a legitimate Windows file so when the Windows file is run so is the virus. In that case the repair option separates them and deletes the virus part.

  rotormota 14:03 13 Sep 03

Thank you all. Problem solved. 10/10 for Coolweb Shredder.

This thread is now locked and can not be replied to.

How to get Windows 10 for free | How to install Windows 10: There is still a way to avoid paying…

1995-2015: How technology has changed the world in 20 years

Alex Chinneck’s giant ice cube Christmas tree at Kings Cross

Apple rumours & predictions 2017: The iPhone 8, new iPads, and everything else you should expect fr7…