asked on

2 trojans

I have recently reformatted my drive and installed windows xp. Before I had a chance to get the service pack 2 installation, i went on a website and got 2 nasty trojans. They are startpage-eh and coolwwwsearch.aff.winshow. Now after reading as much as I could and after running ad aware and search and destroy I had no luck. search and destroy found them and said they deleted them but they kept coming back by way of my homepage on internet explorer. I then downloaded hijckthis and tried that with no luck. Now I cant open " my computer" to see my drives.... it times out and gives me some dr watson post mortem message saying that it has timed out and asks if i want to send in a report to microsoft...the usual timing out message....

Now the computer is running slow and is running poorly. how to i get rid of these nasty bastards short of having to reformat and reinstall all over again....

also, since it was a new install i didnt have a refernce point and couldnt do a system restore....

Thanks.

FalconHawk

well, at first, download microsoft antispyware
http://www.microsoft.com/athome/security/spyware/software/default.mspx

Do a full system scan with it, and delete the trojans again. also make sure to enable the on acces protection. when your done with that, go to the configuration screen and CHANGE the homepage to a new one.

when thats done, run MSASW again. look under advanced. there is a browser hijjack option. set the page to the new startpage. from now on, your page will be protected from changing.

(i wrote it kinda short due time issues, but when it doesnt work, just post back... i got more time later ^^)

blue_zee

If it's a new install, wouldn't it be better to do a fresh restart?

I mean format and reinstall Windows?

That seems to be the safest, quickest and probably the best way out of trouble at such an early stage.

Zee

plisskin

ASKER

hi falcon

i did the scan, it detected and deleted the trojans

i am not sure what youi meant by enabling access protection...

i went to config screen and changed homepage

i ran scan again, no trojans detected

i went under advanced and set the startpage to the one i wanted

i launched browser, everything was cool

i closed browser, launched again and the trojan page was back

i rescanned and one trojan showed up, a browser hijack/modifier

i deleted, repeated the same with the same results over and over...

any ideas? thanks!

ASKER CERTIFIED SOLUTION

Member_2_921743

membership

Create a free account to see this answer

Signing up is free and takes 30 seconds. No credit card required.

See answer

Member_2_921743

Need to add this:

For the TDS-3 scan, if it's a Positive identification and it's shown as a trojan, just delete it. There's no need for you to post the log here in that case.

plisskin

ASKER

thanks Knight i will do this, however everything ive used so far has found and deleted the trojan, i have done subesequent scans and no trojans showed, then i open my browser, the trojan is back and then another program finds it and deletes it until i open my browser up again....should i open the browser up after each one of these scans to see if the trojan re-appears? ill wait for your answer before proceeding.thanks.

plisskin

ASKER

TDS-3 worked. thank you.

Member_2_921743

No problem. Glad it worked out.