Computer Forums

Member Login

Remember Me? Sign Up! | Forgot Password
 
Slogan
 
Closed Thread
Old 10-13-2004, 07:24 PM   #1 (permalink)
 
Junior Techie

Join Date: Apr 2003

Posts: 62

grapeape is on a distinguished road

Default trojan virus removal help

I have a trojan virus in iexplore.exe. I have end this in task manager and tried to delete and would not let me delete the trojan.

Please help

thanks
grapeape is offline  
Old 10-13-2004, 07:29 PM   #2 (permalink)
 
Master Techie

Join Date: Oct 2003

Posts: 2,258

Inaris

Default

what is the Trojan name? Or better yet, what is it that it is doing?
Inaris is offline  
Old 10-13-2004, 07:53 PM   #3 (permalink)
 
Junior Techie

Join Date: Apr 2003

Posts: 62

grapeape is on a distinguished road

Default

no name , nortons just says it is a trojan in C:\winnt\system32\iexplore.exe. and it has done anything yet to my knowledge, computer works fine expect for the annoying norton virus messages. nortons wont remove it or put it in quarrintine
grapeape is offline  
Old 10-13-2004, 08:04 PM   #4 (permalink)
 
Banned

Join Date: Oct 2004

Posts: 422

vance43211

Default

who want to tell him?

I will.

don't use IE

use firefox, netscape, or opera

get adware, spydot and spyware blaster so they can remove it

run norton in safe mode too.
vance43211 is offline  
Old 10-13-2004, 09:45 PM   #5 (permalink)
 
True Techie

Join Date: Mar 2004

Posts: 130

Worked4me

Default

You need to check Norton's Report, Quarantined Items
for the name. If Norton's can't discover the virus it could
be very new.

You can try an online Virus Scanner if you have
high speed. This seems to discover hard to find viruses.
http://housecall.trendmicro.com

If you can't delete the file because it is locked by the
system you can try moveonboot.

http://www.softpedia.com/public/cat/13/4/13-4-17.shtml
Becareful about removing any system files like iexplorer
or your browser won't work.

Good Luck.
Worked4me is offline  
Old 10-14-2004, 12:20 PM   #6 (permalink)
 
Master Techie

Join Date: Oct 2003

Posts: 2,258

Inaris

Default

well, it is save to say, you can kill all Iexplore.exe file running and then delete this file.
IE is run from c:\program files\internet explorer\Iexplore.exe
not for winnt\system32
Delete the file. It's pretty easy. Then open regedit and go to HKLM\software\microsoft\windows\currentversion\run
look for anything pointing to that c:\winnt\system32\iexplore.exe and delete it. then got to:
HKLM\software\microsoft\windows\currentversion\run once and look for the same thing.
Then do a find in the registy for iexplore.exe record all of the keys that it finds. there will be a few. But check the paths to where it is pointing. If any of them point to any place other then c:\program files\internet explorer... You know it's not correct, so delete it.
That should take care of the problem...

Good luck
Inaris is offline  
 
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On