Trojan Attack - help

cindy1948 · Post by **cindy1948** » Sun Nov 30, 2003 9:44 pm

I have dropper.swicer.a in my windows\applicationdata\FGLQUGRX.exe.

What do I do? My system keeps crashing. I had a couple of notices that it was there, now my puter can't get past the windows start up screen. I have windows 98 se.

Anyone know what to do??

porkchop · Post by **porkchop** » Sun Nov 30, 2003 9:53 pm

press f8 at when you see the windows splash screen and enter safe mode.. go to start, run, and msconfig to disable any unnecessary startups... do a full system scan and delete all files detected as trojan..

cindy1948 · Post by **cindy1948** » Sun Nov 30, 2003 10:35 pm

Thank you!

I'm running the scan now and so far found 2 of them.

How do I get rid of them or will AVG be able to get rid of them in safe mode?

porkchop · Post by **porkchop** » Sun Nov 30, 2003 10:37 pm

Originally posted by cindy1948
Thank you!

I'm running the scan now and so far found 2 of them.

How do I get rid of them or will AVG be able to get rid of them in safe mode?

it depends how you have avg set up... it may ask you if yo uwant to delete them... or you could jsut manually find the files and delete them... also, search up the viruses on norton and the site will be able to give you information on how to remove registry settings...
http://www.symantec.com/search/

cindy1948 · Post by **cindy1948** » Sun Nov 30, 2003 11:01 pm

when i restart my computer now to run in normal mode it stops at the windows 98 page where u have the windows logo with the sky background , and it is freezing there and not advancing more than that

Randy · Post by **Randy** » Mon Dec 01, 2003 12:48 am

did you disable windows explorer in startup? what have you got running in startup?

hayc59 · Post by **hayc59** » Mon Dec 01, 2003 1:27 am

go here and download 'stinger'
http://vil.nai.com/vil/stinger/
give that a try and will find more info on this
nasty!!

hayc59 · Post by **hayc59** » Mon Dec 01, 2003 1:31 am

also Mischel has a 30 day
trial on his TrojanHunter.
Download it and run it!!

http://www.misec.net/trojanhunter/

also try a online scanner--->
http://www.ravantivirus.com/

hayc59 · Post by **hayc59** » Mon Dec 01, 2003 1:52 am

http://securityresponse.symantec.com/av ... opper.html
here is a little more info

cindy1948 · Post by **cindy1948** » Mon Dec 01, 2003 8:00 am

Hey, Thanks for all this help.

I don't think I disabled Windows explorer. When in safe mode I only disabled the ones that I knew I had put on the puter myself...like aim, like msg plus etc.

This freezing occurred after the third notice of the trojan and then porkchops helped me get into safe mode and get rid of the trojan.

I did go to Norton, they didn't have anything on it.

Guess I'm kind of stuck right now. Just can't get past that screen. Any other solutions??

Again, thanks muchly!!!!!!!!!!

Wow, just saw that info for dropper, that trojan really opened the puter up huh.....................scary!

Norm · Post by **Norm** » Mon Dec 01, 2003 9:46 am

Try using the f8 button at bootup to start in Dos Mode by selecting "command prompt only"

At the A:> prompt type:
scanreg /restore
Hit [ENTER]

When the window comes up, pick a reg file dated before this problem occurred.

If that doesn't get windows booted, you could use the 98 cd to reinstall windows over itself.

Good luck

hayc59 · Post by **hayc59** » Mon Dec 01, 2003 12:15 pm

found a lot more.
over at computercops--->
http://www.computercops.biz/forum3.html
also run a Spybot or Adaware scan first and fix anything you find