I just got a Trojan Horse, need help if you can.

[pyrate83]

Last night I got this trojan horse. Trojan horse Downloader.Keenvan.C
I can't get rid of it with AVG but I thought I had it quarantined. I get up this morning and the virus detected screen is up. Same virus only different location now. It's not where it originated from and it says it is in my system volume information. I ran a scan and came up clean but AVG seems to find it when running in the background. I'm afraid I may just have to reinstall everything when I get home from work this evening but I wanted to see what you guys could suggest. I left my system running hoping to see that location once again and try to manually delete it. We'll see what happens when I get home.
Thanks

[Treebeard]

Did you boot to safe mode? then run virus check and let it quarintine it.

[pyrate83]

Did you boot to safe mode? then run virus check and let it quarintine it.

No I didn't try that yet. Can't remember, is that in F10 setup? It's been awhile since I've had to do anything like this.

[DVD_Ripper]

I believe its F8 at boot.

[northcat_8]

Scan your PC online at www.trendmicro.com

it's free and is the best virus scan I've found. It beats norton and McAfee hands down. And when it finds one, you can double click the virus in the scan window and it will take you to a page that gives you all the virus specifics like other names, damage it does, how it travels, how to remove it (complete with registry edits). Trend is the place for virus removal.

If you go to trend it may take a little bit the first time you go, depending on your connection speed. Basically it downloads the scan engine and pattern files to your temp folder and scans your PC from within, I connect at 24 bps and it usually takes about 20 minutes for my slow ass connection to download all of it. At work on our 100 Mbps it takes about 2 minutes if the network is busy.

As per accessing the safe boot option, press F8 while your system is rebooting.

[babyboo]

I bet Capmaster would be willing to help...he has done wonders with Dolly...he might be up to the challenge

[pyrate83]

Thanks, I will run that scan when I get home from work. I just hope my computer still works when I do get home. Seriously though, I left it on all night and nothing detrimental happened except for the trojan moving to a new location.

[gitreel]

Turn off system restore, finish the scan then you delete from quarantine, then turn system restore back on. If you delete with restore on, the the virus/trojan/worm is back.

[pyrate83]

Turn off system restore, finish the scan then you delete from quarantine, then turn system restore back on. If you delete with restore on, the the virus/trojan/worm is back.

That's a good thought. I'm going to try some different things to clean my system and hopefully get rid of it before I resort to a full re-format of the hard drive.

[pyrate83]

Well I scanned again and also dumped all of my system restore files and that was where the virus was this morning. Everything seems to be fine now, thanks.

[Shocker Milwaukee]

"Kill it before it grows." -- The Sheriff

[devinemi83]

Scan your PC online at www.trendmicro.com

it's free and is the best virus scan I've found. It beats norton and McAfee hands down. And when it finds one, you can double click the virus in the scan window and it will take you to a page that gives you all the virus specifics like other names, damage it does, how it travels, how to remove it (complete with registry edits). Trend is the place for virus removal.

If you go to trend it may take a little bit the first time you go, depending on your connection speed. Basically it downloads the scan engine and pattern files to your temp folder and scans your PC from within, I connect at 24 bps and it usually takes about 20 minutes for my slow ass connection to download all of it. At work on our 100 Mbps it takes about 2 minutes if the network is busy.

As per accessing the safe boot option, press F8 while your system is rebooting.

Yup. NAV is pure shit. I had to remove it off of my aunts computer and install an antivirus powered by the trend micro engine. NAV even when updated wouldnt detect 3 viruses she had, the trend micro scanner picked them up and killed them in less than 5 mins.

[gitreel]

That is your opinion. Nav does the job for me. More than likely you need the current updates. There are two ways of updating the program. Live-update which is weekly updates, and intelligent updater, which has daily updates. Check out www.sarc.com(Symantec Antivirus Response Center.)

[gitreel]

Well I scanned again and also dumped all of my system restore files and that was where the virus was this morning. Everything seems to be fine now, thanks.

No Problem.

[devinemi83]

That is your opinion. Nav does the job for me. More than likely you need the current updates. There are two ways of updating the program. Live-update which is weekly updates, and intelligent updater, which has daily updates. Check out www.sarc.com(Symantec Antivirus Response Center.)

I guess you're lucky. Most people I hear from hate their software. The last time I used it was with my aunts machine and I updated its virus def myself. I saw with my own eyes it was updated and saw the date for the latest patern file and it was correct. Scanned and not a bloody thing was found. I knew at least 1 virus was running and I had it set to scan everything. I gave up and realized once again symantec fell asleep with its digital thumb up its ass and installed a trend micro scanner. It after updating immediately told me winpup32 was in there, and removed it all in less than 5 minutes.

Not to mention I get all my updated virus defs for FREE. I bought the original software back in 2001 and I still get them for nothing. Just a few of the main issues I have with their stuff is:

1. Bloat
2. Buggy or unpredictable behavior(in their system utilities)
3. Uninstalling breaks shit left and right. And NEVER fully removes all the junk it places.
4. Expensive
5. Usually only a year of updates.


I dont totally hate them, they do some stuff right..As you said SARC is a great resource. And their ghost program is the best backup program I have ever used and it installs less than 20MB of stuff.

One thing really killed my view of them, on my aunts computer(1Ghz athlon 128MB ram) her NAV was using more resources than the 40 copies of winpup that were running at the same time. And when your AV is using more system power than 40 viruses running at the same time and STILL cant manage to detect them.......we got problems.

[gitreel]

I am not lucky. I am anal about updates. I check several times every day for updates. If there is an update I update. I also set heuristic scanning to maximum level of protection.