[Ham-Computers] Trojan(?) problem

[Jay Austin]

Are you getting a notification in the right lower corner of your screen? 
Has your desktop been changed to a warning?
Is there a red apple looking icon in the task trey?

Without knowing which virus you have, it is hard to tell you how to remove
it. You might be infected by smitfraud, AboutBlank, SpyAxe, CoolWebSearch,
or a bunch of other things. The problem with a lot of these are that when
you remove them and reboot your computer, they reinstall. They are memory
resident. Answer the questions I posted at the top and I might be able to
tell you what you have and how to remove them. 

The thing about virus/spyware removal, most shops will tell you to do a
format and reinstall. I have 2 problems with that method. First, If you back
up your files and then reinstall your files and one of those are infected
then you are just right back where you started. The second is it takes a lot
of time to reinstall all your programs and files and you will probably loose
some data in the process. I try to talk my clients in letting me clean the
computer. Right now my record on a single computer is 123,842 infections.
The person had no virus protection and had done nothing to the computer in 4
years. Most of those were tracking cookies, but they still showed up in some
of the tools I use.

You might want to check out
http://www.security-forums.com/viewtopic.php?t=28882 if you still have
trouble. Follow the instructions in that link and then post a HijackThis
log. Either myself or one of the other team members will be willing to help
you clean your system.

73,
 
Jay Austin KE4RHN
 
Austin Computer Solutions
http:\\www.austin-computer-solutions.com
Hire a Tech, Not a Geek
 
-----Original Message-----
From: WØQFC [mailto:erastber at tampabay.rr.com] 
Sent: Friday, October 27, 2006 5:53 PM
To: Computers (or other) used for amateur radio, communications,or
experimenting
Subject: Re: [Ham-Computers] Trojan(?) problem

Yep, I looked at task mgr and the registry and found nothing.
Biggest problem is that I do not know what the exact infection is or it's 
name.
I downloaded the Trojan Hunter that Don suggested and it showed that I had a

"Hoax Renos.192" Trojan. The program cleaned it but still have the original 
problem.
I just finished looking the folder where the Trojan hunter said the file was

located and found a couple of cookies and deleted them and the pop-ups have 
stopped (For now, at least).
Will keep you and the group informed of my progress. . . .
73 es tnx,

Gene, WØQFC
Spring Hill, Florida
WEB SITE:
http://www.w0qfc.com