Win98 Trojan

December 11, 2003 12:45 AM from

I went home for the holidays to my parents house from college. At home my mom told me that the computer upstairs(a p2 450mhz with win98) has gotten a virus and many other problems. My dad fixed most of it last night, but there still seems to be a remnant of the trojan. It keeps setting the homepage on ie to a porn page. That is not good for a family computer. I couldn't find a way to change it back without the trojan reversing the homepage back to the same site. Any help will greatly be appreciated.

wincustomize

4,786 views 10 replies

Reply #1 December 11, 2003 12:54 AM from

WinCustomize Forums Top

Try HijackThis....... get it here http://www.spywareinfo.com/~merijn/index.html

Reply #2 December 11, 2003 12:54 AM from

WinCustomize Forums Top

Look in Task Manager/Processes for something running you can't identify. Let me know what it is...

Reply #3 December 11, 2003 1:24 AM from

WinCustomize Forums Top

done both

Hijack this came up with nothing, and all the processes I know

Reply #4 December 11, 2003 1:28 AM from

WinCustomize Forums Top

Open IE and look at processes again

Reply #5 December 11, 2003 1:40 AM from

WinCustomize Forums Top

I don't see anything different

Reply #6 December 11, 2003 1:46 AM from

WinCustomize Forums Top

Ok...1st check 'Internet Options' and make sure your Home Page is set correctly. That done go to http://www.safer-networking.org/ and install and run. Write whatever name it gives you as the culprit and let Spy Bot remove it. In 'Run' type msconfig and click OK. If that file shows in your startup proggies, uncheck it and re-boot. When you get the modified Boot.ini file prompt, click to use modified version.

Reply #7 December 11, 2003 1:52 AM from

WinCustomize Forums Top

Yes my homepage is set correctly, or at least it is after I change it. When I restart the homepage changes. I used adaware, system mechanic, and TrendScan Antivirus, do you think spybot will catch it? Will try after I search the hardrive and Registry for instances of the homepage that shows up. I have already found several instances in the registry.

Reply #8 December 11, 2003 1:59 AM from

WinCustomize Forums Top

Check the Msconfig for the instance of it...if you get rid of everything and it's still set as an .exe it will start all over again when you re-boot. Yes, I do think Spy Bot will catch it. Having said that, I think this has attached itself to a system file and is going to be hard to run down if we can't put a name to it.

[Message Edited]

Reply #9 December 11, 2003 2:33 AM from

WinCustomize Forums Top

Looks like I fixed it

(for now) . SpyBot and little deep cleaning of the registry looks like it cleaned it right up. I am amazed at how much better spybot is then adaware, I even got to fix some other problems to make it boot quicker. Thanks a million yrag

Reply #10 December 11, 2003 2:34 AM from

WinCustomize Forums Top

Welcome Guest! Please take the time to register with us.

Richer content, access to many features that are disabled for guests like commenting and posting on the forums.
Access to a great community, with a massive database of many, many areas of interest.
Access to contests & subscription offers like exclusive emails.
It's simple, and FREE!