Help!My Prob - Trojans n how to Remove them - Aruna.

[sksaruna]

Hi Friends,

I'm using AVG anti virus n spy ware.My os is xp-sp2. As i don't much abt viruses,Trojans i m using DEEP FREEZE s/w.[Faronics states that: Deep Freeze instantly protects and preserves original computer configurations, eliminating routine IT maintenance while allowing complete unrestricted access to a workstation. Regardless of the changes made to a workstation, simply restart to reset the computer to its original state. The result is a protected, parallel network, free of viruses and unwanted programs.The web address is :Faronics Deep Freeze and other Intelligent Utilities for ABSOLUTE Control.] I found it works well as they have told.. until i was affected by a Trojan.

Last week, i was affected by a Trojan(I forgot the name) in WinRAR folder in c:\pgm files.Avg doesn't heal that Trojan...so i Deleted that file manually(shift+del) by selecting them in winRAR folder. After that I re scanned my sys n then got a new msg.. "BOOT SECTOR CHANGED"...
Now pc gets stuck sometimes.Also Getting error msg when i execute some exe files...like.. "This program encountered a problem n needs to close."

Now My doubts r:

1.Every time i start the computer... Deep freeze ll reset the computers original state.. then how the trojan affected my pc?(i performed the scanning as soos as i started d computer.) so is DeepFreeze nt worthy? if so, then could you tell me any other best application like this?

2. will the change in d Boot sector cause anything wrong in my pc?if so, what should i do next ?

3. I heard that Trojans ll affect the reg of a pc.. is it true?

4. If it affects the reg.. what harm ll happened to the pc? and how to prevent the pc from that? how to restore the Reg? Also.. Will Formation of that drive reset the reg values n everything? n ll d formation del all d trojans?

5.How can i fix the reg prob manually?

Originally Posted by Admin

http://forums.sureshkumar.net/newrep...wreply&p=30850

6. according to d above Thread....When i view my Task manager... i saw SVCHOST.EXE image .. is it virus/Trojan/spy ware?
in taskmanager i saw these following svchost processes:

image name | user name | CPU Mem | Usage
SVCHOST.EXE | LOCAL SERVICE | 00 | 236K
SVCHOST.EXE | NETWORKSERVICE | 00 | 1172K
SVCHOST.EXE | SYSTEM | 00 | 18028K
SVCHOST.EXE | NETWORK SERVICE | 00 | 1396K
SVCHOST.EXE | SYSTEM | 00 | 1568K


7. Also.. Want to learn abt registries.. so where can i get the tutorials to learn..and from which i hav to start?

I am eagerly wait for ur reply Friends. Hope U ll Guide me reg this n i ll get stuff from u.

Thank You Friends.

Regards,
SK.ARUNA

[GEEK]

Why dont you reinstall the OS once ?

[GEEK]

1 : I never heard about deep freeze, if you are seriously care about your system security use kaspersky (www.kasprsky.com) antivirus. It is the best on the planet.

2: http://antivirus.about.com/od/securitytips/a/bootsectorvirus.htm

3: Yes they do affect.

4: Yes if you format once, everything will get cleared. Always have a back up copy of your registry.

To prevent the pc from these attacks always use a updated anti virus with good firewall settings.

5: You can do it, go through one good tutorial to learn more about registry.

6: Svchost.exe is not a virus. svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated.

7: search in google.com. Download below tutorials…

http://bobshare.com/file.php?file=9f614aedf3e73fe1c12b7b21738ce30f

[t_mohan]

Hi aruna,

If you think that if your Boot Sector is infected with virus, there is nothing you can do even if you format the system.
So you have to do onething, We used to have a Norton Antivirus version 5, This has an option of creating NAV(Norton Antivirus Disk) which can cleanup the boot sector. So what you have to do is try with some of your friends/colleagues or someone , get this version and install it on clean machine, in the menu we will have an option to create NAV Disk- get some clean floppies and make disks, It wil be asking for 5 disks i think, i dont remember exactly.

After that change your boot sequence to Floppy in the BIOS in ur system and insert the first disk, it will be asking for different options and continue further with the sequence of disks

Hope it helps you,

Let me know your questions

Thank You

[sksaruna]

I reinstalled My os. but again often i m geeting "the program is not resopnding" error when i open some application..like jetaudio,wmp,nero,zone alarm firewall.. some times even when i open My computer.

Also I m getting the same error "boot sector change" while i scan with avg.

what i hav to do now? should i format it once again?


Could You tell me What is the proper way to Format the Pc and to install xp?

Normally i use 98 cd to boot up... n i select the option boot with cd.. then in dos prompt i ll format by using the cmd "format c:"... after formation i exit from dos probpt.. then.. i ll insert my xp cd.. then boot with cd.. n l follow d instructions...is it the right way?

if nt pls tell me how to format...what r d imp pts i should follow while formatting...and all...

Aruna

[Exsecratio]

Quick Note:Boot sector and partition sector viruses are NOT affected by Format.

[t_mohan]

Hi Aruna,

Please follow the steps that i have suggested in the same post. then u can get rid of viruses in boot sector. As far as i know this is the only way u can clean ur disk.

Let me know your questions

Thank You

[kris_121]

Hi Aruna,
The better way of installing OS(Windows- XP, Professional, SP1,SP2) is as follows:
Insert the bootable cd->after some process it will ask you to select the drive->it will ask you to format->select the regular format option(Not quick) and it is better to select NTFS->and the regular process continues.
try this out

Kris