Trojan.Desktophijack help Part 2

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

bookbabe - 31 Dec 2005 02:53 GMT

Afraid my questions may be missed as a reply to my own post, re-posting as new:

Thanks for your response. "Why" answers are always helpful. Just a couple
more questions:

My understanding of what you outline below is that I will be Disabling
System Restore, Updating virus definitions and Running a full scan. Am I not
doing anything about step 4 then, "delete any values added to the registry"?
Or if I am, can you offer some instructions that are more straightforward
than Symantec's?

Also, you write >> The same applies to the desktop wallpaper. you can check
this from the display option <<

I'm not clear about what applies to the desktop wallpaper, that is, what I
will be checking, from what display option, or where that is. Further along
in your post I see steps for resetting the homepage. Does the wallpaper
process follow along the same lines?

Thankyou so much,

bookbabe

"John Barnett MVP" wrote:

> With the exception of 'delete any values added to the registry' all the
> others are straightforward.
> You need to disable system restore in order to delet all the system restore
> points. The reason for this is that the trojan was more than likely saved
> when a system restore was taken. Deleting all system restore points means
> you cannot restore your system to a previous time, thus re-infect the
> machine.
> Go to control panel and click the system icon. next click the system restore
> tab and then click your mouse on the box marked 'turn off system, restore on
> all drive'. Click apply followed by OK. All system restore points will now
> be deleted. All you need do then is open system properties again (click the
> system icon), click the system restore tab and then remove the tick from the
> box 'turn off system restore on all drives'. System restore will now start
> monitoring again and creating restore points.
>
> Make sure your anti virus definitions are updated, by updating Norton Anti
> Virus, then run a full scan. if nothing shows up the trojan has been
> removed.

The same applies to the desktop wallpaper. you can check this from the

> display option.
>
> You will, of course, need to restart your pc at some point to ensure that
> everything is working okay.

Go to control panel and click the Internet options icon. on the general tab

> make sure that your home page is the one you have always had, not some
> obscure website. If it is not the usual home page you use, then change it
> back to your usual home page.

Signature

Part 1

"bookbabe" <bookbabe@discussions.microsoft.com> wrote in message

> news:6728CE70-E8BA-485A-860B-C158397041F2@microsoft.com...

Sorry if my questions are long and ridiculous, but I am truly a novice at

> > this all.
> >
> > While online, I got a Norton security alert about Trojan.Desktophijack. I
> > was very tired and don't remember if it said "detected" or "infected"
> > (don't
> > know if that matters), but thought it said something about not being able
> > to
> > repair it. I was guided to the Symantec site, and it confuses me.
> >
> > In Norton Anti-Virus reports, it showed the virus as quarantined. The
> > details for it said it was a "backed-up copy of a file that has been
> > repaired" and indicated that I could delete it. In Symantecs "What to do
> > after you quarantine a file", it instructs you to determine if the file is
> > needed. Looking at their steps to do this, I couldn't tell *for sure*; my
> > best guess was that it was not, so I finally hit "delete". I am a worrier,
> > and I'm worried about having done this.
> >
> > The virus no longer shows up in quarantine. I don't have any trouble with
> > my
> > desktop wallpaper or icons right now (haven't yet shut down and restarted
> > computer). This Symantec "What to do after..." page does not show any
> > further
> > steps to follow, but another "Security Response" page says to
> >
> > Disable System Restore (Windows Me/XP).
> > Update the virus definitions.
> > Run a full system scan and delete all the files detected as
> > Trojan.Desktophijack.
> > Delete any values added to the registry.
> > Reset the Internet Explorer home page.
> > Reset the desktop wallpaper.
> >
> > There are many, many steps I could screw up doing all of that. I don't
> > understand any of it. So, do I need to do the above or anything else? Any
> > problem having deleted that back-up file? Or could I really be good to go
> > now?
> >
> > Thanks for your patience and your help.

Reply to this Message

Panda_man - 31 Dec 2005 13:13 GMT

http://free.hit.bg/fightmalware/homepage_en.htm

Click on the malware removal instrctions and perform them.If you can't
understand ,contact a professional IT guy or a computer firm and they should
help you.

Panda_man

Signature

Prevention is always better than cure !
Panda TruPrevent - the most intelligent technology to combat unknown malware
http://www.pandasoftware.com
http://free.hit.bg/fightmalware/homepage_en.htm

> Afraid my questions may be missed as a reply to my own post, re-posting as new:
>
[quoted text clipped - 92 lines]
> > >
> > > Thanks for your patience and your help.

Reply to this Message