RESOLVED - Trojan Horse / Virus Problem

[Terry Olson]

I'm looking for some advice:

I'm running windows XP 2002, service pack 2, and using McAfee for virus protection / firewall. I have McAfee scheduled to automatically update and scan weekly.

Tonight I received a message from McAfee indicating that a Trojan has been found. McAfee identifies the trojan as JS/Wonka. My McAfee options are to clean, quarantine, delete, or cancel. When I attempt any of the first three I am unable to do so. The error message indicates that the "program" may be write-protected.

I looked at the file path (C:/documents and settings/kristy olson/local settings/temporary internet files/content.IE5/p9tb6anm) thinking I could go directly to the file and delete it. When I attempt to follow the file path (starting at the C drive, clicking on documents and settings, clicking on kristy olson) I find that I can't follow the identified path any further because there is no folder marked as "internet settings" in the Kristy Olson folder. For all I know this is correct, but it doesn't seem so to me.

McAfee's site provides conflicting information so I'm not sure what to do about it.

How can I solve this problem?

Thanks in advance.

 

[Terry Olson]

Re: Trojan Horse / Virus Problem

Re: Trojan Horse / Virus Problem

I think I may have it solved. I used "System Restore" and went back to Sunday the 10th. All appears to be OK now but I'm in the process of manually scanning to see if it's gone.

I know just enough about computers to be dangerous I guess.

 

[rickdb1boat]

Re: Trojan Horse / Virus Problem

Re: Trojan Horse / Virus Problem

Most times the computer by default is not set to show all files and folders. You need to go to Control panel, Folder Options, Click on View, then under "Hidden files and folders, make sure "Show hidden files and folders" is checked. Sounds like you've taken care of it though, using the restore. I've done that in the past with success...

 

[Dunaruna]

Re: Trojan Horse / Virus Problem

Re: Trojan Horse / Virus Problem

[colour=blue]You might want to change the 'weekly' scan/update to 'daily'.

 

[jall65]

Re: Trojan Horse / Virus Problem

Re: Trojan Horse / Virus Problem

Terry,
Just to make sure run your antivirus in safemode

 

[mattttt25]

Re: Trojan Horse / Virus Problem

Re: Trojan Horse / Virus Problem

and stop looking at porn.

 

[Plainsman]

Re: Trojan Horse / Virus Problem

Re: Trojan Horse / Virus Problem

The programs were running, that is why they couldn't be removed. Even if you had found the folder, you wouldn't be able to delete them, you'd get an "Access Denied".

The best way to remove this folder is to start in Safe Mode (press the F8 key just as the BIOS finishes loading but before the Windows screen first appears). By doing so most programs will not load into memory (start). You can then go the the folder and delete it.

If your comftable with DOS, you can start in Safe Mode with Command Prompt to achive the same result.

 

[Terry Olson]

Re: Trojan Horse / Virus Problem

Re: Trojan Horse / Virus Problem

I appreciate the advice - looks to be solved.

Thanks.