trojan horse virus

In that link there was a link to another thread with the details.I should have given it to you separately,just to make sure.

Here it is - https://www.techspot.com/vb/topic17297.html

Hello and welcome to Techspot.

Go HERE and follow the instructions.

Then post a fresh HJT log, only after doing the above.

Regards Howard :wave: :wave:

alright did all that in safe mode, and i turned system restore back on.
avg still detects the virus at startup.

i attached a log file after done all that.

Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

Go to add remove programmes in your control panel. Uninstall anything to do with(if there).

C:\Program Files\??pPatch

Close control panel.

Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

Click on the processes tab and end process for(if there).

rundll32.exe

Close task manager.

Run HJT with no other programmes open. Have HJT fix the following, by placing a tick in the little box next to(if there).

O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1135396918\ee\AOLSoftware.exe

O4 - HKCU\..\Run: [Cafdy] C:\Program Files\??pPatch\rundll32.exe

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

Click on the fix checked button.

Close HJT.

Locate and delete the following bold file(if there).

C:\Program Files\??pPatch\rundll32.exe

Reboot into normal mode and turn system restore back on.

Get yourself some antivirus protection and a firewall.

AVG free and Zonealarm free are very good. Just Google for these.

Regards Howard

Thanks a lot, my system is fine now. I appreciate it. I was just wondering, how do you guys know all this? Did you learn it from somewhere? or is it just from experience? Like how can you pick out exactly whats bad from the log.

I learned an awful lot from RBS. He is one of the Techspot mods.

You`re quite right about the experience thing. You just get used to what should and what shouldn`t be in a HJT log. Google is a great source of info for malware etc.

Glad your problem is solved.

Regards Howard

It's a combination of knowledge, experience, and a question of knowing where to look if you don't know something (which then becomes knowledge and experience )

I know Howard in particular has hundreds if not thousands of these HJT logs fixed. Sometimes, he can really work miracles, and fix things just by knowing the symptoms and doing a little guess work. RBS is the same.

Me, I used to be reasonable at it, but I stopped doing them and it's as though everythings changed infectionwise these days, So I'm just learning all over again - a bit like riding a bike really. You never forget, but when you stop any length of time, you're not as good as you used to be, but will pick it up pretty quickly again, depending on how good you were before.

edit: Howard got there first - again. lol

which virus protection is better?
AVG 7.1 Email server edition or AVG free, just for a personal computer.

AVG, because it doesn't cost anything, and it's a personal computer rather than an email server

I only use the free version and have had absolutley no problems. I can`t comment on the 7.1 version as I`ve never used it.

If it`s for private home use, go with the free version, unless you`ve got some specific reason for wanting the 7.1 version.

Regards Howard

Edit Damn, Spike got there first