Got a Trojan I Can't Kill!

Associate
Joined
26 Oct 2004
Posts
642
Location
Up North
Everytime I start up windows Symantic tells me I have Infostealer on my machine attached to Windows/System32/msfwp.dll in two instances. It then proceeds to quanintine the trojan. However everytime I reload windows its back. I just can't seem to get rid of it, I've updated symantic daily with no luck. When I've look for msfwp.dll I've never been able to find it, even with hidden files showing. Any Ideas?
 
Have you tried disabling auto restore then run a scan and try to delete it that way......................also if you are very skilled you can remove the key added to your registry<<<<<<<<<<< do not do this if you do not know what you are doing please note any wrong move in there will stop your pc from booting up!!!!!
 
Yes, you'll need to remove it manually then delete the corresponding reg key before rebooting the machine. Also a Windows repair wouldn't hurt.

Perhaps a full scan with Kaspersky would do this for you, though. It has excellent detection rates.
 
Sometimes when you do it manually u can delete the Dll and the trojan will have put a little installer somewhere to run again reinstalling the Dll again after reboot. Try a few different removal tools some are better than others.

If you know the exact date and time you got the trojan do a search on your pc for all files modified on that exact time and date.
 
disable system restore first


also, use windows defender + nod32 trial to get rid of it, and spybot too
 
Just tried a scan in safe mode and it found 55 threats up from 2! :eek: Although it was about 6 different repeated all over the place. Now disabled system restore and trying again.
 
Back
Top Bottom