Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Forums > System Security

Vista - Trojan found

Reply
 
Old 09-10-2009   #1 (permalink)


Vista Home premium 32 bit
 
 

Trojan found

I am writing on behalf of a friend who has Windows XP on an HP desk top computer approximately 2 years old. She uses SecureIt Plus provided through her ISP.

She was cleaning up her computer, deleting old cards she had made and also information she had saved from emails. These files were duplicating themselves within her trash bin; she had over 100 files in there and couldn't delete any of them.

I told her to try scanning with her free spyware programs and it was either SUPERAntispyware or Malwarebytes that found TROJAN.AGENT/GEN, in addition to some adware items. After she ran these she was able to empty her trash bin but said it still reported a dll file which couldn't be deleted, although this file does not show up in the trash bin. She can't restore the file because it doesn't show. But even if she could, would she then be restoring this trojan if in fact it was located within this dll?

I know she would never have placed a dll file in her trash, so the only thing I can think of is that the trojan was found within that dll file and that's how it got into the trash.

However, I don't know about Malwarebytes, but I don't think SUPERAntispyware deletes files. I think it only quarantines them. So how would it have gotten into the trash? Is there any way to clean this dll file? Is there any way to make it actually show up in the trash can?

I know this is a lot of questions. Can anyone help?

My System SpecsSystem Spec
Old 09-10-2009   #2 (permalink)


Vista Ultimate SP2 x64 Windows 7 Ultimate x64 TECHNET
 
 

Re: Trojan found

Do you have the name of the dll file?


The recycle bin may have been corrupted, you can follow this tutorial on deleting the recycle bin to possibly fix the corruption.

After that, I would run an elevated sfc/scannow to see if it can replace any missing or corrupted system files.
My System SpecsSystem Spec
Old 09-10-2009   #3 (permalink)


Vista Home premium 32 bit
 
 

Re: Trojan found

I have emailed my friend and asked her if she can give me a full description of the dll file. I will get back to you.

I am going to check out the links you gave me for the trash bin, but she was able to empty it, except for this dll file, after she scanned.
My System SpecsSystem Spec
Old 09-10-2009   #4 (permalink)


Vista Ultimate SP2 x64 Windows 7 Ultimate x64 TECHNET
 
 

Re: Trojan found

Ok, but I deleted my post since I realized it was for XP, which wouldn't be the same instructions for a corrupt recycle bin. I undeleted it since you already saw it. lol
You can try searching for how to fix a corrupt recycle bin in XP if you like, but I see you say it's alright?
But she could type sfc/scannow in the Start menu -run box in XP.
My System SpecsSystem Spec
Old 09-10-2009   #5 (permalink)


Vista Home premium 32 bit
 
 

Re: Trojan found

Yes, I noticed right away that the links were for Vista. I did look up the scf/scannow instructions for XP.

I would worry about her deleting the trash bin completely because of this dll file that is supposedly in there so won't go there for now.

Thing that has me puzzled is that I think it was SUPERAntispyware that found and took care of this trojan. I use that myself and I don't see that it has ever "removed" any files. It always puts them in quarantine and then I go into my C drive and delete them. But again, in her case if she deletes these files and this trojan was found within a dll file she'll be in trouble, won't she?
My System SpecsSystem Spec
Old 09-10-2009   #6 (permalink)


Vista Ultimate SP2 x64 Windows 7 Ultimate x64 TECHNET
 
 

Re: Trojan found

Well if it did delete some dll, it would depend on the dll as to the severity of problems she would have after it was gone, yeah. But most likely, it would be important to have it replaced.

But it's possible that if she runs sfc/scannow, it can replace the dll. If for some reason it can not, she may need the XP disk to replace the file.
My System SpecsSystem Spec
Old 09-13-2009   #7 (permalink)


Vista Home premium 32 bit
 
 

Re: Trojan found

My friend got back to me and all she said is that although there is nothing showing in her recycle bin, when she clicks to empty it she gets a pop up telling her that she can not remove dlls.

Now that she can empty her recycle bin (except for this mysterious dll) she seems to have lost interest in finding out what has happened and carrying through with this so I will thank you for your answer and close this subject.
My System SpecsSystem Spec
Old 09-13-2009   #8 (permalink)


Vista Ultimate SP2 x64 Windows 7 Ultimate x64 TECHNET
 
 

Re: Trojan found

Ok, thanks for posting back Nikilet.
My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
Solved Help needed regarding a trojan found and possible relation to mouse troubles System Security
AVG found trojan horse System Security
Help? Trojan found in PC Health Center Vista security
Trojan Found Vista hardware & devices
Printbrmui.exe not found, Printmangement.msc not found Vista print fax & scan


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46