Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Trojan Rovnix.r (1500) explorer.exe


20 Jun 2014   #1

W7 home premium 323 bit
 
 
Trojan Rovnix.r (1500) explorer.exe

Just put a new copy of Windows 7 pro on sisters laptop by phone. Just one quick question. Will a format of the drive get rid of it completely? Nod32 says its in the operating memory. Nothing is loaded on the computer so a format would not be a problem. Thanks for any advice. p.s. I told her to wait to go online because I had not finished installing Nod32. She didn't listen obviously!


My System SpecsSystem Spec
.

20 Jun 2014   #2

Windows 7 Professional 32-bit/Windows 8 64-bit/Win7 Pro64-bit
 
 

Install https://www.malwarebytes.org/mwb-download/ and tell her to run a custom scan on the hard drive.
My System SpecsSystem Spec
20 Jun 2014   #3

Microsoft Community Contributor Award Recipient

Windows 7 Pro 64 SP1
 
 

Quote   Quote: Originally Posted by larry d View Post
Just put a new copy of Windows 7 pro on sisters laptop by phone. Just one quick question. Will a format of the drive get rid of it completely? Nod32 says its in the operating memory. Nothing is loaded on the computer so a format would not be a problem. Thanks for any advice. p.s. I told her to wait to go online because I had not finished installing Nod32. She didn't listen obviously!
Malwarebytes is a good suggestion by computer0304.

I'll defer to the security experts when they arrive but if it was me, I would format and reinstall.

You may want to keep her away from it till you finish the install and load the security programs this time.
My System SpecsSystem Spec
.


20 Jun 2014   #4

W7 home premium 323 bit
 
 

Hello and thanks for the help. Here is what I have done so far. I downloaded superantispyware and ran it. it missed the Trojan. I then sent her a copy of spyware hunter 4 paid copy. updated and ran it. It caught it an cleaned. On reboot it was back and nod32 caught it and cleaned it. But it still remained. It is in the operating memory. So rather then do a reg hack I thought a clean install would be best at this point . just want to make sure the clean install is all I need to do to get rid of it.
My System SpecsSystem Spec
20 Jun 2014   #5

Microsoft Community Contributor Award Recipient

Windows 7 Pro 64 SP1
 
 

It should be all you need, I would use the diskpart clean command,

During installation, once the Languages screen opens, do this:

1. Press SHIFT+F10 - a cmd window will open
2. Type diskpart and hit enter
3. Type list disk and hit enter
4. Type select disk # and hit enter - # = the disk number you wish to clean/format
5. Type clean and hit enter

Once complete (its quick) close the Window and continue with installation.

Just out of curiosity what are you using for install media?
My System SpecsSystem Spec
20 Jun 2014   #6

Windows 7 Professional 32-bit/Windows 8 64-bit/Win7 Pro64-bit
 
 

Quote   Quote: Originally Posted by larry d View Post
Hello and thanks for the help. Here is what I have done so far. I downloaded superantispyware and ran it. it missed the Trojan. I then sent her a copy of spyware hunter 4 paid copy. updated and ran it. It caught it an cleaned. On reboot it was back and nod32 caught it and cleaned it. But it still remained. It is in the operating memory. So rather then do a reg hack I thought a clean install would be best at this point . just want to make sure the clean install is all I need to do to get rid of it.
Did you try Malwarebytes yet?
My System SpecsSystem Spec
20 Jun 2014   #7

W7 home premium 323 bit
 
 

I'm using a cd I picked up for 68.00 Windows 7 pro. I have not tried malwarebytes yet. My sister is at the wheel and she is not so savvy with computers. But I do like the diskpart Idea. Thanks everyone for the help. This is the best forum ever!! Your all super people! I will let you know how it goes.
My System SpecsSystem Spec
22 Jun 2014   #8

W7 home premium 323 bit
 
 

Malwarebytes found it but after reboot it came right back. I'm going to go with derekimo's suggestion . Thanks to all of you! Larry D
My System SpecsSystem Spec
22 Jun 2014   #9

Microsoft Community Contributor Award Recipient

Windows 7 Pro 64 SP1
 
 

Yeah, that's what I would do, specially since it's a recent install anyway.

I was asking about the install media in case you may have got a sketchy downloaded one but you should be good with the disc and the diskpart clean to wipe the drive.

You mention doing this over the phone, was the first install an upgrade or clean install?
My System SpecsSystem Spec
22 Jun 2014   #10

W7 home premium 323 bit
 
 

The os came with the coa so it has to be liget right? Im on the phone with her now and she is having trouble getting it to boot from the rom. I walked her thru the bios to have it boot from the rom, but I do not know why it's not. Because I'm remote I cant access the bios. I just hope she didn't doo something wrong! Damn!! Im thinking about trying to remove it thru the reg? Is it possible?
My System SpecsSystem Spec
Reply

 Trojan Rovnix.r (1500) explorer.exe




Thread Tools



Similar help and support threads for2: Trojan Rovnix.r (1500) explorer.exe
Thread Forum
Solved Boutique PC $1500-2000 PC Custom Builds and Overclocking
BSOD Dell Vostro 1500 win 7 x64 pro BSOD Help and Support
BSOD on Dell Vostro 1500 BSOD Help and Support
Technotrend T-1500 Media Center
BSOD 1102 and 1500 Performance & Maintenance

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:50 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33