Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Help with removing new Trojan

01 Feb 2010   #1
trinaz

Windows 7 Pro 64bit SP1
 
 
Help with removing new Trojan

Well didn't take long...my girlfriend's computer with a brand new Win 7 Pro installation has a Trojan...Bit Defender stops it from accessing the Internet and Quarantines it...but it keeps reappearing as a new name. The location is always the same though as shown in the attached JPG. The Folders (source) always stay the same...but Bit Defender just Quarantines it...can't seem to find the source and remove it tho ?

The C:\Windows\ServiceProfiles\NetworkService\AppData\Temp\ is always the same...the wbwb.tmp changes...the svchost.exe is always the same.

When I first opened the W\SP\NS directory...there was no "APPDATA" folder...and some how I managed to get the "\SERVICEPROFILE\NETWORKSERVICE\" to become hidden...while trying to show the APPDATA folder ?

Any help on how to both get the SERVICEPROFILE\NETWORKSERVICE folders to reappear, and, isolate this Trojan and remove it will be greatly appreciated.

Thanks, Tim


My System SpecsSystem Spec
.
01 Feb 2010   #2
chev65

Windows 7 Ult, Windows 8.1 Pro,
 
 

You can enable "show hidden files and folders" by going to device manager then choose folder options and click to show files and folder then hit apply. You might try either MalWarebytes or spybot S&D to get that trojen.


Attached Images
 
My System SpecsSystem Spec
01 Feb 2010   #3
ickymay

win7 ultimate / virtual box
 
 

Quote   Quote: Originally Posted by chev65 View Post
You can enable "show hidden files and folders" by going to device manager then choose folder options and click to show files and folder then hit apply. You might try either MalWarebytes or spybot S&D to get that trojen.
I agree with chev65 and suggest you run malwarebytes in safe mode twice
My System SpecsSystem Spec
.

01 Feb 2010   #4
trinaz

Windows 7 Pro 64bit SP1
 
 

Thanks guys...downloading malwarebytes now (free version I'm assuming ). Do I install this normally before rebooting to safe mode...or install it after rebooting to safe mode ?

Tim
My System SpecsSystem Spec
01 Feb 2010   #5
D3ftOn3Z

Win 7 Ultimate SP1 x64
 
 

Quote   Quote: Originally Posted by trinaz View Post
Thanks guys...downloading malwarebytes now (free version I'm assuming ). Do I install this normally before rebooting to safe mode...or install it after rebooting to safe mode ?

Tim
You should install the program normally then reboot to safe mode and run malwarebytes scan.
My System SpecsSystem Spec
01 Feb 2010   #6
Jaxryley

 
 

First thing after install is to check for updates.
My System SpecsSystem Spec
01 Feb 2010   #7
Dinesh

Windows® 8 Pro (64-bit)
 
 

Hi there, scan with Hitman Pro.
Downloads - SurfRight
My System SpecsSystem Spec
02 Feb 2010   #8
jav

Windows 7 Ultimate x86 SP1
 
 

Quote   Quote: Originally Posted by trinaz View Post
Thanks guys...downloading malwarebytes now (free version I'm assuming ). Do I install this normally before rebooting to safe mode...or install it after rebooting to safe mode ?

Tim
Hello Tim
1. Install it on normal mode.
Update it.
Run Quick scan with it on Normal mode
Tick all detection except those on C:\System Voulme Information folders
Click remove selected.
It will open up lof file.
Post it here.

2. Now run Full scan and tick all drives.
same instructions as above.
Post back log.


For other guys who recommended safe mode. Sorry for hijacking your posts, but: Malwarebytes and Safe mode
Hope you guys will understand me.


Quote   Quote: Originally Posted by Dinesh View Post
Hi there, scan with Hitman Pro.
Downloads - SurfRight

+1
Do this one aswell.
Don't worry it's really fast.
My System SpecsSystem Spec
Reply

 Help with removing new Trojan




Thread Tools





Similar help and support threads
Thread Forum
Trojan called 'Trojan.Generic.2582177' on my system
Hi, I have Window7 Ultimate 64 bit on my system. I use Bitfender as my antivirus software. This morning it informed me that it has found a file infected with a virus called 'Trojan.Generic.2582177' which it cannot clean. I've contacted Bitfender to see if they know what I should do but haven't...
System Security
Need help removing trojan.agent.cn
Help please. I'm using Malware Bytes and every restart it quarantines this trojan as svchost.exe How can I remove it completely?
System Security
Trojan.Sirefef virus, problems removing it
Since a couple of days, Microsoft Security Essentials has been giving alerts about Trojan.Win32(and 64)/Sirefef.(various shit) Says it succeeds in removing them but they return every couple of minutes. Reboot after removal didn't help a thing, nor running Malwarebytes and TDSSkiller. Any...
System Security
Removing Win32/Malagent Trojan - The Easiest Way
Well, I recently found out that I had the infamous Win32/Malagent Trojan on my PC when I ran a quick scan through Microsoft Security Essentials. As you know, if you just remove it while in your regular mode, it will just keep coming back. I found a way to easily remove it. Here's what I did. I...
System Security
System infected after removing trojan. System changes on its own.
Hi, I think I'm n the right section. Brand new Lenovo G570. Using Kaspersky Internet Security 2012 and I keep getting viruses. Restored to factory settings and I think the virus is still here. For Windows 7 update preference I chose to notify me before installing updates and let me choose...
System Security
Trojan:Win32/FakeSpypro & Trojan:JS/FakeSpypro
A little help,please.Got this trojan earlier.It disabled MSE,MBAM,Internet,CCleaner,and pretty much anything .exe.Claimed everything was infected...so says whatever fake AV program that came with it.(I wish I could figure out how to use the indention tool here)I had to restart,open task manager...
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 01:27.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App