Trojan Rovnix.r (1500) explorer.exe

Page 1 of 2 12 LastLast

  1. Posts : 26
    W7 home premium 323 bit
       #1

    Trojan Rovnix.r (1500) explorer.exe


    Just put a new copy of w7 pro on sisters laptop by phone. Just one quick question. Will a format of the drive get rid of it completely? Nod32 says its in the operating memory. Nothing is loaded on the computer so a format would not be a problem. Thanks for any advice. p.s. I told her to wait to go online because I had not finished installing Nod32. She didn't listen obviously!
      My Computer


  2. Posts : 2,410
    Windows 7 Professional 32-bit/Windows 8 64-bit/Win7 Pro64-bit
       #2

    Install https://www.malwarebytes.org/mwb-download/ and tell her to run a custom scan on the hard drive.
      My Computer


  3. Posts : 17,322
    Win 10 Pro x64
       #3

    larry d said:
    Just put a new copy of w7 pro on sisters laptop by phone. Just one quick question. Will a format of the drive get rid of it completely? Nod32 says its in the operating memory. Nothing is loaded on the computer so a format would not be a problem. Thanks for any advice. p.s. I told her to wait to go online because I had not finished installing Nod32. She didn't listen obviously!
    Malwarebytes is a good suggestion by computer0304.

    I'll defer to the security experts when they arrive but if it was me, I would format and reinstall.

    You may want to keep her away from it till you finish the install and load the security programs this time.
      My Computer


  4. Posts : 26
    W7 home premium 323 bit
    Thread Starter
       #4

    Hello and thanks for the help. Here is what I have done so far. I downloaded superantispyware and ran it. it missed the Trojan. I then sent her a copy of spyware hunter 4 paid copy. updated and ran it. It caught it an cleaned. On reboot it was back and nod32 caught it and cleaned it. But it still remained. It is in the operating memory. So rather then do a reg hack I thought a clean install would be best at this point . just want to make sure the clean install is all I need to do to get rid of it.
      My Computer


  5. Posts : 17,322
    Win 10 Pro x64
       #5

    It should be all you need, I would use the diskpart clean command,

    During installation, once the Languages screen opens, do this:

    1. Press SHIFT+F10 - a cmd window will open
    2. Type diskpart and hit enter
    3. Type list disk and hit enter
    4. Type select disk # and hit enter - # = the disk number you wish to clean/format
    5. Type clean and hit enter

    Once complete (its quick) close the Window and continue with installation.

    Just out of curiosity what are you using for install media?
      My Computer


  6. Posts : 2,410
    Windows 7 Professional 32-bit/Windows 8 64-bit/Win7 Pro64-bit
       #6

    larry d said:
    Hello and thanks for the help. Here is what I have done so far. I downloaded superantispyware and ran it. it missed the Trojan. I then sent her a copy of spyware hunter 4 paid copy. updated and ran it. It caught it an cleaned. On reboot it was back and nod32 caught it and cleaned it. But it still remained. It is in the operating memory. So rather then do a reg hack I thought a clean install would be best at this point . just want to make sure the clean install is all I need to do to get rid of it.
    Did you try Malwarebytes yet?
      My Computer


  7. Posts : 26
    W7 home premium 323 bit
    Thread Starter
       #7

    I'm using a cd I picked up for 68.00 w7 pro. I have not tried malwarebytes yet. My sister is at the wheel and she is not so savvy with computers. But I do like the diskpart Idea. Thanks everyone for the help. This is the best forum ever!! Your all super people! I will let you know how it goes.
      My Computer


  8. Posts : 26
    W7 home premium 323 bit
    Thread Starter
       #8

    Malwarebytes found it but after reboot it came right back. I'm going to go with derekimo's suggestion . Thanks to all of you! Larry D
      My Computer


  9. Posts : 17,322
    Win 10 Pro x64
       #9

    Yeah, that's what I would do, specially since it's a recent install anyway.

    I was asking about the install media in case you may have got a sketchy downloaded one but you should be good with the disc and the diskpart clean to wipe the drive.

    You mention doing this over the phone, was the first install an upgrade or clean install?
      My Computer


  10. Posts : 26
    W7 home premium 323 bit
    Thread Starter
       #10

    The os came with the coa so it has to be liget right? Im on the phone with her now and she is having trouble getting it to boot from the rom. I walked her thru the bios to have it boot from the rom, but I do not know why it's not. Because I'm remote I cant access the bios. I just hope she didn't doo something wrong! Damn!! Im thinking about trying to remove it thru the reg? Is it possible?
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 13:31.
Find Us