Downloader.dyfica.aj and clumbs of my greying hair.

[viking12344]

.....being pulled out.


I have a machine that has this damn trojan on it........and its usuually associated with system restore on ME and XP.....problem is, this is a 98 machine and here is what I have tried that does not remove it.

AVG virus
CW shredder
adaware
spybot

Avg will find it but wont be able to remove it.....cwshredder will remove it but on reboot its back.....same with adaware

Please....if anyone knows anything about how I can remove this damned thing, I will give you my first born.

Thank you ,

[elroy]

There seems to be an abundance of reported problems associated with "downloader.xxx.xxx". My guess it is a spyware type program and will require registry editing to remove it. Several posts have made reference to this same thing recently.

Run a google search on
" remove trojan downloader. "

[nukes]

Check the HKLM+CU\Software\microsoft\windows\currentversion\ run, runservices etc keys in the registry. See if there's anything suspect in there.

[viking12344]

Ok thanks fellas, will try that also......very odd thing here...on the 3rd reboot and avg scan, avg removed the trojan. I really dont understand how it did not the first two times....nothing changed.

[nukes]

I suspect it was hidden somewhere, inside some dll or something, and was called at boot, causing it to reinstall itself.

[dafanman]

viking12344,
I just finished doing the exact same thing on a clients machine on thursday

Here is what I did:
Download the latest ad aware and update
Download HIjackthis and run it, that prog works wonders.

In additon delet temp, temp internet, mru's recent, ect....

As i reread your post I see you have resolved the issue, cool!
I would reccomend that if you work on systems you will see this again, many many times, Hijack this is a good tech tool to have.


Laterz,
dafanman

[viking12344]

I never even heard of hijack.....going to find that and d/l it now...thanks for that nugget.

[nukes]

http://www.spychecker.com/program/hijackthis.html