pc problems

rob777vdy · #1 03-21-2008, 01:46 PM

afternoon all.theres something strange happening to my pc,i have nod32 antivirus system (i run it once a month or so).its telling me theres 2 trojan viruses in my c/documents,when i look in c/documents i cant find these viruses.anyone have any ideas why ??? cheers lads.rob

waylay00 · #2 03-21-2008, 01:48 PM

Are you enabled to view hidden files?

rob777vdy · #3 03-21-2008, 01:53 PM

no i dont think so mate.its doing my head in cos i cant fix it aaaggghhh.

**jim777** · #4 03-21-2008, 02:06 PM

Sometimes AV software can't actually delete the virus infected files, so it renames them and quarantines them. Has that happened here?

jb4674 · #5 03-21-2008, 02:10 PM

Download the malicious software removal kit from MS for starters...

Jimmy

rob777vdy · #6 03-21-2008, 02:40 PM

Quote:

Originally Posted by jim777

Sometimes AV software can't actually delete the virus infected files, so it renames them and quarantines them. Has that happened here?

no mate it hasnt quarantined the virus.just tells me where the virus has been located (c/documents).but ive checked that no sign.

chaos731 · #7 03-21-2008, 02:41 PM

Download, install, and run AdAware from lavasoft. I've been using it for years, and it's never let me down on trojans.
Good luck.

**jim777** · #8 03-21-2008, 04:04 PM

Is it giving you the name of the trojan it's finding, or just telling you where it found something?

shogun · #9 03-21-2008, 05:27 PM

suggestion: download or buy real antivirus software that has on-access scanning + auto updates virus definitions

rob777vdy · #10 03-21-2008, 08:05 PM

ok lads n lasses,firstly thanks for your advice. ive tried the anti virus that jimmy and chaos advised me to try,no joy although both removed other problems.this is what my nod32 is telling me, see if yous can make head nor tail of this...filec:\documents and settings data\sun\java\deployment\cache\javapi\v1.o\jar zip is infected with java/trojandownloader openstream.nab...anyone familular with this ???.thanks again rob.

Gurj · #11 03-21-2008, 08:50 PM

Quote:

Originally Posted by waylay00

Are you enabled to view hidden files?

I'd definately try to get rid of the virus by this method. I can't remember how to enable this, but if you do a search on the web, you'll find out how.
Once you can see the hidden files, you might be able to delete them. However some of the viruses can be difficult to delete and you may need to do so in safe mode. Again, if you google your particular virus, you may find instructions on how to get rid of it.

I'd also try downloading Spybot Search & Destroy and let that locate and get rid of any viruses you have on your system. It should be free to download.

Dee · #12 03-21-2008, 10:12 PM

Enabling hidden files is easy:

* Open any window
* Go to Tools > Folder Options > View (tab)
* Scroll down a little and you'll see the options.
* Enable viewing of hidden files and folders, AND uncheck the box for hiding protected operating system files.

No disrespect to anyone who made suggestions, but AdAware and many anti virus programs are occasionally useless. My suggestion is to download Hijack This, do a scan and post a log file. We can then go through each item and do a web search on them. It can be time consuming if you have a lot of junk (startup programs, lots of services running, etc) but it's worth it.

Find Hijack This here

And here's lots of other anti spyware tools.

There's nothing wrong with using any of these but don't expect miracles. Another suggestion: Download CCleaner and run it before running any anti-spyware tools. I also recommend a good registry cleaner.

CCleaner
RegSeeker

For CCleaner, install it, but don't click the option to install Yahoo toolbar during the installation process.

For RegSeeker, click "Clean The Registry" button and delete everything it finds. Don't be scared of doing this, it automatically makes a backup.

Run those before running Hijack This.

Quote:

Originally Posted by shogun

suggestion: download or buy real antivirus software that has on-access scanning + auto updates virus definitions

He has NOD32, it's one of the best along with Kaspersky.

Dee · #13 03-21-2008, 10:41 PM

Quote:

Originally Posted by ibanez777vbk

ok lads n lasses,firstly thanks for your advice. ive tried the anti virus that jimmy and chaos advised me to try,no joy although both removed other problems.this is what my nod32 is telling me, see if yous can make head nor tail of this...filec:\documents and settings data\sun\java\deployment\cache\javapi\v1.o\jar zip is infected with java/trojandownloader openstream.nab...anyone familular with this ???.thanks again rob.

OK, somehow I missed that post. Your problem is infected Java temp files. Look here:

http://forums.techguy.org/malware-re...lved-help.html

http://www.wilderssecurity.com/showthread.php?p=1183937

**jim777** · #14 03-21-2008, 11:14 PM

You can try this as well:

http://www.trojan-downloader-removal...ownloader.html

rob777vdy · #15 03-21-2008, 11:41 PM

YAHOOOOOOO BINGO.

.i followed what dee said opened hidden files,and located the viruses and deleted them.then i ran my nod32 all is fine now.i would never have sussed this out by myself.thanks again to everyone for the help.love yas all rob