How to remove malicious software.

I have a spyware trojan that I cannot delete. I have run Norton antivirus in both normal and safe modes and it says that it deleted the files.

I have also run Antispyware Beta 1 in both modes and it says that it has deleted the Trojan.Startup.NameShifter.d3do Trojan (2 signatures) and Possible Browser Hijak Browser modifier, but the program remains.

It automatically launches Explorer to about:blank and has pop-up adds for anti-spyware. It has also added files to my favorites list. The Trojan does not run in safe mode.

What can I do to delete this file?

Thanks!

John

This question was answered on June 24, 2005. Much of the information contained herein may have changed since posting.

---

PLEASE PRINT THIS OUT OR SAVE THESE INSTRUCTIONS TO A NOTEPAD FILE AND SAVE IT TO YOUR DESKTOP

Trojan.Startup.NameShifter.d3do Signature Details: The following information includes some of the standard signatures* associated with this spyware threat Please do not attempt to manually remove these items from your computer; removing these items incorrectly or partially can cause your computer to experience critical errors prevent your computer from restarting or cause loss of Internet connectivity If you are infected with Trojan.Startup.NameShifter.d3do, you can clean your machine of this spyware threat for free by downloading CounterSpy at the following link:

http://www.download.com/3001-8022_4-10375153.html?idl=n

In addition I will include other helpful information for you in order to remove spyware, ad-ware and Trojan from your PC.

Microsoft� Windows� Malicious Software Removal Tool at: http://www.microsoft.com/downloads/details.aspx?familyid=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

After installation is completed run the remove tool When the detection and removal process is complete, the tool displays a report describing the outcome, including which, if any, malicious software was detected and removed The tool creates a log file named mrt.log in the %WINDIR%\debug folder.

The Malicious Software Removal Tool, will not a replacement for an anti-virus product Microsoft releases an updated version of this tool on the second Tuesday of each month.

Microsofts Windows AntiSpyware (Beta) which is free Before you download Windows AntiSpyware please check to make sure you system meets the requirements which you can check at the following website: http://www.microsoft.com/athome/security/spyware/software/requirements.mspx

After you confirm that your systems meets the requirements then download and install Microsoft AntiSpyware at: http://www.microsoft.com/downloads/details.aspx?FamilyID=321cd7a2-6a57-4c57-a8bd-dbf62eda9671&displaylang=en

After completing the installation process run a full scan of your computer and Windows AntiSpyware (Beta) displays detailed information about every spy ware program detected, including a description of the threat, where it is located on your computer, a risk rating, and a recommended action to take This information enables you to make informed decisions regarding removal Detected spyware can be either temporarily disabled using Spyware Quarantine or permanently removed from your computer.

Next go to the Lavasoft Web site at: http://www.lavasoft.de/ms/index.htm Download and install a safe and free copy of there anti-spyware utility to eliminate unwanted contaminants that may spark the message you are receiving on your PC.

After completing the installation process run a full scan of your computer.

GOOD LUCK!

About the author

Posted by Kisha of Katharine Gibbs School - New York on June 24, 2005

Need Help with this Issue?

We help people with technology! It's what we do.
Contact or Schedule an Appointment with a location for help!