Win98 Trojan
Thursday, December 11, 2003 by kongit | Discussion: Stardock Software
I went home for the holidays to my parents house from college. At home my mom told me that the computer upstairs(a p2 450mhz with win98) has gotten a virus and many other problems. My dad fixed most of it last night, but there still seems to be a remnant of the trojan. It keeps setting the homepage on ie to a porn page. That is not good for a family computer. I couldn't find a way to change it back without the trojan reversing the homepage back to the same site. Any help will greatly be appreciated. 
yrag
Reply #2 Thursday, December 11, 2003 12:54 AM
Reply #2 Thursday, December 11, 2003 12:54 AM
Look in Task Manager/Processes for something running you can't identify. Let me know what it is...
kongit
Reply #3 Thursday, December 11, 2003 1:24 AM
Reply #3 Thursday, December 11, 2003 1:24 AM
done both 
Hijack this came up with nothing, and all the processes I know
Hijack this came up with nothing, and all the processes I know
yrag
Reply #6 Thursday, December 11, 2003 1:46 AM
Reply #6 Thursday, December 11, 2003 1:46 AM
Ok...1st check 'Internet Options' and make sure your Home Page is set correctly. That done go to http://www.safer-networking.org/ and install and run. Write whatever name it gives you as the culprit and let Spy Bot remove it. In 'Run' type msconfig and click OK. If that file shows in your startup proggies, uncheck it and re-boot. When you get the modified Boot.ini file prompt, click to use modified version.
kongit
Reply #7 Thursday, December 11, 2003 1:52 AM
Reply #7 Thursday, December 11, 2003 1:52 AM
Yes my homepage is set correctly, or at least it is after I change it. When I restart the homepage changes. I used adaware, system mechanic, and TrendScan Antivirus, do you think spybot will catch it? Will try after I search the hardrive and Registry for instances of the homepage that shows up. I have already found several instances in the registry.
yrag
Reply #8 Thursday, December 11, 2003 1:59 AM
Reply #8 Thursday, December 11, 2003 1:59 AM
Check the Msconfig for the instance of it...if you get rid of everything and it's still set as an .exe it will start all over again when you re-boot. Yes, I do think Spy Bot will catch it. Having said that, I think this has attached itself to a system file and is going to be hard to run down if we can't put a name to it.
[Message Edited]
[Message Edited]
kongit
Reply #9 Thursday, December 11, 2003 2:33 AM
Reply #9 Thursday, December 11, 2003 2:33 AM
Looks like I fixed it (for now) . SpyBot and little deep cleaning of the registry looks like it cleaned it right up. I am amazed at how much better spybot is then adaware, I even got to fix some other problems to make it boot quicker. Thanks a million yrag
(for now) . SpyBot and little deep cleaning of the registry looks like it cleaned it right up. I am amazed at how much better spybot is then adaware, I even got to fix some other problems to make it boot quicker. Thanks a million yrag Please login to comment and/or vote for this skin.
Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:
- Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
- Access to a great community, with a massive database of many, many areas of interest.
- Access to contests & subscription offers like exclusive emails.
- It's simple, and FREE!
Reply #1 Thursday, December 11, 2003 12:54 AM