Desktop

See the Symantec web site for other instructions
First you need to disable System Restore

Download Spybot - Search & Destroy http://tomcoyote.org/SPYBOT/index1.html Now press Settings, and Settings again. Go to the Webupdate section, and check "Display also available beta versions". Now press Online, and search for, put a check mark at, and install all updates. Next, close all Internet Explorer windows, hit 'Check for Problems', and have SpyBot remove all it finds. Reboot.


Then... Download the latest version of Ad-Aware at http://www.lavasoftusa.com/support/download/


After installing AAW, and before running the program, FIRST update the reference file following these instructions. http://www.lavahelp.com/howto/updref/index.html Now do the following:


Scanning Engine: check: "Unload recognized processes during scanning."

Check: "Let Windows remove files in use after reboot." Press "Scan Now" - Check option "Use Custom scanning options" - Check option "Activate In-Depth Scan" - Press "Select drives\folders to scan" - Select the active partition which is usually C:


Now press "Next" to let Ad-aware scan your drives... It will find a number of "bad" files and registry keys. Right-click in that pane and choose "select all" Now press "Next" again. It will ask you whether you'd like to remove all checked items. Click OK.


close Ad-Aware, and reboot.

Dmiles Thanks for answering so quick, umm isnt a trojen a virus, not spyware? Also have both the programs you mentioned, completly up to date, have tried both. Symantic was not that helpfull, as the registy edits did not match my registry. Also a search of virus encyclopedias gave no results. Any ideas???????
Its 2.42am here and I'm still trying to remove it.

Hi,

Since you plan to re format after cleaning, I would suggest trying Adware Away. I have found that it finds and cleans stuff the others don't.
My experience with W98 machines is that after running Adware Away the OS doesn't work anymore, so I don't normally use it on W98,. Its OK with W2K and XP.
Available from "www.AdwareAway.com"

Run a full system scan first, following prompts. When finished and cleaned run individual malware searches. This will give you a total of malware found for that type at the bottom. You will need to go back through the list to find which one(s) are there and then use the removaltool for it.

Bootup in safe mode and delete explorer.cab file. Use file finder or retrieve location from anti-virus software.

It appears that trojan is hidden in a cabinet file (similar to a zip file). Should be able to delete cab file. May have to change from read-only or system. Right click on file and select properties.

Dalton

Willcomp, I will need to replace it, (explorer.cab) or are you thinking I can just heal it? Have my win 98se disks but its a Compaq restore disk that came with the puter, alot harder to replace individual files, even cabs. any ideas?

Am also unable to scan disk, or defrag.

re: Adaway, I need to backup files of my daughters, before the Os goes belly up, but dont want the trojan on the backups.