Discussion Locked

Win XP-home - WOW.exe infected

0 helpful
6 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

The WOW.exe is infected with Downloader.1stbar.3.BF trojan horse. The AVG scanner finds this infection but cannot do anything with it. Spybot S&D 1.3 does not see it. How can I fix this situation?
Thanks!

6 replies

by cg it

disable system restore then rerun your removal tools. 99% of the reason a virus or trojan keeps showing up on XP Home editions is that system restore is enabled.

by joseph moore

Did you boot into Safe Mode, then run the full antivirus scan with AVG?

Also, like DR said, purge out the System Restore content.

Last, run SFC /SCANNNOW to have Windows scan for system files that have changes and replace any that are different. Do this after the antivirus scan.

by gh0ztalarm

Do all what the other suggested, if nothing, then turn off sys restore virus scan if still nothing delete it and find a replacement form someone, and virus scan it.

by itek4u

I fixed it! Thanks for all your comments. This is what I did:

I booted into safe mode, cleaned all files out of Windows\Temp. I ran Hijack This and found a couple of the primary idiots and used the program to start the destroy,

coolsearch.biz (this was supposed to have been removed, it is a varient of CWS that has the deeply hidden file which will allow it to come back after a couple of hours; a major obscene nuisance) and

C:\WINDOWS\System32\lblirb.exe

I deleted lblirb.exe while in safe mode. I also cut off system restore because it was residing there, too. AVG is a great scanner, but it needed a little boost. I did an online scanner and found some more pieces of the puzzle:
Java Bytever.Troj
Buddylink.A
HTML Redir.A
Java Bytever.A-1
JS Exception.gen
BKDR Ruledor.E

The machine is purring nicely now.

This discussion is closed to new replies.