General discussion

Locked

Win XP-home - WOW.exe infected

By itek4u ·
The WOW.exe is infected with Downloader.1stbar.3.BF trojan horse. The AVG scanner finds this infection but cannot do anything with it. Spybot S&amp 1.3 does not see it. How can I fix this situation?
Thanks!

This conversation is currently closed to new comments.

6 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by CG IT In reply to Win XP-home - WOW.exe inf ...

disable system restore then rerun your removal tools. 99% of the reason a virus or trojan keeps showing up on XP Home editions is that system restore is enabled.

Collapse -

by itek4u In reply to

Poster rated this answer.

Collapse -

by Joseph Moore In reply to Win XP-home - WOW.exe inf ...

Did you boot into Safe Mode, then run the full antivirus scan with AVG?

Also, like DR said, purge out the System Restore content.

Last, run SFC /SCANNNOW to have Windows scan for system files that have changes and replace any that are different. Do this after the antivirus scan.

Collapse -

by Gh0ztALArM In reply to Win XP-home - WOW.exe inf ...

Do all what the other suggested, if nothing, then turn off sys restore virus scan if still nothing delete it and find a replacement form someone, and virus scan it.

Collapse -

by itek4u In reply to Win XP-home - WOW.exe inf ...

I fixed it! Thanks for all your comments. This is what I did:

I booted into safe mode, cleaned all files out of Windows\Temp. I ran Hijack This and found a couple of the primary idiots and used the program to start the destroy,

coolsearch.biz (this was supposed to have been removed, it is a varient of CWS that has the deeply hidden file which will allow it to come back after a couple of hours; a major obscene nuisance) and

C:\WINDOWS\System32\lblirb.exe

I deleted lblirb.exe while in safe mode. I also cut off system restore because it was residing there, too. AVG is a great scanner, but it needed a little boost. I did an online scanner and found some more pieces of the puzzle:
Java Bytever.Troj
Buddylink.A
HTML Redir.A
Java Bytever.A-1
JS Exception.gen
BKDR Ruledor.E

The machine is purring nicely now.

Collapse -

by itek4u In reply to Win XP-home - WOW.exe inf ...

This question was closed by the author

Back to Windows Forum
6 total posts (Page 1 of 1)  

Related Discussions

Related Forums