Anybody have this trojan - Win32:RegZonTr[Trj}

File anme: c:\re11.REG
VPS 0442-3, 10/15/2004

I’ve tried everything that I found in this forum and it still comes back in Windows XP when I boot up and can’t rename, remove, repair, delete etc.

Did you try Move on Boot application from www.sysinternals.com ?
Did you try to schedule a boot time scanning and delete the file?
Did you try to delete the file in Safe Mode (F8 while booting)?

Thanks, I have tried many boot time scans although I don’t know how to speciafically delete the file when doing so.

How do you delete the file in safe Mode?

I will try Move on Boot and let you know.

If the file is detected as a virus, you can choose an option to delete it…

You must boot Windows in Safe Mode, pressing F8 continually just after the boot.
Choose Safe Mode in the Boot Menu.
Delete a file there is just like in the Windows Explorer, clicking on DEL :wink:

Very small, simple and usefull application indeed :wink:

Thanks again but the problem is AVAST won’t let me delete this virus after it is detected.

If I see the virus appear on the screen in Safe Mode how do I highlight it to remove it?

,Couldn’t find Move on Boot at that site but found alot of other cool stuff

This could happen if the virus is active…
I can’t believe you can’t delete the file in boot time scanning (did you choose to scan archive files and whole HDD?)

You can’t run avast in Windows Safe Mode…
You should delete that file into Windows Explorer while in Safe Mode.

Sorry, I was wrong. The right url is: http://www.snapfiles.com/get/moveonboot.html

Thanks, am I looking for the Virus name or the file name?

When I typed c:\re11.REG into Move On Boot I got an error message. Should I be using the virus name?

If you right click the file, don’t you see an entry ‘Delete file on next boot’?

Right click? How? I keep getting the window “A Virus was found” and no matter what choice I make nothing works. I just ran a boot scan too.

and then I get “Avast cannot find the file specified”

Have you disabled your WinXp “System Restore”?. If not then do that, then do what technical has suggested and see if this helps. :slight_smile:

Already did that, thanks

Hello!

When u chose schedule a boot time scan did u,

tick advanced options
then select ask for action.

You could also try selecting delete infected file.

Windows Explorer
Go to C:
Right click the file c:\re11.REG
Choose ‘Delete file(s) on the next boot’ :slight_smile:

Just tried that and deleted it, hope it stays away.

I’m just curious why AVAST couldn’t do the same after finding it?

Also MoveOnBoot found something that it will delete on the next boot.

Thanks again for your help

Why did Avast let this virus to come in to computer? The Avast was active. (I had this virus too.)
I removed this virus by putting my disc in to another computer.

Hi everyone !
Solution:
-disable lan
-delete : mirc and lssas (2 files uploaded when the lan is enabled)(insist)
-format
-install Win Xp with Service Pack 2
-activate the firewall
-config avast firewall

It works!!!