Heeelp me by a Trojano 214

Viruses and worms
1

Hey´…
I am a girl from Denmark who have a girlfriend who have problems with a
win32:Trojano-214[Trj]
c:/windows/system/POLALL1L.EXE
If enyone can help i wod be glad. I need a detail deskription about to remove the Trojano.

Bjanka

2

Hi,

  • please enter
    TROJANO-214
    into the board-SEARCH above

Read the link “VirusRemoval” below in my signature and then:

  • Disable System-RESTORE
  • install & UPDATE Spybot & Ad-Aware
  • reboot to safeMode (F8-Boot) and there move the file to the chest with avast, or delete it manually
  • scan and fix with SPYBOT & AD_AWARE several times, until nothing more is found and fixed
  • d a full system scan with avast: thorough scan, with archive scanning enabled
  • reboot normally
  • post a hijackthis-Log
  • apply all Windowsupdates
  • secure your system & browser better, e.g. disable activeX & scripting, except for known secure sites (details: “VirusRemoval” below)

:wink:

3

thank you fore your help, we have not got i away yet, we trey it tomorrow. Now the problems is that my girlfriend have got more virus. :cry: I hope you can help us again. ???
here it coms:

Win 32:Trojan-gen{UPX}
c:WINDOWS\Temporary Internet Files\Content.IE5\UPC763Y5\powerscan

Win32:Trojan-gen {other}
c:\WINDOWS\Temporary Internet Files\Content. IE5\VFQMKPOBnem219 [1]

Win32:Revop [Trj]
c:\WINDOWS\Temporary Internet Files\Content. IE5\C561U5WL\bd114122[1]

Win32:Trojan-gen {UPX}
c:\WINDOWS\Temporary Internet Fies\Content. IE\QCHXQL65\istsvs[1].exe

Win32:Trojan-gen {other}
c:\WINDOWS\Temorary Internet Files \Content.IE\ODS10ZSN\istbar_mainst

Win32:Trojan-gen {UPX}
c:_RESTORE\TEMP\A0088848.CPY

Win32:Revop [Trj]
C:_RESTORE\TEMP\A0091843.CPY

Win32:Revop [Trj]
c:_RESTORE\TEMP\A0091845.CPY

Win32:Revop [Trj]
c:_RESTORE\TEMP\A0092844.CPY

Win32:Trojan-gen {UPX}
c:_RESTORE\TEMP\A0009384.CPY

Win32:NcaseSpy [Trj]
:_RESTORE\TEMP\A0093843.CPY

it was 5 more but she did not get the names of them.

Bjanka

4

Hi,
that’s easy… ;D ;D

→ REREAD link “VIRUSREMOVAL” below, then:

disable RESTORE
&
empty your Temporary Internet Files, including OFFLINE files :wink: