Help kill Trojan virus for me please!!!

Hi everybody,

I perform a virus scan today and found that my pc is infected with the Trojan virus in my c:\windows\system32\drv2dtr.dll.

Can anyone advise me what to do? I have deleted the file and rescan. Although no more virus found, it seems that it is affecting my internet. For some websites I tempt to surf, it will appear the usual internet error msg and got my internet explorer shut down automatically. Don’t know if it’s becos of this virus.

So can anyone help the helpless soul here? Zillion txs in adv.

NERD

What OS are you using?

If XP, you need to first turn off “system restore” and then re-scan your computer with avast and then anti-spyware programs. After that, clean out your temp directories. Then reboot and turn system restore back on. (if you don’t turn on/off system restore, you won’t be able to properly decontaminate your PC).

For info on malware removal, check out Eddy’s site:

http://82.75.52.232/ache/cleaning.htm

Are you using Windows XP?
Can you schedule a boot-time scanning?
Start avast! > Right click the skin > Schedule a boot-time scanning
Select for scanning archives.
Boot.

Deletion (the nuclear option) is not the best first action because once deleted you may have a problem. The best action is to send the file to the avast chest and then you can investigate, safe in the knowledge that you haven’t done any harm and the action can always be reversed.

Although in this case a search for the infected file name on google returns no hits which more or less confirms it isn’t an incorrect detection of a system file but a virus that you deleted.
There may well be more related to this that has an effect on IE, I would suggest that you download and use firefox which is less suceptable to malware.

Also useful as a diagnostic tool - Download HiJackThis.zip - HJT Information HiJackThis Tutorial 1 or HiJackThis Tutorial 2
For an on-line analysis - HiJackThis Log file - On-line Analysis
Ignore any 023 reference to avast processes, this is a hiccup in the HJT 1.99.1 (especially missing file entry for avast), if you need any help with any of the analysis let us know.
OR HiJackThis Log file - On-line Analysis 2