Thread: need some help getting rid of a trojan

i checked the program files and they are all right.

when the window pops up it opens in IE, not with another program. all of my processes seem to be legit, too.

it's an adult chat pop up (so yes, porn).

Step 1: have admin rights..lol

yeah no ****, i'm trying.

hah.

Step 1: have admin rights to her box
Step 2: put on trojan
Step 3: when done, dispose of trojan

Job completed, you got rid of a trojan

under your start menu type regedit and do a find and put in the virus name and continue to find and delete till its gone

its located under edit

the registry items attached to it will be named according to the virus? that seems unlikely..

also see if you can get into msconfig and under startup uncheck everything

cant do msconfig, tried it earlier. need to be an admin.

Originally Posted by Bio248

the registry items attached to it will be named according to the virus? that seems unlikely..

you cant do much might as well try to get rid of as much of the virus as possible right

try searching Maljava in the registry and deleting anything that comes up

this apparently isnt a super awesome virus because i can still get into the registry editor. didnt find anything based on the few cues i have, though.

****...

its possibly affecting your network, have you tried system restore?

also a word of advise avg and adaware are the 2 free programs i use and i find are the best, spybot is also another i use if adaware doesnt get rid of everything but between those your computer should be clean

i know you dont have admin but for future reference

yeah, i know. if they let me install them on the computer i'll be fine.

it's a matter of them actually doing something.

also if you open up taskmanager with internet explorer open how many do you see?

is there one or mult

there might be 2 actually but i mean is there 4-5

can you get into IE's tool menu for internet options to change security settings ....maybe? settings for pop-up blocker.....might be under the allowed list....or just delete everything in the allowed box
make sure your home page address hasn't been changed in IE options