Trojan - tofger

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.scripting.virus.discussion
microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus


1) Download the following two items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt325.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM .

2) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode then shutdown as many applications as possible.
4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
Create a new Restore point
9) Please report back your results

Dave



--
Dave




"Aquaboy" wrote in message

| Somehow managed to get a trojan virus on my computer that tries to re-install
| at reboot. McAfee picks it up and deletes it but have not been able to
| remove the tag. Upon startup I get "svchost.exe application error." McAfee
| then pops up and says "spytofger.dll" trojan found and deleted. I searched
| the web and found this solution at
| www.sophos.com/virusinfo/analyses/trojtofgeraw.html but am not sure about
| altering registry. Anyone hlep with this.
|
| Thanks
 >> Stay informed about: Trojan - tofger