PDA

View Full Version : HEllp!!! Please!!!



*Michelle*
12-20-2002, 09:50 PM
Omg! I think I have a trojan horse in my computer!!! o.O Please, when I try to delete it, it says the file is running. And I can't delete it! I restarted the computer and it says it's STILL running! How can I get rid of it?? Please help!!! *cry*

vasanth
12-20-2002, 09:51 PM
Well there qwill be an entry in the registry under thr run or run once key delete it.. restart then delete it.. If still not possible start computer in DOS mode and delete the file manually.. This is a fool proof way of removing it...

*Michelle*
12-20-2002, 09:57 PM
I"m sorry, but I don't quite understand what to do, I pm you, please help me :(

OneStiffRod
12-20-2002, 10:10 PM
Press CTRL - ALT - Delete and check to see the 'processes' running. If you see the program or something suspicious press the 'End Task' button. Then you should be able to delete it, if that don't work you have to do something a little more complicated.

*Michelle*
12-20-2002, 10:13 PM
onestiffrod, I tried that and it doesn't work, I ended half the programs that are in the endtask window! lol...

OneStiffRod
12-20-2002, 10:18 PM
Then grasshopper, we must restart the PC in SAFE mode to delete the trojan.

goto START menu ->Run... command -> type 'msconfig'

select the startup tab and select 'diagnostic' or 'safe' startup then restart pc

now you can delete the program

Run msconfig again
and reset it to selective startup

*ClownPimp*
12-20-2002, 10:20 PM
It could just be an advertising bug that could infect you when you install freeware programs. Go to lavasoft.nu and download ad-aware. That might solve your problem

*Michelle*
12-20-2002, 10:24 PM
Thank you stiff!! :D I'll go try that now. And clown, I downloaded that program, so it isn't ad stuff. And one more question, do you think deleting the file will get rid of the trojan? Ok, I got this file called nerkey and then I opened it nothing happened, but the computer starting to whirr really loudly as if it's processing something. I thought nothing of it until this antivirus program tells me there is a trojan.CDance.A thing in the file, I tried to delete nerkey it says the source file may be opened, so I restart the comp and try delteing it again, doesn't work, same message. So if I delete nerkey do you think it'll be gone? o.O

OneStiffRod
12-20-2002, 10:31 PM
Yes probably, if that's the program that looks suspicious. In 'msconfig' in the startup tab it allows you to check and uncheck names of programs that launch on startup, the trojan is running at startup so check to see if Nerkey is listed there or anything else suspicious and uncheck them.

When you restart they won't run and you can delete them w/o problems.

*Michelle*
12-20-2002, 10:44 PM
Yes yes!!!! I find it! The name is Microsoft Tray and it loads from the nerkey file! So if I uncheck it (I already deleted nerkey from my computer using safe mode) do I still have to get rid of Microsoft Tray? I don't know what that is tho...

face_master
12-20-2002, 10:48 PM
If nerkey is already gone you're sweet as. Nothing to worry bout, unless your comp goes whacked in which case it wasn't nerkey at all.

OneStiffRod
12-20-2002, 10:49 PM
The TRAY is the area bottom right next to the clock, all those little icons- when you run Kazaa that's where it goes when you shut it off. I think that Nerkey minimized itself to run in the TRAY - you can uncheck it as long as it was luanched FROM nerkey - don't shut off the TRAY itself that might cuase a crash.

face_master
12-20-2002, 10:50 PM
hehe just wanted to point this out...

*Michelle*
12-20-2002, 10:51 PM
Don't scare me, I'd like to think I'm safe... *sobs* Anyway, I think I'm ok tho, just gotta restart the comp to get rid of the startup thing, :) Thank you SOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO much Stiff!! You're my god! :D Really, I mean I was scared stiff when I found out I have a trojan in my comp and I can't delete it... You see, I have already killed my comp twice and manage to save it, but the USB and floppy doesn't work anymore... And CD burner too... I don't want to lose the entire thing this time! O.O And it's scary cause ppl can use trojans to delete your files right? That's scary...

@stiff, how did you know I got nerkey from Kazaa??? o.O And I've got another thing that says System Tray, I think you mean that...

face_master
12-20-2002, 10:53 PM
and to take over your computer remotley

*Michelle*
12-20-2002, 10:55 PM
That's great face, nice to know :P

OneStiffRod
12-20-2002, 10:58 PM
>>@stiff, how did you know I got nerkey from Kazaa??? o.O And I've got another thing that says System Tray, I think you mean that...

B/c I was the one who put that trojan on your pc - I was spying on you so I appologize. That's how I know how to fix it.

Don't download .exe, .vbs, or .com files and don't open them if you do - they are all viruses.

Eibro
12-20-2002, 11:01 PM
@stiff, how did you know I got nerkey from Kazaa??? o.O And I've got another thing that says System Tray, I think you mean that...
So you're saying you have two programs open, one called Microsoft Tray and the other System Tray? Or did I misread something...

*Michelle*
12-20-2002, 11:08 PM
OMG...*speechless* You really honest? You WHAT???!!! YOu were spying on me?????? Is that how you know I came onto this board??? Ok, this is a joke or what? Tell me it's a joke... You didn't really put that thing... NO, I downloaded it, how can you put it on my comp? I am the idiot who did... So what did you do to my computer?? Did you delete anything?? >:(

@Eibro, yes that was what I saw on the msconfig thing. It says a Microsoft Tray loads from nerkey and a Systemtray loads from systry.exe I think, but mstray is gone now...

face_master
12-20-2002, 11:11 PM
Stiff is full of crap. He wasn't spying from you.

*Michelle*
12-20-2002, 11:12 PM
YOu sure... *scared*

face_master
12-20-2002, 11:14 PM
Wait a sec...who's that guy in the bushes??

*Michelle*
12-20-2002, 11:19 PM
Where is stiff? Come and clear things up, man! I really want to know if it's you :P I mean when i think about it, how many people actually find out who was the person behind the trojan? This could be interesting :P

OneStiffRod
12-20-2002, 11:19 PM
:D Yes I was spying, you have a PINK hello kitty desktop.:D

*Michelle*
12-20-2002, 11:21 PM
HOLY GOOOOOOOOOOOOOOOOOD!!! YOU! YOU!!!!!!!!!!!! HOw dare you! I can't type fast enough to say what I want to say, but if I am fast enough this board will be delete in like two seconds. DO YOU HAVE MORALS?? AT ALL??? GoD!!! No I"m not religious, but GEE! WHAT DID YOU DO??? OUt! Tell me, what did you do!

*Michelle*
12-20-2002, 11:22 PM
No wait... Anyone can see what my desktop is because I PUT IT ON MY WEBSITE! I'm such an idiot, say something else to prove it. You didn't did you? A hacker can't be this nice, AND happen to be a member of a board that I HAPPEN to post on for help. This is impossible. You! :P

OneStiffRod
12-20-2002, 11:32 PM
I like your website, the graphics are nice - NO i didn't hack your computer - I couldn't break your password since it was chinese. I don't speak that lang.

*Michelle*
12-20-2002, 11:41 PM
Ok, that's a BIG relief, just from the fact that you said my password was CHINESE... First, I don't have a password to my comp (come hack me! Just kidding :D) And even if I do, I won't dream of making it Chinese, cause I don't have Chinese windows and it'll create all sorts of problems, but anyway, you little liar :)

RoD
12-21-2002, 07:53 AM
Originally posted by OneStiffRod
>>@stiff, how did you know I got nerkey from Kazaa??? o.O And I've got another thing that says System Tray, I think you mean that...

B/c I was the one who put that trojan on your pc - I was spying on you so I appologize. That's how I know how to fix it.

Don't download .exe, .vbs, or .com files and don't open them if you do - they are all viruses.

They're not ALL virus's lol. You just need a decent scanner.