Problem with Windows!!!

[SemperFive]

Yesterday when i booted up my PC, it got a warning that my PC was infected with a trojan in one of my WINDOWS files. I tried to Qurrentine it, but it was unsuccessful, and then it asked if i wanted to remove the file, Dumb me i clicked yes, and now my PC is acting weird.

What can i do to fix this?
Please!

[Beel]

Try a system restore to before the date you removed the file? Or a couple of days before you got the Trojan?

[Titan]

What is your PC doing exactly?

[Tills13]

And also, did you catch the name of the file before you clicked remove. Sometimes if you go into your Anti-Virus program, it will have a list of quarantined and Failed quarantines, as well as files removed. Check there and see if you can find the file name, that would help you out lots.

>Tullsy

[SemperFive]

Tills, i have McAfee, where would i go to check the failed quarantines?
And would i be able to do this after a system restore?

[canttouchthis]

can you boot into safe mode? It sounds like you've dleted a key windows file. And I hate this stupid ad that makes your computer lag...

[Tills13]

What you want to do, according to the McAfee website support tool, is go to, And I quote: "Right Click the McAfee Icon, Point to virus scan, then click Manage Quarantined Files." Then BAM, the list appears.

I'm not sure if this is EXACTLY what your looking for, I don't use McAfee so I wouldn't know if it sounds right or not. If it doesn't show up there, try your luck here, they would know what to do.

If you type in your exact problem into Google, chances are that someone else did the same thing and posted about it, that would alos work if my way did not help what-so-ever.

If it did work however, post the file name here so that we may better understand your problem and better assist you. I feel like a customer server rep...

>Tullsy

[tenkae]

Originally Posted by Beel

Try a system restore to before the date you removed the file? Or a couple of days before you got the Trojan?

NOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO THATS THE WORST THING TO DO. sorry i have to express that that way. doing system restore shoves it deeper into your os.

get 3 things

malwarebyte's anti-malware
combofix
AVG 8 free

download, update 1 and 3, then run them in that order in safe mode

you can find all 3 on google, except i suggest get avg from download.com

[SemperFive]

Well, i did a system Restore already...
I did a virus scan "After i updated it of course" And it all seems to be clean, all my programs work again.
I think its good...
I still cant find were to check the quar files.

[SmJe]

Ok I have had this problem before. I found that after I had 'thought' id removed it I hadden't. The trojan injects itself into the system restore program and into startup and key registry values.Thus, the quickest and easiest way to solve it is.

1. Turn off system restore
2. Delete all (YES ALL) system restore points
3. Close all applications.
4. Open a web browser and point to here: SmitFraudFix
5. Download the SmitfraudFix.exe
6. Your virus scan and/or firewall will think this is either a trojan or spyware, click ignore
7. Open the program
8. Select option 2 and press enter
9. You will then be prompted: Do you want to clean the registry ? answer Y (yes) and hit Enter in order to remove the Desktop background and clean registry keys associated with the infection
10. The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found): Replace infected file ? answer Y (yes) and hit Enter to restore a clean file.
11. A reboot may be needed to finish the cleaning process. The report can be found at the root of the system drive, usually at C:\rapport.txt

[SemperFive]

So, is that a registry cleaner???

[tenkae]

smitfraudfix is aimed towards specific malware, and i havent used it for months at the repair shop i work at, the three i mentioned, and in some special occasions vundofix, have been working for everything i've come across lately, and yes turn system restore on and off to clear the viruses out of it

im not saying smitfraudfix wont work for you, it might be you have that, its just i believe the others catch that and more