problems with ibm thinkpad, i cant cut/copy and paste

i did a full virus scan yesterday and removed all trojans etc but it still didnt work

crap i dont have the XP SP2 CD any more

anyway around this?

It's too bad that was not in your first post. I thought about such but the trojans do untold damage. Let me write it another way. The trojans can be removed but that does not repair the damage.

The SFC /SCANNOW is a great idea but there can be registry damage which I've yet to find any one tool to help in all cases.

Your FULL VIRUS SCAN is not enough. Let's do an online spyware scan now and later a rootkit scan.

Start with -> http://www.ewido.net/en/onlinescan/

Also, please share what protection failed here. Everyone wants to know which AV or other such allowed the trojan in as well as the trojan's name.

-> Ahh, the name of the trojan could be key to a fix short of a complete reinstall.

Bob

did you try the SFC /scannow anyway. sometimes you might not need the CD. but if it prompts you for it, you may need to borrow one from a friend. other than that, i know of no workaround. maybe some other ppls on these forums knows more about this issue

AV is kaspersky antivirus and the trojans are:

detected: riskware not-a-virus:AdTool.Win32.MyWebSearch.bc URL: http://ak.exe.imgfarm.com/images/nocache/funwebproducts/2.2.60.11/SmileyCentralPFSetup2.2.60.11.ZNfox000.exe/mwsSetup.CommonCodebase.exe

detected: Trojan program Trojan-Downloader.VBS.Psyme.fc URL: http://www.afzr.net/azzt/apzvq.html

detected: Trojan program Trojan-Downloader.JS.Agent.fp URL: http://iwe.pqzv.info/peq/e.html

not found: virus Virus.Win32.Hidrag.a Running module: svchost.exe\svchost.exe

not found: virus Virus.Win32.Hidrag.a File: C:\Documents and Settings\BUYER\Local Settings\Application Data\Ares Ultra\My Shared Folder\___ARESTRA___rockstar.exe


deleted: Trojan program Trojan-Downloader.Win32.Zlob.bqu File: C:\Documents and Settings\BUYER\Local Settings\Application Data\Mozilla\Firefox\Profiles\heuqgata.default\Cache\9ECFDB4Ed01//stream//data0006


detected: riskware not-a-virus:Downloader.Win32.WinFixer.o URL: http://download.cdn.winsoftware.com/files/installers/WinAntiSpyware2007FreeInstall.exe

also virus:
disinfected: virus Virus.Win32.Hidrag.a File: C:\WINDOWS\Temp\_ISTMP4.DIR\IsUninst.Exe

and one in the registry i was able to see in the scan list:

deleted: Trojan program Trojan.Win32.Pakes.x3 File: c:\windows\regedit.exe


im not sure if thats all of it, scan list is pretty long maybe i can copy it to ms word and email it

ewido in progress...........

i think you may have found some of the problem. lol

Some of the antivirus programs don't consider these a virus and don't remove them.

Bob