trojan

Thank you for the detailed instructions, which i was able to follow.However, computers are a mystery to me. None of the links found a trojan, even tho my free avast did. THEN, this morning, i scanned my program again, and the trojan was gone!!Something worked, it seems. Thanks again.

You may have had a "false postive" result on a AV test. if you've recently updated the Avast and it then found some malware, then later on the next update or two, it doesn't appear again. Avast may have noticed the record or false postives and did a fix. I used Avast and got a similar hti though a different name, no other AV pgm. found it or acted upon some malware. Avast didn't register any malware after the next update, go figure. It also didn't seem to correct the problem or reported some action was taken. Afetr googling and trying thier fixes, it didn't work as I couldn't find what they suggested were the problem files, etc., it was strange and did it didn't accord again, I let it go. You problem gave me some recordance of that past event. I hope it remains free of future problems.

tada -----Willy

Despite all the work, that's a good thing.

Good job!

Grif

I had a wee google for the name of the malware, lead me here: http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=43104 Some pretty good info, if you wanted to have a hunt through the system, see if any of those files/registry keys are there. Maybe it was a false positive, or maybe it's just been disabled.
It's recorded as first appearing in Nov 2004, so should be fairly easily squashed, should it reappear. The 2 or three times I've caught trojans, sometimes a scan finds them in system restore days later.

After all the work, i ran the free version of avast AGAIN, and this is what i found this time...Rachel's\Local settings\temp\p2setup Win32Lineage197(tri) And i get an errow report in atempting to put it in the chest. What now, as i scanned with all the tools you gave me. She does not remember just what she was doing. Should i just forget it???

Restart the computer into Safe Mode using the instructions in the link below. Once in Safe Mode, then delete ALL files from the C\Documents and Settings\Rachel's\Local settings\temp" folder.. Once that is done, then run a full system scan with your Avast and with ALL the other scanners that you now have installed. Safe Mode is frequently required to get rid of any "locked" files:

How To Start In 'Safe Mode'

Hope this helps.

Grif

Grif i followed your instructions again, and could not find anything connected to Rachel,as her folder was empty. Is there anything else i can do?? Will deleteing her entire account solve the problem??

RIGHT click on the Start button, choose "Explore" from the little menu. When the "Explorer" window loads, click on "Tools" in the upper left, choose "Folder Options", then select the "View" tab. When that opens, place a dot/tick in the "Show Hidden Files and Folders", then UNCHECK the boxes next to "Hide Extensions for Known File Types" and "Hide protected operating system files", then click on Apply, then OK.

Once the above steps have been taken, check for the "C\Documents and Settings\Rachel's\Local Settings\Temp" folder again and clean out all files from the Temp folder.

Hope this helps.

Grif

The instructions you gave didn't work for me for some reason. But in the meantime, i found the trojan again, and deleted it rather than put it in the chest. THEN she decided to delete all her programs from my computer, so hopefully this will be the end of a trying ordeal.Thanks for your help.