Virus?!

[elfe]

recently I get an error message from my virus programm about 'pop3trap' while starting windows. and now my internet provider would not accept my password anymore, and while logging on to network the log-in window to windows pops up. then I got another internetprovider and it worked well for 2 days and now I have the same problem there. could connect now because I made a new connection with the same provider and username/password but used another connection name

it seems the virus came from another forum-site, two times strange things happened when surfing there (shaking windows or page suddenly full with other links).

anyone can suggest what to do? I already deleted IE and outlook before that happended and use mozilla since.

hope this is not too confusing, any help very much appreciated

[triplegee]

Ok - before doing anything make sure you turn off system restore - you can always turn it back on when you know yr machine is clean:

Right-click 'My Computer' then click 'Properties'. Click 'System Restore' tab then uncheck the box before 'Turn off System Restore'

Click OK. Restart your computer.

Once done, go to Housecall and run an online scan which will disinfect your system.

Reboot once done.

Next, download Ad-aware.

Download Ad-Aware

After installing AAW, and before running the program, you need to FIRST update the reference file using the auto update feature.

Now do the following:

- Under Ad-aware 6 > Settings (Gear at the top) > Tweaks > Scanning Engine:

check: "Unload recognized processes during scanning."

- Under Ad-aware 6 > Settings (Gear at the top) > Tweaks > Cleaning Engine:

Check: "Let Windows remove files in use after reboot."

Press "Scan Now"

- Check option "Use Custom scanning options"

- Check option "Activate In-Depth Scan"

- Press "Select drives\folders to scan"

- Select the active partition which is usually C:

Now press "Next" to let Ad-aware scan your drives...

It will find a number of "bad" files and registry keys.

Right-click in that pane and choose "select all"

Now press "Next" again.

It will ask you whether you'd like to remove all checked items. Click OK.

Finally, close Ad-Aware, and reboot.

Doing the above should get rid the known spywares in your system.

There's another one called Spybot - Search & Destroy - I'd recommend that you download & install this one too. Fairly self-explanatory.

As a final step - download Hijack This.

Make a new folder to put your HijackThis.exe into. Anywhere on your hard drive is fine other than your Desktop or the Temp folder. I suggest you use something like "C:\Program Files\HijackThis" but feel free to use any name. This is to ensure it makes the necessary backups for recovery if needed. Download and save the contents to the new folder you made and then navigate to the HijackThis.exe. Then, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button. Press that and copy & paste its contents here. Most of what it lists will be harmless or even essential, don't fix anything yet. I'll check back or you can PM me to tell you what steps to take after you post the contents of the scan results.

Hope this helps!

Cheers,

GGG

[elfe]

WOW!!!

triplegee that was really quick and so detailed - thanks a lot!!!!

I will do as you recommend and get back to you after. I already use Ad-Aware and Spybot since long time.

cheers!