| |
Antivirus World Forum
Removed: Trojan.Startpage
Posted By: Ron In Response To: Re: How to delete Trojan.Startpage? Removal tool? (Patrick Green)
Date: Tuesday, 25 January 2005, at 12:11 p.m.
After about 3 days, I got rid of this pesky little one and without the use of any removal tools (most repsonses indicated they would not work anyway).
The variant I had created sp.dll in my temp folder under ...\documents and settings. This file contained the html source for the friendly search page that I could not get rid of. This was also the file that Norton kept "removing".
I ran a search on my C: for all files that had the same date/time stamp as the quarantined files. In C:\, I found a cab file that was about 9k and included an .inf and an .exe. I then found "hjmebg.dll" that was dropped into my system32 directory at about the same time. For a quick fix, I renamed it (acccess denied upon delete - I'll remove it later in DOS w/a boot CD. I closed IE and reopened - No Virus & no helpful startpage. There was quite a long trail involved on this (I have a log on the infected system). I can post exact filenames and more details later.
| |
Antivirus World Forum is maintained by Administrator with WebBBS 5.12.