Trojan Horse

[PhilD]

Whenever I run my antivirus program (AVG) it finds a trojan horse 'Downloader Small 6.1' in the Temp Internet files and removes it by healing. However it keeps returning (even if I clear the Temp Internet Files). I suspect it comes from an ad for mobile ringtones which bypasses my pop-up stopper. Is there a patch I can download or can I block the site that is sending this ad?

[mhairiam]

Hi, If you are running windows 2000 or XP, there is a feature called 'system Restore'. It takes periodic snapshots of your hard drive in case you need to roll your PC back to an earlier time. This also means that any virus you have will almost certainly be present in the system restore files. What you should do is enter Control Panel, then choose System. Click on the 'System Restore' tab, then you will see which drive/s have the feature switched on. You can then click on your C drive, and turn off system restore. Once this has been disabled it allows your virus scanner to check the system restore files and thus clean any viruses from there. However, I think that switching off the system restore on your drives deletes any previous 'snapshots', but this will allow you to get rid of the virus(hopefully). Once virus scanner has cleaned, then turn this feature back on. Make sure your virus definition files are up to date before you scan. This should help in clearing the virus. Also you may want to consider installing a firewall. Zonealarm is a free firewall which you can download and should also help in stopping any nasties from coming into your PC. Hope this helps......or else try searching on the trojan name to see if there are any downloadable tools to eliminate it... Good Luck

[PhilD]

Thanks mhairiam. I did turn off my system restore as I had a virus in the system restore files which AVG could not remove. I am still getting this Trojan Horse. I am using XP's firewall.

[PaulB]

http://www.trojanscan.com/trojanscan/

[Dappycow]

http://www.just2good.co.uk/ will definitely have the answer for you. Check their forum Brilliant