I have a Trojan that's not budging. What do I do?

Question

It goes by the name of Trojan.Win32.KillFiles.u and it seems to replicate itself. I've ran my anti-virus' several times and it always comes back, despite quarantine. When I checked it on google it said it was something called a nuker which is going to destroy my computer. How do I get rid off it? Do I have to run a constant anti-virus?

The antivirus I use are -

- Norton (which can't move it)

- Malwarebytes AntiMalware (which can't see it)

- A Squared (Free) (which quarantines it, but it just comes back)

What else can I do?

Answer 1

After doing everything that you have stated, do a system restore to a point when you knew that your computer was o.k, you might lose some personal information, but you will get rid of your problem... Good Luck

Answer 2

Install a freeware called Spybot-Search&Destroy, update its definitions and run a scan on your computer. It scans for adwares, spywares and trojans and eliminates them using its secure shredder. It is more effective than any of the paid counterparts. It scans for over 1,00,000 infections and also immunizes the system from future threat.

Answer 3

Change your virus protection, you can try going to Trendmicro.com as they do a free scan (Housecall) and if they find it you can have a 30 day free trial that will clear it, I had a similar problem with virus XP 2008 Antivirus which is a virus doing the rounds so I went here to cure it and it is now fine. You can always re install your normal virus protection after, I take it you have updated your protection?

Not all viruses will be picked up by every anti virus system so you have to try a different one till you crack it. Be careful what you download as quite often some of the downloads carry ad spam etc, Trendmicro are one of the oldest and their system is very good (and no spam etc)

Answer 4

Lavasoft Virtumonde Remover will find and clean the variants of the Virtumonde (a.k.a Vundo Trojan), that integrate tightly with the operating system, causing some scanners to bluescreen windows

http://www.download.com/Virtumonde-Remov...

Trojan and Worm Remover:

http://www.simplysup.com/tremover/downlo...

The program will work for a full 30 days, after which it will expire.

More details:

http://cotojo.wordpress.com/2008/03/07/t...

SmitFraud Removal

Firstly, download the removal tool from here:

http://siri.urz.free.fr/Fix/SmitfraudFix...

How to use:

http://cotojo.wordpress.com/2007/08/24

Scan online with Housecall:

http://housecall.trendmicro.com

or  BitDefender;

http://www.bitdefender.com/scan8/ie.html

or F-Secure:

http://support.f-secure.com/enu/home/ols...

Answer 5

Follow the instructions on this website to remove it;

http://www.spywaredb.com/remove-trojan-w...

Answer 6

Firstly turn off system restore, then boot up in safe mode and run ASquared. Boot back in normal mode and turn system restore back on. Using system restore to go back to a previous day works on some basic adware/spyware. But not on viruses,the virus stays in S/R and needs to be turned off to delete ALL restore points.

Answer 7

try avg anti virus its a easy to use software with one of the highest detection rates.

Answer 8

That Trojan is hard to remove, u have to be very experienced to do it. The quickest way of doing it is to copy your important files somewhere else, for instance to another partition that are on C: system drive, then format disk and instal system again. The after that scan the files u copied before if they also have any viruses.

Don't listen to people when they say u went to bad sites. I always do that and i never have any virus it is just how u protect your computer. Make sure u have always new updates from microsoft, istalled firewall and Avast antyvirus and it is enough. Dont install norton!!

Answer 9

Windows utilize a restore utility that backs up selected files

automatically to the System volume information /System Restore folder.

This means that an infected file could be stored there as a backup file,

and most anti-virus programs will be unable to delete these files. You

must disable the System Restore Utility to remove the infected files

from the folder if you use another brand of anti-virus. However, you do

not need to do so if you use Threat Fire.

Threat Fire is PC Magazine Editor's choice.

http://www.threatfire.com/

1) Install the program

2) Do a FULL system scan

3) Threat Fire can quarantine and neutralise viruses, even those that hide in system restore folder.

4) Once a virus is quarantine, your system is safe and you have the option to delete

the quarantine files later.

ThreatFire's patent-pending ActiveDefense

technology offers protection against all types of internet threats

- both known and unknown - spyware, adware, keyloggers, viruses, worms,

Trojans, rootkits, buffer overflows, and other malware.

ThreatFire uses its unparalleled protection to hunt down and paralyze those threats

that are either too new or too clever to be recognized by traditional "signature-based" antivirus.

Answer 10

I always go with the over-the-top paranoid option for removing viruses.

1 - Copy all my work to a USB stick or CD

2 - Reinstall EVERYTHING, including the operating system

3 - Make sure I never look at dodgy sites or download things that may give out Trojans

Answer 11

Uninstall Norton and download Avast for free, if that don't work uninstall Avast and try AVG etc..