Alway Up Trojan (Different Problem)



Dan
07-09-2005, 11:48 PM
Hi all,
I too have recieved the annoying AlwayUP.trojan. I have run scans and
nothing is found. (Norton 2005). So I also tried to delete the file. THE FILE
ISN"T ON MY PC. I ran search after search, scan after scan, and the file is
nowhere to be found. YET...I still get a warning from Norton while surfing
the web saying "Found alwayup.trojan delete failed. System Restore is OFF,
reboots have been done, SAFE mode scans run. I STILL GET THESE MESSAGES FROM
NORTON WHILE I"M SURFING. HEEEEELLLLLLLPPPPP!!!!!!!!!!
--
Thanks,

Dan

David H. Lipman
07-09-2005, 11:48 PM
From: "Dan" <Dan@discussions.microsoft.com>

| Hi all,
| I too have recieved the annoying AlwayUP.trojan. I have run scans and
| nothing is found. (Norton 2005). So I also tried to delete the file. THE FILE
| ISN"T ON MY PC. I ran search after search, scan after scan, and the file is
| nowhere to be found. YET...I still get a warning from Norton while surfing
| the web saying "Found alwayup.trojan delete failed. System Restore is OFF,
| reboots have been done, SAFE mode scans run. I STILL GET THESE MESSAGES FROM
| NORTON WHILE I"M SURFING. HEEEEELLLLLLLPPPPP!!!!!!!!!!
| --
| Thanks,
|
| Dan




Dump the contents of the IE Temporary Internet Folder cache (TIF)
Start --> Settings --> Control Panel --> Internet Options --> Delete Files

Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
Tools --> Options --> Privacy --> Cache --> Clear

1) Download the TrendMicro Sysclean Front End

Download the utility SYSCLEAN_FE at the following URL --
http://www.ik-cs.com/got-a-virus.htm
SYSCLEAN_FE automates the download and execution process of the Trend Sysclean Package.
Direct URL --
http://www.ik-cs.com/programs/virtools/Sysclean_FE.exe


2) Download and install Ad-aware SE
(free personal version v1.05)
http://www.lavasoftusa.com/
Update Ad-aware with the latest definitions and then exit the software.

3) Execute; SYSCLEAN_FE.EXE
Choose; Unzip
Choose; Close


Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
when you get to the menu dhoose [1] so you can boot into Safe Mode.

4) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm

5) Reboot your PC into Safe Mode and shutdown as many applications as possible.

6) Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
Choose [2] on the menu and let SYCLEAN.COM scan your computer.
when done, execute Ad-aware SE and perform a full scan of your PC and delete
all objects found.

7) Restart your PC and perform a "final" Full Scan of your platform
Execute; c:\sysclean\SYSCLEAN_FE.BAT
{ or Double-click on 'SYSCLEAN_FE Link' in c:\sysclean }
Choose [2] on the menu and let SYCLEAN.COM scan your computer.
when done, execute Ad-aware SE and perform a final scan of your PC and delete
all objects found.


8) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),

9) Reboot your PC.

10) If you are using WinME or WinXP, create a new Restore point


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Phil Weldon
07-09-2005, 11:48 PM
Why not try Symantec for a solution to your problem. You may find you don't
even HAVE a problem... just NAV reporting in less than crystal clear
language. That should be your first step before setting off on a safari.


"Dan" <Dan@discussions.microsoft.com> wrote in message
news:6A22B557-9F01-4218-B5FB-240A73DF190F@microsoft.com...
> Hi all,
> I too have recieved the annoying AlwayUP.trojan. I have run scans and
> nothing is found. (Norton 2005). So I also tried to delete the file. THE
> FILE
> ISN"T ON MY PC. I ran search after search, scan after scan, and the file
> is
> nowhere to be found. YET...I still get a warning from Norton while surfing
> the web saying "Found alwayup.trojan delete failed. System Restore is OFF,
> reboots have been done, SAFE mode scans run. I STILL GET THESE MESSAGES
> FROM
> NORTON WHILE I"M SURFING. HEEEEELLLLLLLPPPPP!!!!!!!!!!
> --
> Thanks,
>
> Dan


Alway Up Trojan (Different Problem)