Trojan Virus

[Lord]

I was running a scan using Norton Antivirus 2002, when I get a message that my computer is infected with a virus, and the file can't be repaired.
It says: Infected with the AOL.PWSteal.Trojan virus. Unable to repair this file.

Other messages say that access to the file was denied. One of them says that for C:\Install. However, that file doesn't exist on my computer. I don't know what to do, so I don't know if I still have the virus on my computer. What the hell can I do? A website says that it sends my AOL password to people, which I don't want. I need help!
BTW, when I log on to AIM, this away message comes up (DON'T CLICK ON THE SITE!):
Hey check it out http://www.shadowedstories.org/webcam.scr !
I clicked on a link on someone's profile, and then I kept getting this. I think this has something to do with it. Any ideas?

[Ladyzekke]

when my PC at work got that stupid Bugbear virus, my Norton (the 2003 version), during a virus scan, was only able to quarantine it, and it did not name what it was quarantining, so I clicked on something in the Norton website, it is a separate virus checker, and it identified the Bugbear then, and gave me instructions on how to manually delete it. Maybe you should go on the Norton website and try the same?

[Lord]

Originally posted by ladyzekke: when my PC at work got that stupid Bugbear virus, my Norton (the 2003 version), during a virus scan, was only able to quarantine it, and it did not name what it was quarantining, so I clicked on something in the Norton website, it is a separate virus checker, and it identified the Bugbear then, and gave me instructions on how to manually delete it. Maybe you should go on the Norton website and try the same?

I've look at their symantec online site and it doesn't give sh*t. I'm completely stumped and my computer is completely screwed.

[Animal]

I thought Trojan's were supposed to prevent viruses

(Viruses? Or is it Viri?)

[Bungleau]

Head over to Trend Micro and have them do an online sweep of your computer. That may help to clean you up.

[Firestormalpha]

And it was written, "All shall ignore the lord of [img]graemlins/spam2.gif[/img] ." Besides being off-topic that was spam post animal. We try to keep that in Ladyzekkes kingdom.

As for the topic at hand I can't give you any better advice than was already given, Lord.

[Felix The Assassin]

You be in a world of hurt.
Thousands, maybe Millions of people now have your personal AOL log-in. BTW, what is AOL?

Simplified terms:
A virus is a program that propagates itself, and messes up files, then more files etc. until you can no longer use the machine.

A worm is just a little nastier, and uses a code to mass send a propagated virus from your machine to every poor sap in your address book.

A trojan, well, it's like that attack on Troy. It sneaks in at an unsuspecting time, gets into a spot and sets nice and comfy. Doesn't want any attention, and prefers to not identify itself to AV scan. But, all of a sudden you get a direct hit from the SOB who coded their web site to your machine. Bam, now you are a mass spammer. I would not believe for a second the only spam you are sending out is your AOL crap. You are beyond screwed, as Norton pointed out it can't handle it.

Your only true course of action is a full kill. Yeap, full, totally mass destruction of your machine as you know it. All HDD must be swiped, HARD formatted at least 3 consecutive times, and once more just for good measure. Then a full rebuild from base up.

I took some flak a short time ago when I busted somebodies little post on a view changer or something. That is how you get an unsuspecting Trojan, it is downloaded while either a Java, ActiveX or flash script is running on the web. Then when the real spammer needs another resource he sends out a timer code, and if you are online, or always on when your trojan receives it's code. Well, then your machine becomes his tool, and your system and all of it's resources to include your ISP become his spam machine. You will be shutdown by your ISP soon, and they will be asking you questions on why you were using so much constant bandwidth, and asking you questions about what type of server you are running. So make sure you have a print out of your Norton screen that identifies the trojan by name, and location and current date time stamp.

If you are on dial-up, you have probably noticed a decrease in your online speed. And the spammer is already looking for another host as dial-up is not the forte of the mass spammer. So, you are in luck. The trojan will self destruct once the spammer has another host up and running.

Prevention:
Tighten up your firewall security, actually read what it is telling you.
Don't go to sites that you have been warned not to go to, bad things WILL happen
Stay away from porn, gambling, and ???enhancing web sites!

[johnny]

Ignore the format advice, that's the cheapest way out and totally unnecessary. Formatting is the same thing as comitting suicide imo.

Here's what you should do instead. First of all, update your Norton antivirusdefinitions, if it's a known virus, Norton WILL recognize AND kill it IF up to date. Secondly, check the Microsoft homepage, there are removal tools available for every known virus.

Furthermore, when it comes to trojans, they can be a real pain in the ass. There's all kinds of so called free trojan and spyware removers downloadable on the net.... STAY AWAY FROM THOSE... they're not there to help you get rid of your problems, they are there because they want your creditcardinfo. Have either AdAware and/or Spybot check your system for trojans. They WILL find it IF it's in your system. Do not blindly trust them when it comes to removing spyware from your system though, they are sharewareprograms, and have a little agenda of their own, remember, nothing in this world comes free.

Write down the specs of whatever Spybot/AdAware finds, and reboot your comp in the safe mode. Now go to RegEdit, and search for the names you wrote down. Remove them manually, and don't forget to use F3, one silly spywarefile can come in several different names. This might take a while all together, but at least you can be sure it's really out of your system.

[Bozos of Bones]

Dear Felix...
Besides you being PARANOID, you can't be serious!
No offense intended, but you don't have to format three times to get rid of a Trojan. You don't even have to do it once. First point, Norton isn't at it's best the past year, get Nod 32. If Nod 32 doesn't get rid of everything you have, install Visual Basic or Visual C++. Open the quarantined file with that editor and mess something up. The trojan is officially dead. Not only have you taken care of the program, but you have made sure you don't get another Trojan of the same type. Good luck.

[Lord]

Thanks guys. I'll try to fix this. AIM stopped opening up by itself and requesting to put in that away message, but Norton AntiVirus still has an error under 'Email Scanningk,' so something is obviously wrong. I'll try johnny's solution first.