Help! 3 TROJANS,Comp froze rebooting. Oh no!

[PoisonIvy]

Hey there,

I am in a bind. My laptop has 3 trojans, bispsy,briss. NOTHING has removed them, panda,avg, tried sytem restore about a week ago, no change. So, I wanted to try again. I turned system restore off, rebooted, tapping f8, only for it to freeze in process! I tried everything- unplugged everything, darn screen still frozen on windows. I cant possible afford getting pro's and am feeling really paniced now.

Is there anything I can do? I just never heard of anything like this. Furthermore, I am so tired of getting these same trojans, and it has to be a website(s) I go to often. How can I find out WHERE they came from, infected me? I am on another computer and will have to check back on here. Any help is much, much appreciated,

Thanks,

Ivy

edited to add; I have no idea if it helps, but I will tell what I know:

Toshiba laptop/windows xp/ intel pentium4/ linksys. Again, if this is unimportant, sorry, I just wanted to mention all that if it helps! 8)

[-pops-]

Hello Ivy.

Go to the HiJack This section, follow the guidance about doing a scan and post it on the forum - you will see what to do. http://www.windowsforum.org/forum/index.php?showforum=53

[PoisonIvy]

Hi,

I can't! Thats the problem- my laptop is still frozen on the windows screen while rebooting. I am on another computer. I had some important stuff on there and am afraid I lost everything! Darn trojans!

I searched online, someone said when laptops freeze, unplug, take out battery. I am thinking this is what I have to do, but I dont know *how*, or where the battery is, and what to do next. I hope this makes sense, I am soo puzzled.

Thanks,

crystal

[bvw]

You won't have lost anything on the hard drive, it'll still be there.

With desktops, and the same problem as you have, I've simply removed the hard drive from their machine and put it into my external enclosure.....connected that to my machine and, using my virus scanner, removed the viruses etc.

[bvw]

Do you have boot floppies to use when you installed your anti virus?

Did you make them?

[ɹəuəllıʍ ʇɐb]

You may not need to take the batteries out; most of the Toshiba notebooks I ever had have a reset button somewhere. It's usually hidden - a small hole where you insert a pen tip to reset. You may need to check your manuals to see if it has a reset button.

See also this article on the Toshiba support site.

And this if above doesn't help.

[PoisonIvy]

Hey guys,

thanks very much for the responses. I held down the power button, and it finally went off. So,back to square one, I turned system restore off, rebooted into safemode and ran the avg; took several hours, found 2 trojans this time, would not remove them,clean them, nothing. So frustrating, after all that, they are still on my machine! I just dont get why I am always infected, I have firewall,sygate,avg,avast,tried pandascan,ect. Tried everything, pandascan,use spywareblaster. Dont know what more I can do. Does anyone think mozilla or firefox may make a difference? I have to rid these, and find out where they came from, but I dont know how to figure that out. As always, Im grateful for any opinions, thanks for your time,later,

~Ivy

[ɹəuəllıʍ ʇɐb]

~Yvy,

I have not much experience with trojans; I had only been infected once -- that was a nightmare to clean up, and I also never found out how I was infected. For now all I can do is ask you some questions.

1. Can you identify the trojans, i.e. by name or other means (file names)?
   
2. What firewall are you using -- Win XP firewall?
   

Mozilla is a good idea; less vulnerable than IE.

After you complete cleaning up your current situation I strongly suggest you upgrade to SP2.

P.S. I assume that you have the latest version & updates of AVG.

[PoisonIvy]

Hi,

Yes, the names are briss, and bispy. (2 of the 3 where the same I believe,odd). And the firewall, is linksys. (Bought another router just to connect throught my main desktop, to this laptop.) My dad said something about it may have a little delay, or something, that can not always catch the viruses, etc. Dont know anything about routers,firewalls,wtc, so dont know if it makes any sense. Thanks!

Crystal

edited to add, yes, I been updating the avg, just wish it would remove them 8)

[ɹəuəllıʍ ʇɐb]

Found this on bispy at the Grisoft site: http://www.grisoft.com/us/us_remtext.php?id=bagbugnet

Found this on briss via Google: http://www.pestpatrol.com/PestInfo/w/win32...ss_h_trojan.asp

Hope this helps; if not, report back.

[PoisonIvy]

Hi there,

thanks for the links. I downloaded the avg vcleaner, then rebooted into safemode, when the screen came up in safemode, the icon was not on my screen, only a few icons,so, I rebooted again, and tried safemde with networking, thught it may allow me to use it that way, nope, so I searched in my computer, found it, clicked it, it look only a couple minutes, and said no viruses found, but some of the text was blinking, did not look done, but must have, because it did nothing. It didnt worked. I re scan last night, have 3 trojans, again! (I had rid one). Bispy a,b,c, just able to move one to virusvault.

I am copying the files/objects below, dont know if it helps at all, but thought I should:

c:\WINDOWS\system32\in9bDs.dll:\bi.dll (infected,embedded)

c:\WINDOWS\system32\in9bDs.dll:\birep.exe (infected,embedded)

c:\WINDOWS\system32\in9bDs.dll (moved to virusvault)

just dont know what to do now,what a mess. Thanks,

Ivy

[ɹəuəllıʍ ʇɐb]

I am sorry that I'm unable to help you any more; as I wrote earlier, I am not really an expert on this. And it seems nobody else here has much more advice.

Try the FAQ on the Grisoft website, or the Contact link on that page.

Anyone here knows of any other fora that deal with these kind of problems?

[scuzzman]

There was only one file, and it was moved to the vault (it was just infected with 3 different virii)

[nellie2]

Still waiting for a reply here :blink: