return to tranceaddict TranceAddict Forums Archive > Main Forums > Chill Out Room

Pages: [1] 2 
TROJ_BISPY.B virus help!!!
View this Thread in Original format
digitalbreach
ran a scan an found this virus: TROJ_BISPY.B

Stupid pop-ups keep coming up and this weird program is running that I can't delete. Anyways I found it using TrendMicro's online scan.
I followed the solutions {LINK
but I couldn't find any of the entries that I was supposed to be deleting.

Anyone that has sucessfuly deleted this virus. help. :happy2:
Also is it wise to delete internet explorer folders from registry if I don't even use it?? I'm a firefox user.
digitalbreach
anyone??

this virus is pissing me off. help plz.
Orbax
do pandasoft as well. Just delete the file if its uncleanable dude.
digitalbreach
pandasoft??

I've cleaned the sys32 cache folder and all the temp files. tried looking in sys registry for entries but couldn't find any. Will try just deleting the acual files but I doubt that works.

Also forogot to mention:
my OS is booting up much faster now...it skips all the initial boot up that is controlled by the motherboard and a weird screeen flashes before the WinXP screen comes up.

prog: Webtools is running along w/ other minor processes.

orbax: would you delete all explorer entries in registry if explorer is not used???
A83
Uhh...boot into safe mode

I think thats done by pressing f8 or f10 really fast at start up

then delete the file or run virus protection
Orbax
did you do their free scan and they showed you all the infected files? and pandasoft has an online virus scan as well that is quite effective
digitalbreach
follow the link in my first post and see if any of those entries are in your registry.
The think is this trojan replicates and creates other .exe files that causes lots of pop-ups and s w/ windows player.

next I downloaded AVG antivirus from grisoft
ran in safemode and caught all of the replicas.
I think I got it.

thanx orbax
digitalbreach
f@ck me!!

I think its a boot sector virus.
cause when I booted back in regular mode AVG caught it again. Cannot delete it >> Temp Internet Files\Content.IE5\..\ei.exe

Going to sleep for now..have class tomorrow.
anyone else w/ good leads to this virus? :whip:

~digital
Orbax
once you have identified the file names copy and paste them into notepad. close down every single IE process and window. Then shut down every non essential process. Delete all of the files in your notepad now.

I know processes well so when i had something that id close like

"C:\doc set\temp\ie\8435\wowser1.exe"

in processes a wowser2.exe would start running and they kept switching off. just did a windows search for wowser2 and it was in a sys32 file. so deleed that as well.

rebooted, everything was fine, then virus scanned again and I had gotten them all. You have to close the process its using before you can delete the file. Cheers
digitalbreach
Each time AVG finds it says it can't delete cause it's still in use in memory.

Orbax: will try this when I get home tonite.
Need to study cause midterms are before spring break.
:tongue2

digitalbreach
tried it seems to have gotten rid of it.
also deleted any files created during the time of the infection.

in
windows\sys32 folder
Orbax
;) glad ot hear it
CLICK TO RETURN TO TOP OF PAGE
Pages: [1] 2 
Privacy Statement