I'm Trying to help my brother remove a virus from his computer. He got it by downloading a program that ended up containing a trojan horse virus. He is using Windows XP Home Ed.
Symptoms of the virus includes not being able to access some AV sites. Mostly the free ones like AVG, Avast and NOD32 (i can however access the ones that arnt free like Norton and McAfee). As a result i cant update the definitions on AVG free. also theres some "pop-ups". its attempting to use IE (My brother uses Firefox) to show pop-ups but these errors are being shown instead:
When the IE popup script errors came on screen i checked task manager and the following processes was the virus running in the background:
msb.exe and
17067.exeby ending it in task manager the popup script errors went away but they would return every 30 minutes or so. also the
17067.exe process tookup a lot of memory usage, around 200,000 K.
I ran a AVG scan and found out the name of the virus is
Trojan horse Downloader.Generic8.APEH. I typed the name of the virus in google to find some solutions to removing it and couldn't really find anything useful.
I used AVG to move it virus vault and delete it but apparently it didnt work cause its still having the symptoms like not being able to access the AV sites and the popup scripts errors.
However AVG did show the location of where the virus had been installed to and i went to that directory:
C:\Documents and Settings\
Username\Local Settings\Temp
i found these files here and deleted it:
Im still getting the virus symptoms but when the pop-up script occurs there is no
17067.exe in the task manager, just the
msb.exe. as before ending it closes the popup script error box but it shows up again every 30 mins.
if anyone knows of a solution or program that i can use to remove the virus then it would be greatly appreciated. Thanks in advance.
