Pls HELP

Hi all,

Im new here and think I have a Virus or Trojan on my pc.The other day all weird stuff happend on my pc,windows icons changing , pc crashing ect. I ran "The Cleaner" and it found a trojan called "Trojan Runner" which it got rid of for me. However,the problem continued so I downloaded "AVG" which picked up that I had a trojan called "Trojan Dropper". AVG,got rid of the Trojan Dropper and using the AVG I tried to run a "Redundant Scan",the scan was running fine till it gets to a file in the windows folder called "HOTMAIL.EXE" when the scan hits that file it locks up? Can somone please tell me what this file is as I have never used HOTMAIL and I want to know if its just somepart of windows that Im free to delete or is it another Trojan?.I have used like for virus checkers and they all say its not a virus or trojan but Id really like to be sure.

Thanks in advance
Face

My god man....my god...

Thats sound advice there Ennis, nice one.
Facemg - you can delete the file "hotmail.exe" its not a part of windows, sounds to me like you've taken a hammering though - might be worth your while doing a format/re-install. Before connecting your pc to the internet again, i'd take a look at the configuration, either your blithely opening e-mail attachments or there's some serious holes in your system - either way, it would be advisable to do some research and figure out whats going on with your pc - posting here isn't a bad start - have a look through some of the other posts as there's some sound advice on how to achieve a more secure setup with your windows box.
Knowledge is king.

Just want to say thanks for you for your help.I have deleted it as you said but was wondering if you could tell me what "HOTMAIL.EXE" was.

short note: why is it that no matter how many times you explain that your a beginner on the subject of virus and trojans and pcs in general ,and then go ahead and explain your problem you will always get "idiots" replying to your question with stupid comments like "my god,my god" why do they bother to reply just to make light of a problem that is serious to the indivdual thats writing it.

once again, thanks for taking my problem seriously enough to help me.

Quote:

---

Originally posted by facemg
Just want to say thanks for you for your help.I have deleted it as you said but was wondering if you could tell me what "HOTMAIL.EXE" was.

short note: why is it that no matter how many times you explain that your a beginner on the subject of virus and trojans and pcs in general ,and then go ahead and explain your problem you will always get "idiots" replying to your question with stupid comments like "my god,my god" why do they bother to reply just to make light of a problem that is serious to the indivdual thats writing it.

once again, thanks for taking my problem seriously enough to help me.

---

Don't worry about them :D

Hotmail.exe isn't used (as far as I remember) for any windows operation. Go ahead and nuke the file. Also try this if it's windows 95,98,ME

• Goto the Run menu
• type in msconfig and press enter
• this will allow you to see everything starting up, look for anything suspcious or if you want, just post everything here that shows in the startup (paths included). I can probably tell you what should and shouldn't be there.
• Also is it a compaq, dell, or HP system? Those come with a lot of system tools that run be default when the system starts, might save some cpu and RAM to remove them from startup

Give that a try, still having more problems, I'll try something else.

Msconfig doesn't work in 95, sysedit and regedit are both useful though.

Sometimes when you hear so much **** you just dont want to answer, mother,.

Quote:

---

Originally posted by Ennis
Sometimes when you hear so much **** you just dont want to answer, mother,.

---

I belive it DOES work with Win95, only it doesn't come with it, AFAIK.

You can go to Tauscan and download a proggy that will scan your puter for trojans.

For facemg

Jeez, sounds like you were just loaded with trojans... I'm just curious what you were doing that might have led to the infection?

:) Ways to Help Protect your Comp from Trojans and Etc:

1. Invest in a good virus scanner ( I recommend Norton, but someone might know a better one)
2. Don't download stuff you dont need, also included in this rule is dont open email attachments from people you don't know.
3. Check OS startup entries: (Registry, AutoExec, Startup Folder)
As mentioned you can use Sysedit, MsConfig, Regedit, etc

Here are a few places to look for suspious entries:

Places to look in the registry:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices

Places to look in the Win.INI:
"load="
"run="
normally these are left empty

Note: Check the AutoExec.bat for odd entries

Also as mentioned it prolly wouldnt be a bad idea to format your drive.

Good Luck I hope this helps alittle!

This might be because i'm drunk - but i think its great what you just did there Simon, that was a very concise, well written response - you deserve a pat on the back for that.
Like i said, i'm drunk - and other things! but thats as good as advice gets, i like your style :-)

Quote:

---

Originally posted by facemg
Hi all,

Im new here and think I have a Virus or Trojan on my pc.The other day all weird stuff happend on my pc,windows icons changing , pc crashing ect. I ran "The Cleaner" and it found a trojan called "Trojan Runner" which it got rid of for me. However,the problem continued so I downloaded "AVG" which picked up that I had a trojan called "Trojan Dropper". AVG,got rid of the Trojan Dropper and using the AVG I tried to run a "Redundant Scan",the scan was running fine till it gets to a file in the windows folder called "HOTMAIL.EXE" when the scan hits that file it locks up? Can somone please tell me what this file is as I have never used HOTMAIL and I want to know if its just somepart of windows that Im free to delete or is it another Trojan?.I have used like for virus checkers and they all say its not a virus or trojan but Id really like to be sure.

Thanks in advance
Face

---

A trojan dropper i just love them casue im developing one of them baiscally a trojan dropper is just like a Virus Dropper or it works on the same technique, It itself is not a trojan but when it enter in ur system it drop a trojan's server into ur system, when ever u scan ur system this dropper will not alert by ur scanner since its not a trojan its just a simple program, the server which is dropped by this technique will be most probably Multipartite(since im developing one thats y im quoting this) the server is not single it has few other it own kind after few days (auto programmed time or sometime a typical behaviour) activate it and then it start multiplying itself into two or three of its kind, the main feature of these trojans servers are they act as Tunnel they are not detected by antiviruses easily.

Scan ur system via Tauscan(Trojan scanner) and after cleaning it use Taumon(Trojan monitor), this will monitor for every trojan and when ever u get infected it will notify u.

One another ans most easiest way o get rid of the trojan is restore ur registry (previous date)
This feature is in WIN98 as far as i know

reboot ur system and start it on safe mode command prompt only there write this command

scanreg \restore

a window will open there u will regiestries which are stored already of few days ago if u remeber which date this trojan infect ur system resotre the registry one day back form that date and u will no more infected.

Always use registry monitors to protect urself cause thes monitors first confirm u whether allow the updation in the registry or not , one of that kind of software that i highly recommand is Jammer .

perfect solution for that .

Quote:

---

Originally posted by Terr


I belive it DOES work with Win95, only it doesn't come with it, AFAIK.

---

What the hell did you quote me here for?

Lol! <smack-of-head-on-keyboard> I hit the 'Quote' button in the wrong post. :o

Serves me right for my impetuous scrolling.

Damn overused Quote button..

Another way that you can block people from putting trojans in your computer is to put a firewall on your system. Firewalls block most of the ports that trojans use. The two firewalls that i would recommend are Zonealarm or Tiny Personal Firewall

Hope that helped

HOTMAIL.exe file has nothing to do with the operating system... so u can eaisly delete it.
what i suggest is take back ups of all your important files and format C drive ..then reinstall the operating system.
and at the end install Norton's antivirus..which according to me is the best..so far...

all the best..
intruder..:thumbsup: