Trojan on new Hard Drive.

Hello, my nephew is not PC savy at all & I'm Polish so please bear with me. He has a HP dv2125nr Notebook, XP, uses it on a Wireless DSL connection in the house.. Only about 6 months old at most I think. The Hard Drive broke and Best Buy replaced it last week under Warranty. He got it back but did not know and I doubt "Geek Squad" downloaded Windows updates, or brought his free Norton AV up to date. So after using for about 4 hours he got a trojan and shut off PC. He is coming over today with it to my house. I have couple ?, should I first bring PC up to date with Norton AV, then do Windows Update for Security.
I don't know yet name of Trojan. Any ideas or will you need more info. I hope to help & teach him some basics today. Many thanks. Also, my dopey question, if you go back to System Restore Point, that will still leave Trojan in PC's hard drive, correct ?
~Paul

 

Hello and welcome to WindowsBBS Removing Spyware & Viruses forum.

Yes using system restore may indeed clear you of that trojan. It is at times the easiest way to remove them and works quite often.

I would try that, then get to Windows update and get patched up. If you have any problems, then don't bother trying to update, it could be the trojan causing it.

Then please do as instructed below in the order presented.

Here is how we like to begin our analysis of your pc:

For starters, if you do not have them yet, please DL and run AdAware & Spybot Search & Destroy. AdAware and Spybot Search & Destroy are 2 of the most trusted apps in the security area. They are both free, compliment each other nicely, and do not use a lot of resources. They can be found here:

Spybot Search & Destroy v.1.4
AdAware SE Free v1.06r

With AdAware and Spybot: DL, follow the install instructions, check for updates, then scan, repair/remove/quarantine anything found. Reboot before next scan with whichever app is next. The reason for running these apps, is to clean up some of the other 'crapware' on your pc, which, in turn, will make deciphering your HJT log, easier.

Then we use HiJackThis v1.99.1
Please download HijackThis! SetUp from here. Save the file to your desktop.

Double-click the HijackThis! SetUp icon to begin the installation. Follow the prompts for the default install location of:'C:\Program Files\HijackThis'. Tick the 'Create a desktop' button when the option appears. Select next, then allow HijackThis! to start.

Then press the [Scan] button. You will notice the [Scan] button will turn into a [Save Log] button. Click the [Save Log] button and notepad will open up with the contents of the scan. Right-click in the saved log, and select 'copy'. Then proceed to your original thread, unless otherwise instructed and click the '[Reply]' button and paste the saved contents to be reviewed. Do not make any modifications to the log or perform any 'fixes' until told to do so.


Someone will be along to look at your log soon as possible, we appreciate your patience. Remember, we are ALL VOLUNTEERS, those of us who help. And we do the best we can to answer posts as soon as we can. Logs are generally looked at in the order in which they are posted.

 

Thank you TeMerc,,this was great information. I will follow it and continue to teach my nephew how important Ad-Aware & Search & Destroy are along with keeping the Windows update current. and his Anti-Virus. I'm trying to get him to dump Norton I S for AVG & Zone Alarm firewall. ... Hopefully he shows up now, he said he would be over this afternoon. I love this site..you guys & gals are the BEST
Thank You
Paul
GO RED SOX