Trojan in my Internet Explorer.exe

says : trojan horse downloader.small.7.AG

is in:

C:/Program Files/Internet Explorer/Setup.exe

I've ran my AVG and it finds it but it won't allow me to delete it b/c it is a system file. I cannot even access the internet on that computer now.

What can I do?

I've even uninstalled it and reinstalled it but doesn't help... still on disc.

Any help is appreciated, thank you!

 

ps: I've even d/l on this computer another browser to try and another adware product and I STILL cannot connect to the internet on that computer. What can I do, I'm SO ready to toss it out the window!!!



Thanks

 

I see you have XP. SP2?

Dialup? DSL?

Exactly what happens when you try to go on the Internet?

AVG version? latest definitions?

AdAware? Spybot Search and Destroy?

I looked in my Program Files\IE and there is no "setup.exe "

I tried to find info on the Trojan at AVG and Computer Associates and nothing found on a search. What is the exact name of the Trojan?

With these answers, someone can come along and lend a hand with your problem.

 

Hi there,

Well, I just had to reinstall XP b/c of a LOT of problems and that was only a couple days ago so I haven't updated SP's or anything... I have latest AVG with updates, McAfee Virus (which oddly enough didn't detect it), Sygate Firewall. I had to install this browser to get online b/c IE wouldn't work. Now scanning it says the virus is here:

C:/SYSTEM VOLUME INFORMATION/_RESTORE-{EE95338C-FEA8-4523-861A-8C3402FF1F0F}/RP2/A0000148.EXE

I have found the RP2 folder and deleted it. It wouldn't allow me to delete the whole folder that it was in... running another scan now.... Still don't know about the IE, I've uninstalled it for now...

 

Here's one thought. Turn off your system restore and reboot. Rerun AVG and see if it can take care of it now. If all is well you can turn the SR back on. If all is not well, come back and we may think of something else.

Turning off your system restore gets rid of all your restore points where the Trojan may be living.

 

I recommend this. Disable System Restore XP, and install MoveOnBoot. This adds a new item to the right click on menu, you only need to select to delete on next boot, and the file will be deleted when you reboot.

 

Hi, sorry I haven't posted sooner but I have the flu so have been sleeping a lot.

I did somehow get rid of the System Restore file by manually deleting it. BUT I dont know what happened the to the one in the explorer.exe... Could it be the scans arent' getting it b/c IE isn't installed? I installed Ace Explorer to use in its place, thinking that if IE isn't installed then the virus isn't there, LOL!! Told you I'm sick,

Do you think it's gone? I've scanned several times. I've installed AVG, Spybot Search & Destroy, Spyware Blaster and Adaware & Sygate Firewall. Think that is sufficient? I'm now d/l all the MS updates but am wary of SP2, I had just installed it on here when all sorts of things went wrong and had to reinstall everything.... what is the consensis on SP2?

Well, let me know if I should reinstall IE and give it a go or if you think I'm clean now.

I appreciate all your help fellas!! Happy Saturday!

Meow!

 

I'd say you can go for it now. BTW, how did you uninstall IE6? I mean, did you just use Control Panel/ Add Remove Programs > add/remove Windows components or did you use something else?

 

Well, I just went to the add/remove and unchecked IE, don't know if that works or not but it's not showing up anymore as a shortcut anywhere...

Only thing is my system is running extremely slow now, maybe I have too much going on? Or maybe it's the Ace Explorer?? I don't know but it's bugging me, LOL!!

 

I don't think you actually uninstalled IE, as it is half of XP, XP does not exist if IE isn't there.
IF you were to post a HijackThis log, maybe we could tell you what is slowing you down.

 

As noted by markp62 - if you run XP, you have IE. All you can remove via add/remove is the front end that allows you to use the app but IE is still there.

The critters that take advantage of holes in IE mostly do not need you to be using it. The fact that the application is there does fine for them.

 

Well, that blows me out of the water. I don't understand that at all.

I use Firefox and Thunderbird and I'm wondering how any critters could get into my stuff through IE if I don't open it?

 

I had a clients machine just the other day that had current McAfee defs running and was infected along with corrupt winsock files.
I pulled the drive out and put in my machine as a slave. Norton found 5 viruses Mcafee didnt.

 

I've found that AVG finds more virus' than anyone, and it's FREE. Now, that's funny!