Hello all,
My boyfriend's computer (Window 2000) has just found two trojan horses, by AVG. They are:

Proxy.X found in C:\WINNT\system32\fqqe.exe

IRC\BackDoor.Sdbot.VZ found in C:\WINNT\system32\nstrue.exe

I am going in, anybody got any links about these two. Will let you know how it works out. Wish me luck! Grrrrrr!

Check this posting out same thing unknown Windows OS Have to go into Registry to delete keys
I saw one of these is preventable with Spywareblaster Get your Boyfriends Comp fitted with this Program SH?

Yes, I downloaded Spywareblaster, Spybot S&D, Ad-Aware SE, and ZA it found alot of bugs, on Ad-Aware and Spybot, and AVG has the trojans in the virus vault. AVG said that the trojans were healed????? Can I delet them out of virus vault, and I guess I should go into registry as well, eh? This Windows 2000 is a pain, he decided to hook it up instead of the Win 98 pc, cause CD player went bad.
Also, can I get SpywareBlaster to load up on startup, he doesn't know much about pc's?

quote:

---

Originally posted by soaringhorse:
AVG has the trojans in the virus vault. AVG said that the trojans were healed????? Can I delet them out of virus vault,
Also, can I get SpywareBlaster to load up on startup, he doesn't know much about pc's?

---

If you can delete from the Virus vault that should be OK S "Healed"? treat that with caution!
Spywareblaster is on the Start menu All you have to do is set the "protection"(turn the list to Black text from Red text and update every few weeks .You update it once per month .Your boyfriend needn't do anything. This program works quietly in the background (like virtual flypaper)

Thanks Bedstor, I really am happy you are helping, I have one more question, then I'll quit being a pest, lol.
Whenever a person goes into the registry it's a good idea to back it up, right? Well, I don't know exactly how. Is it File, Import Registry File? Then if a problem, export? And also on the previous post, it says to look in \WINNT\system32, and I can't seem to find that. Got any ideas?

Pest?
You keep me occupied I'm happy
Back to Business
Backing up the Registry
Its the other way around its "Export" to save and "Import" to bring back saved as ".reg"
Idea, do todays date as a file name? then you won't lose it? 12204.regYou cannot use any other character bar the "_" and not next to the "dot" otherwise it won't save

Thanks for being patient, Bedstor I thought I had it reversed, good tip, putting the date on there. I am having trouble getting to the TP/IP settings on this Win 2000. Trying to do a release, recall to get the IP settings in there. The reason I'm trying to do that is because I get an error when clicking on the IE icon. It won't let me get on that way. I have to manually go to the start button, settings, network and dial-up connections, and then Local Area Connections. This is a pain each time to connect. I will let you know what I find in regedit, once I figure out which culprit it is. By the way, I'm thinking since this is the SP1 IE, that may be what's the problem will download the patches.

Well, I think I figured out how to access the ip address on Windows 2000, it's ipconfig /all /renew, I am now able to click the "E" icon. Sheeesh, what a pain, had to look it up in the windows help, under DHCP, but I am running Adaware and Spybot each day, so far so good. I went to Pest Patrol and got a result of 15, so I'm working on it, lol.

Just wanted to say, to all here in the computer section, I am soooo happy you're here to help!