Trojan-Downloader.VBS.Psyme.v. virus

[vterry]

Hi. I am new to the forum, but in desperate need of help. I ran a scan on my computer and it says that it is infected with the Trojan-Downloader.VBS.Psyme.v. virus. I forwarded it to the people I bought my anti-virus software from, but they didn't really help. I need to know how I can get this out of my computer. I found the file it was believed to be in, and I deleted it, but when I ran another scan, it is still showing it being there. Please Help!!!!!!!!!!!!!!

[jaishankar]

Hi. I am new to the forum, but in desperate need of help. I ran a scan on my computer and it says that it is infected with the Trojan-Downloader.VBS.Psyme.v. virus. I forwarded it to the people I bought my anti-virus software from, but they didn't really help. I need to know how I can get this out of my computer. I found the file it was believed to be in, and I deleted it, but when I ran another scan, it is still showing it being there. Please Help!!!!!!!!!!!!!!

Plz specify the Operating System and the antivirus ur using, so that it makes us easy to solve the problem.
And whenever u perform a Virus scan, do it in Safe mode and and b4 scanning disable system restore

[vterry]

I am using Windows ME and my virus software is Defender Pro 5 in 1 2005.

[DMR]

1. Did you try cleaning the infection by running Defender in Safe Mode as jaishankar suggested? Before going in to Safe Mode, use Defender's online update feature to make sure you have the absolutely most current virus detection database installed.

2.

I found the file it was believed to be in, and I deleted it, but when I ran another scan, it is still showing it being there.

Please tell us the exact name and location of the infected file.

3. Try at least two of the following sites for an online virus scan:

BitDefender Free Online Virus Scan
http://www.bitdefender.com/scan/licence.php
Make sure you tick AutoClean under Scan Options.

Panda ActiveScan
http://www.pandasoftware.com/active...n_principal.htm
Make sure you tick Disinfect automatically under Scan Options.

Housecall at TrendMicro
http://housecall.trendmicro.com/hou.../start_corp.asp
Make sure you tick Auto Clean.
When it completes, post back the full filename of any files that cannot be cleaned or deleted.

eTrust Antivirus Web Scanner
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

4. If the above suggestions don't solve the problem:

Download the (free) HijackThis utility.

Once downloaded, follow these instructions to install and run the program:

Create a folder for HJT outside of any Temp/Temporary folders and move/extract HijackThis to that folder now. A folder such such as C:\HijackThis or C:\Spyware Tools\HijackThis will do.

Run HijackThis, but do not have HJT fix anything yet; only have it scan your system! Once the scan is complete, the "Scan" button will turn into an option to "Save log...".
Save the log in the folder you created for HijackThis; the saved file will be named "hijackthis.log". Open the log file with Windows Notepad, and cut-n-paste the entire contents of the Notepad file here.

The log contents will tell us a lot about what "nasties" have crept into your system, and once we analyse the log we can tell you what to do from there.

[vterry]

The file infected is C:\Windows\TemporaryInternetFiles\Content.IE5\8LIJC563\Track2[1].CHM/track2.htm . I tried running Defender in Safe Mode, and it says that my anti-virus data is corrupted, so I have recontacted Defender, no reply yet.

[DMR]

The Temporary Internet Files folder is just that- temporary; you can delete everything in those folders:

* Open your Internet Options control panel.
* In the General tab, click on the "Delete files..." button.
* In the resulting window, put a check mark in the "Delete offline content" box and then hit OK.
* The deletion may take a while, so be patient.

If Defender is giving you problems, try uninstalling it entirely and reinstalling it.

[jaishankar]

The file infected is C:\Windows\TemporaryInternetFiles\Content.IE5\8LIJC563\Track2[1].CHM/track2.htm . I tried running Defender in Safe Mode, and it says that my anti-virus data is corrupted, so I have recontacted Defender, no reply yet.

U can also use some programs like Windows Washer to clean the temporary files

here is the link http://www.webroot.com/consumer/products/windowwasher/

If ur antivirus is corrupted, Use McAfee AVERT Stinger. A small utility which is capable of cleaning many Viruses. Download http://vil.nai.com/vil/stinger/ go to safe mode disable system restore and scan with it

[vterry]

I think I was able to delete it when I deleted the temporary files, I had done this before, but didn't check to delete offline content as well. I ran another scan, and it didn't find anything. Thank you to all that contributed to helping me solve this.

[jaishankar]

I think I was able to delete it when I deleted the temporary files, I had done this before, but didn't check to delete offline content as well. I ran another scan, and it didn't find anything. Thank you to all that contributed to helping me solve this.

Your welcome