Best of luck. Most of the forums on the web that I have read have been sceptical about relying on Windows firewall though I understand that the Vista version is supposed to be better than the XP version. I guess the proof of the pudding is in the eating. Clearly this Trojan has breached your current defences . At least NOD32 has detected it once it has got past your current firewall setup.
Regards David griffith -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of matthew Sent: Saturday, 28 November 2009 20:00 To: [email protected] Subject: Re: [Blind-Computing] hello and need help getting rid of a trojan Thank you for the ideas david. I will try and get someone sighted here to help me run it in safe mode. I do have a router and thought that firewall plus the one with windows would be good enough. -------------------------------------------------- From: "David Griffith" <[email protected]> Sent: Saturday, November 28, 2009 3:06 AM To: <[email protected]> Subject: Re: [Blind-Computing] hello and need help getting rid of a trojan > The reason a Trojan cannot be deleted is probably that it is being > loaded > at startup . You could try putting this Trojan name into a Google Search > to > get definite instructions on removal but I can suggest the following. Try > . > > > There are normally 2 ways of coping with Trojans . > > 1. Run Nod 32 in windows safe Mode. Safe Mode is a special kind of > windows that can be loaded where startup drivers, including hopefully your > Trojan are not loaded. I am not sure how this is done in vista but in XP I > think I recall you enter Safe Mode by pressing F8 repeatedly as the > computer > boots up. Your problem however, is that Jaws will not work in safe Mode > as > the internal sound driver will not be loaded and there are other special > drivers Jaws relies upon. > I saw a post recently on an NVDA list saying that you could however run > the > free NVDA Screen reader in Safe Mode. To do this you need a portable > version of NVDA and an external USB headset or external USB Soundcard. > Apparently these USB sound cards or headsets will load in Safe Mode. I > have > not tested this out. It may be easier for you to just get sighted help to > run NOD32 in Safe Mode however. > > 2. The other method I suggest is that you try installing super > antispyware. This has a claim that it is able to remove Trojans . What is > will do, if it finds the Trojan, is inform you that your system needs to > be > restarted. Super Antispyware will then try to remove the Trojan as > windows > starts up before it gets a chance to load. > > Of the 2 methods I would try to use Nod 32 in Safe Mode first as it has > already shown it can detect this Trojan. This gives a high chance that it > should be able to definitely find it . > > Once you are 100% sure that your system is clean I would suggest. > 1. Make sure you have a good firewall if you do not have one set up. > Personally I would be using ESET Smart Security rather than the stand > alone > NOD32 anti virus that you have. > 2. use a disk image utility to back up your windows installation so you > have > a simple method of returning to a clean version of windows in future. > > > Regards > > David Griffith > > > > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of matthew > Sent: Saturday, 28 November 2009 01:41 > To: blind computing > Subject: [Blind-Computing] hello and need help getting rid of a trojan > > Hello all. I am Matthew and new to the list. I have an hp pavilion laptop > that was running vista and I recently upgraded to windows 7. I am running > jaws 11 professional. I am also running the latest version of nod32. For > some reason now it keeps popping up saying I have the win32/mebroot.k > trojan > and it can't be cleaned or deleted. I have had no luck in finding any > workable trojan removers. Any help or suggestions would be greatly > appreciated. > > > __________ Information from ESET NOD32 Antivirus, version of virus > signature > database 4643 (20091127) __________ > > The message was checked by ESET NOD32 Antivirus. > > http://www.eset.com > > For answers to frequently asked questions about this list visit: > http://www.jaws-users.com/help/ > > __________ Information from ESET Smart Security, version of virus > signature > database 4643 (20091127) __________ > > The message was checked by ESET Smart Security. > > http://www.eset.com > > > > > __________ Information from ESET Smart Security, version of virus > signature > database 4643 (20091127) __________ > > The message was checked by ESET Smart Security. > > http://www.eset.com > > > > __________ Information from ESET Smart Security, version of virus > signature > database 4643 (20091127) __________ > > The message was checked by ESET Smart Security. > > http://www.eset.com > > > > For answers to frequently asked questions about this list visit: > http://www.jaws-users.com/help/ > > __________ Information from ESET NOD32 Antivirus, version of virus > signature database 4644 (20091128) __________ > > The message was checked by ESET NOD32 Antivirus. > > http://www.eset.com > > > __________ Information from ESET NOD32 Antivirus, version of virus signature database 4645 (20091128) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com For answers to frequently asked questions about this list visit: http://www.jaws-users.com/help/ __________ Information from ESET Smart Security, version of virus signature database 4645 (20091128) __________ The message was checked by ESET Smart Security. http://www.eset.com __________ Information from ESET Smart Security, version of virus signature database 4645 (20091128) __________ The message was checked by ESET Smart Security. http://www.eset.com __________ Information from ESET Smart Security, version of virus signature database 4645 (20091128) __________ The message was checked by ESET Smart Security. http://www.eset.com For answers to frequently asked questions about this list visit: http://www.jaws-users.com/help/
