Trojan Help: PSW.BISPY.A

[Vishnu Reddy]

Hello Everyone,

My PC has been infected by this trojan. I ran AVG after updates and it got the trojan and said the file was delected. Then I ran House Call and Panda online scans and both showed nothing. Then I again ran AVG for second time and it showed the trojan is my C:\system volume information....
I ran AVG on it and removed one file but it said another infected file could not be so I simply delected that file off. Since then I ran numerous scans with various AV software and Trojan Scanners and found nothing. I looked up on all online virus and trojan databases and this one was not listed at all in any of them.
Can someone tell me how I can be 100% sure I dont have the trojan? or any informatiom how to get this one out of my system? My ebay account has be hacked into but luckily nothing was bought or sold!
Anyway help is greatly appreciated.
clear skies
Vishnu

 

[Flrman1]

C:\system volume information.... is in System restore. The only way to remove the infected file from there is to turn off system restore to clear all restore points.

Turn off System Restore:

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.
Restart your computer.

When you are sure you are clean turn it back on and create a restore point.


It would probably be a good idea to post a hijack This log and have it checked before you turn System restore back on.

Click here to download Hijack This. Click on the Hijackthis.exe.

Click the "Scan" button when the scan is finished the scan button will become "Save Log" click that and save the log.

Go to where you saved the log and click on "Edit > Select All" then click on "Edit > Copy" then Paste the log back here in a reply.

DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required. Someone here will be glad to advise you on what to fix.

*Note: When you download Hijack This Do Not download it to a temp folder or to the desktop. Create a permanent folder somewhere like in My Documents and name it Hijack This and put it in that folder.