Win32.TrojanSpy.Goldun, TagASaurus and Coolwebsearch (page 2)

Bstuff · 2007-07-12T05:30:32+00:00

Great forum here... love the concept of teaching people to help themselves. My XP(sp2) pc rebooted itself for no reason 2 days ago... I ran AdaWare and Spybot Search Destroy and both found half a dozen or more items that looked dangerous. I'm not prone to picking up a lot of viruses usually and this was unusual. I let both programs auto clean and spybot wanted to run again on bootup. I rebooted and ran both programs again... Spybot still picked up TagASaurus but adaware showed up clear. I was busy at the time and possibly stupidly decided to work it out later... then forgot. Today the PC rebooted for no apparent reason again (I dont have any MS or other autoupdates activated that might reboot the pc themselves, that I am aware of) I ran both adaware and spybot again and this time there was maybe a dozen items... including one I know that I REALLY dont want to have, Win32.TrojanSpy.Goldun, which is designed to steal e-gold (which I use) Anyway... better not make this story too long... a

Elrond Admin/Teacher Emeritus

July 31, 2007, 4:13 AM UTC

Please let me know if you need any more help.

Bstuff

July 31, 2007, 5:16 AM UTC

sorry for the long delay in coming back Elrond... have been away from home for most of the week.

Will be back in next 24 hours with results of those scans.. up to my neck in catch-up work! :roll:

Elrond Admin/Teacher Emeritus

July 31, 2007, 7:03 AM UTC

No problem.

Elrond Admin/Teacher Emeritus

August 6, 2007, 5:33 PM UTC

I know that you are up to your eyeballs in work but let me know if you need anymore help.

NonSuch Administrator

August 18, 2007, 8:09 AM UTC

This topic is now closed due to inactivity. If you wish it reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Please do not contact us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.