PDA

View Full Version : Torpig



changas
2007-04-30, 13:36
Hi. Hoping you can help me here. I've run Spybot several times trying to remove Torpig, but it invariably tells me to run Spybot on reboot and this never fixes the problem. I am running Windows XP Pro with no service packs.
Can you guys help me out?!

tashi
2007-04-30, 16:10
Hi there.

Any reason for not having a Service Pack? :) You and Windows, a joint effort (http://forums.spybot.info/showpost.php?p=25290&postcount=4)




..... the computer must be free from infection before upgrading to Service Pack2 (SP2)

However if seeking assistance to remove malware, it is critical that you update to Service Pack 1a.
Get SP1a here : http://www.microsoft.com/windowsxp/downloads/updates/sp1/default.mspx

Although Windows XP Service Pack 2 is cumulative, meaning it includes Service Pack 1 and all updates predating the release of SP2; before you upgrade to Windows XP SP2 (Service Pack 2) you must ensure the computer is free of malware.



"BEFORE you POST" Mandatory Steps Before Requesting Assistance (http://forums.spybot.info/showthread.php?t=288)

changas
2007-04-30, 17:10
Have had trouble downloading SP1 it from Microsoft in the past and even now. Will having SP1 help my problem?

Anyway the Torpig problem has created two files c:\windows\temp\$_2341233.tmp and c:\windows\temp\$_2341234.tmp which Spybot can't remove due to the associated files are still in use (in memory). How can I get rid of these files, after all they do contain information about my online banking details which I'm not happy about!

tashi
2007-05-01, 00:14
Hello.

You can follow the procedure in our sticky topic: "BEFORE you POST" Mandatory Steps Before Requesting Assistance (http://forums.spybot.info/showthread.php?t=288)

Helpers usually ask for the machine to be updated to SP1a to avoid spending their volunteer time assisting in a clean, when the machine will be re-infected almost immediately. :alien:

tashi
2007-05-04, 19:29
This topic has been archived.

If you need it re-opened, please send me a private message (pm) and provide a link to the thread. Applies only to the original poster, anyone else with similar problems please start a new topic.