Win32.Poison.k Trojan

[casselle]

Hi Everyone,

My Spybot Search & Destroy scans have detected the above trojan. Despite deleting it, it reappears on the next scan.

I know it is a particularly difficult trojan to eradicate. Can anyone please give me advice on a permanent solution to this problem?

[pskelley]

Welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
"BEFORE you POST" (READ this Procedure before Requesting Assistance)
http://forums.spybot.info/showthread.php?t=288
All advice given is taken at your own risk.
Please make sure you have read this information so we are on the same page.

My information here: http://www.safer-networking.org/en/updatehistory/page-10.html
Indicates Spybot S&D was updated for this trojan on: 8. August 2007 Win32.Poison.l
Is your version of Spybot completely updated and fully immunized? If so you might want to ask here:
http://forums.spybot.info/forumdisplay.php?f=4 <<< Spybot forum
http://forums.spybot.info/forumdisplay.php?f=16 <<< false positives
Where experts with the program can advise you.

Thanks

[casselle]

Many thanks for your replies. I put the PC into safe mode, ran the Spybot scan but it didn't pick the trojan up (despite having done so numerous time prior to that).

Ran an AVG scan - found 5 items (none with the above named trojan). Deleted those. Have since run a number of Spybot/AVG scans and nothing has been detected.

Could it be that one of the items located in AVG was the Win32.Poison.k trojan with a different name?

Many thanks

[pskelley]

Problem is every antivirus program wants to use their own name for stuff, and it does create a problem for us. I don't know what AVG calls it, but here is the Google:
http://www.google.com/search?hl=en&q=Win32.Poison.k+&btnG=Google+Search

System Restore does not know the good files from the bad. In case bad stuff has gotten into your System Restore files, follow the instructions in this link to get clean System Restore files. Turn it off, reboot then turn it back on:
http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/tips/mcgill1.mspx

Some good information for you:
http://users.telenet.be/bluepatchy/miekiemoes/slowcomputer.html

Here is some great information from experts in this field that will help you stay clean and safe online.
http://users.telenet.be/bluepatchy/miekiemoes/prevention.html
http://forums.spybot.info/showthread.php?t=279
http://russelltexas.com/malware/allclear.htm
http://forum.malwareremoval.com/viewtopic.php?t=14
http://www.bleepingcomputer.com/forums/topict2520.html
http://cybercoyote.org/security/not-admin.shtml

Thanks...pskelley
Safer Networking Forums
http://www.spybot.info/en/donate/index.html
If you are reading this information...thank a teacher,
If you are reading it in English...thank a soldier.

[casselle]

Many, many thanks for all this valuable information, it is much appreciated :-)