Friend's got a computer virus

Zetx

Unfortunately, I don't have physical access to the computer, but she tells me that it's trojan.win32.agent.jfz, but my google-fu isn't strong enough to find anything on it.

Suggestions?

Thanatos

Reformat.

Zetx

I'm purposefully avoiding that option because she'll want to back stuff up on an external and that'll probably cause more problems with the trojan tagging along or something and then we're back to square one...


... It's going to come down to a reformat, eh.

Thanatos

Zetx wrote: »

I'm purposefully avoiding that option because she'll want to back stuff up on an external and that'll probably cause more problems with the trojan tagging along or something and then we're back to square one...


... It's going to come down to a reformat, eh.

Running someone through getting rid of a virus over the phone is a fucking bitch and a half, if they're not capable of doing it themselves in the first place. Reformatting is generally the way to go.

You can have her download Panda, if you want to make a run at it.

nuclearalchemist

I agree with Thanatos. Even if you do manage to wipe out the virus, you might only be partially successful, and things still might be screwed up. You can try backing up to a hard drive, reformatting, then setting the computer up to not auto-connect new hardware. Then you can virus scan the backup. I've done that before.

Zetx

Alright. Thanks guys.

Sir Red of the Manti

Or just get them to boot in safemode w/ networking and try housecall/Panda/Other Anti-virus stuff.

nerdgaymer

Safe mode is good to run virus removal stuff in, also turn off System Restore while scanning for bugs as Viruses like to hide there and reinfect the system (plus using system restore will not solve viral issues anyways). Turn System Restore back on once the computer is clean. If using scanners to get the virus off doesnt work though reformatting may be the best option, there are other ways to get the bug out but they are more complicated (Hijackthis and Process Explorer are both great tools if you know how to use them, dont use them if you dont know how to).

embrik

Zetx wrote: »

Unfortunately, I don't have physical access to the computer, but she tells me that it's trojan.win32.agent.jfz, but my google-fu isn't strong enough to find anything on it.

Suggestions?

How does she know what the virus is named? Her AV software must've caught it, right? Was it able to remove it, or does it keep coming back up? She might be fine. If it's software like Symantec AV, it'll have a history/log which should tell you the action that was taken against the virus. (e.g. deleted, quarantined, left alone)