I’m posting what my nephew wrote for someone else who was experiencing hard drive difficulties. Pleae excuse his text messaging lingo.
“hi im the genius kid and wat you have is a trojan that is not detectable by antivirus. Now before i say anything this program from what I have looked at it can install it self under several process names that run on ur computer. The two it uses are svchost.exe and explorer.exe. But they look like this, svchost..exe, or explorer..exe (notice the double periods). Now to get rid of it follow this file path WINDOWS/system32/ it should be in that folder. DO NOT DELETE A FILE THAT LOOKS LIKE THIS - svchost.exe or explorer.exe. Look for the file that has the double period. Oh and by the way I am seeing if it runs under anything else, so if u cant find it then it is installed under something else.
if u need more help just ask for
Kid Genius”
As his aunt I’m torn between gratitude and horror!
Wow—the double period was quite a catch on Kid Genius’s part.
You would not “see” that, because the program names are similar to known program names.
“Kid Genius” is a screen name that is not taken yet, according to the search function.
Maybe said nephew should join FR.
If those executables came into your system under one of the Vundo Trojan variations, just deleting those two files won’t do it. The Vundo doesn’t have an automatic deletion process to date and will restore itself.