Need help with virus removal?

Question

virus backdoor.hupigon.awl

Tried various anti-virus programs, like TrendMicro, NOD32, AVG, but they cannot delete them permanently, keeps on reappearing.

Also tried running the program in safe mode and still no good.

TIA.

Answer 1

They keep reappearing because you are trying to remove them while still connected to the Internet and you are not exposing hidden areas of your computer. This procedure will do that and properly remove this Trojan. Use the AVG Antispyware (old Ewido).

Virus and Spyware (Malware) Removal Procedure for Windows XP.

1. Removing infections from your computer is never as easy as aquiring them. Malware infections are not meant to be removed, so, it takes TIME and PATIENCE to get rid of them.

2. Here are some free programs you can use (or programs of your choice) to scan and remove the infection. Download and update (do not scan) from this site: http://www.filehippo.com/

Virus: Use the program you have on your computer or use AVG or AVAST.
Trojans: AVG Antispyware (old ewido) is the best general Trojan remover.
Adware: AdAware SE is the best.
Spyware: Spybot Search and Destroy and/or CW Shredder for CoolWebSearch
(Browser Hijacker) infections.

3. You might be unable to access the Internet after removing the Malware so you will need to run LSPfix or Winsockxpfix (as appropriate). Download one and save to desktop, run it when called for.

a. LSPfix: all Windows OS except 95.

http://www.cexx.org/lspfix.htm

b. Winsock XP Fix: Windows XP only.

http://www.spychecker.com/program/winsockxpfix.html

4. Temporarily show hidden files.

a. Click Start, and then click Control Panel.

b. Click Appearance and Themes, and then click Folder Options.

c. On the View tab, under Hidden files and folders, click "Show hidden files and folders", and clear(uncheck) the "Hide protected operating system files" check box.

IMPORTANT: Files are hidden by Windows for a very good reason. It is not wise to experiment with these files. Unfortunately, to successfully remove modern spyware we must turn this protection off temporarily. Please turn the protection back on when you have finished cleaning your system.


5.. Empty your Internet Explorer cache and your other temporary file folders:

a. On the Internet Explorer Tools menu, click Internet Options.

b. On the General tab, in the Temporary Internet Files section, click the Delete Files button. This will delete all the files that are currently stored in your cache.

c. Select the Delete all offline content check box in the confirmation dialogue box that appears, click OK.

d. Click OK again.

6. Restart in Safe Mode:

a. To do this you need to hold down or repeatedly tap the F8 key while the computer is booting (when the computer is displaying a black screen with white text). When the boot menu appears, use your keyboard arrows to select "Safe Mode."

b. Safe Mode can look quite ugly. The color may look bad, and all of your desktop icons will be very large. This is normal.

7. START SCAN.

8. When the scan and removal are completed REBOOT COMPUTER. This will restart you in normal mode.

9. If you are unable to access the Internet after removing Malware you will need to run LSPfix or Winsockxpfix (as appropriate).

NOTE: If you are using Windows XP Service Pack 2 (SP2) and are unable to access the Internet after removing Malware, there is a command that may fix the problem, removing the need to run Winsockxpfix. It works by resetting the winsock catalogue. Click on Start, then Run and type CMD in the dialogue box that appears. Click OK. Type "netsh winsock reset" (no quotes) into the DOS window that appears.

10. If your computer has been successfully cleaned of Malware, you need to delete any old restore points and then create a new one. The old ones may, of course, be infected with the Malware and cannot be used.

a. First, start and then stop the Restore Service.

1. Click Start, and then click Control Panel.

2. Click Performance and Maintenance, click System, and then click on the System Restore tab.

3. Select the Turn Off System Restore check box, click Apply, then restart your computer.

4. Return to the System Restore Tab and turn System Restore back on.

b. To set a manual restore point complete the following steps:

1. Click the Start button.

2. Point to Programs, then navigate to Accessories, then System Tools, then click System Restore.

3. Choose Create a restore point, and then click Next.

4. In the Restore point description box, type a name for your restore point, and then click Next.

5. Click OK.

There are Trojans that fall into the Smitfraud family. These require the use of a specialized program for removal. Here are two sites that specialize in removing these:

http://www.internetinspiration.co.uk/roguefix.htm

http://siri.urz.free.fr/Fix/SmitfraudFix_En.php

Answer 2

2

Answer 3

Did you know you can get this thing called a FIREWALL and this other thing called a VIRUS SCAN and this other thing called ANTISPYWARE? And did you know that if you had these things and kept them updated and LEARNED the correct ways to use them that you would never have a problem like this? Did you know it is not just recommended but a MUST? Did you know if you go online unprotected, you're gonna get pregnant!?!?!? good luck to ya and your wallet! :-) 40 bucks then would've saved you HOW MUCH now?
Anytime you download a file, it's up to YOU to SCAN IT BEFORE YOU OPEN/PLAY it!!!!! You MUST scan every file you download FIRST, BEFORE you click on it and open it up. Learn to do this everytime and you will never ever get infected! You can download a file from Limewire or your Grandma, but SCAN it first... You can't get infected unless you invite it in! If you open a file without scanning it then you're giving it permission to release whatever it wants to on your computer. Why would you do this when you can just simply scan it first and make sure it's okay. Boggles my mind. good luck :-)

Answer 4

Best way I have found is to pick one antivirus program and pay for it. Run scans at others when you think you might have a problem.

Have you tried system restore?

Answer 5

Most of them are junk and may also have spyware attached. Look at the ads in the paper. Norton and McAffee are always having sales with 100% rebate at the big electronics stores. Go with a big name and avoid grief.

Answer 6

perhaps you can get a internet security software to scan for virus, adware and spyware .

i recommand you to try CA Internet Security Suite. It provides comprehensive protection against viruses, hackers, identity thieves, spyware, spam and other online threats that can jeopardize your privacy, your data, and your PC's performance.

you can get a more detailed introduction about CA Internet Security software.

http://network.sitesled.com/ca-internet-security-suite.html

Good Luck && Best Wishes!

Answer 7

XoftSpy claim they can remove it.

Remove Backdoor.Hupigon for good
Free Backdoor.Hupigon scan & Fix!

http://paretologic.com/xoftspy/lp/17/

Answer 8

if it keeps on reappearing you have a worm which is a file that keeps replicating itself to other folders. if you know what ur doing you can try to find it in the registry and delete it. use regedit

Answer 9

turn off system restore, then run programs, if you dont system restore will keep booting them up.

Answer 10

well considering you have all your stuff backed up of course you just reinstall

good luck :)