How do I remove a Trojan.Peacomm if I can't get on the Internet?!?

Question

My friend asked me for help with her computer. It has a Trojan.Peacomm, all her live antivirus protection is expired, I can't get on the Internet to download anything, and I am at a loss as to how to help her - any ideas??

Answer 1

Can your friend get on the Internet? This is more important than you getting on the Internet. If she can tell her to do this:

Download and Update Ewido (now called the AVG Antispyware). Do not run:

http://www.ewido.net/en/download/

Download AdAware SE and update. Do the setup. Do not run:

http://www.filehippo.com/download_ad-aware/

AdAware SE Setup:

1. Select "use custom scanning options" then select "customize". Make sure the following options are enabled: "scan within archives," "scan active processes," "scan registry," "deep scan registry," "scan my IE favorites for banned URLs," "scan my Hosts file."

2. Select the "tweak" option. Under "scanning engine," make sure "unload recognized processes and modules during scan" is enabled. Enable "scan registry for all users instead of current users."

3. Under "cleaning engine" turn on "always try to unload modules…," "during removal unload explorer and IE if necessary," "let windows remove files in use at next restart," and "delete quarantined items after restoring."

4. Use the "select drives and folders to scan" option to ensure that your entire hard drive is scanned (if you have more than one hard drive, scan all of them (of course, do not include floppy and CD/DVD).


TEMPORARILY SHOW HIDDEN FILES AND FOLDERS.

1. Click Start, and then click Control Panel.

2. Click Appearance and Themes, and then click Folder Options.

3. On the View tab, under Hidden files and folders, click "Show hidden files and folders", and clear(uncheck) the "Hide protected operating system files" check box.

IMPORTANT: Files are hidden by Windows for a very good reason. It is not wise to experiment with these files. Unfortunately, to successfully remove modern spyware we must turn this protection off temporarily. Please turn the protection back on when you have finished cleaning your system.


EMPTY INTERNET EXPLORER BROWSER CACHE:

1. On the Internet Explorer Tools menu, click Internet Options.

2. On the General tab, in the Temporary Internet Files section, click the Delete Files button. Select the Delete all offline content check box in the confirmation dialogue box that appears, click OK. Click OK again.

RESTART IN SAFE MODE:

To do this you need to hold down or repeatedly tap the F8 key while the computer is booting (when the computer is displaying a black screen with white text). When the boot menu appears, use your keyboard arrows to select "Safe Mode."

Safe Mode can look quite ugly. The color may look bad, and all of your desktop icons will be very large. This is normal.



START THE SCAN WITH YOUR PROGRAM(S).



When the scan and removal are completed REBOOT COMPUTER. This will restart you in normal mode.

RESET HIDDEN FILES AND FOLDERS.

The RESTORE POINTS may be infected with the Malware and cannot be used. Delete the old one(s) and make a new one.

CLEAR OLD RESTORE POINT(S). HERE'S HOW:

1. Click Start, and then click Control Panel.

2. Click Performance and Maintenance, click System, and then click on the System Restore tab.

3. Select the Turn Off System Restore check box, click Apply, then restart your computer.

4. Return to the System Restore Tab and turn System Restore back on.


TO SET A NEW RESTORE POINT:

1. Click the Start button.

2. Point to Programs, then navigate to Accessories, then System Tools, then click System Restore.

3. Choose Create a restore point, and then click Next.

4. In the Restore point description box, type a name for your restore point, and then click Next.

5. Click OK.

NOTE: If you are using Windows XP Service Pack 2 (SP2) and are unable to access the Internet after removing Malware, there is a command that may fix the problem. It works by resetting the winsock catalogue. Click on Start, then Run and type CMD in the box. Click OK. Type "netsh winsock reset" (no quotes)into the DOS window that appears.

Answer 2

Does your friend's computer have Windows XP? If so, you can do a system restore to a date before she got the trojan, which is spyware, not a virus. That is what's keeping her from getting on the internet.
Click on Start, Programs, Accessories, System Tools and System Restore. It will show dates outlined in bold black lines. You can only pick a bolded date, but pick one at least a day or so before this happened. Let the system restore to that date.

Then when she can get back on the internet, for her sake AND yours (so you don't have to do this again) tell her to get antivirus, anti-spyware and anti-malware. They are all free, downloadable and should be done ASAP. SpyBot Search & Destroy and Ad-Aware are the two best antispyware tools available. AVG 7.5 and Avast are the two best free antivirus tools available. Get one or the other, install and run it to be sure.

For SpyBot and Ad-Aware: http://www.download.com/

AVG: http://free.grisoft.com/doc/avg-anti-virus-free/lng/us/tpl/v5

Avast: http://www.avast.com/eng/download-avast-home.html

Answer 3

ok..from any other computer download the antivirus and also download antyspyware , and dont forget an registry cleaner loke ccleaner ... then burn it on CD or DVD , go to ur friend and put his or her computer in safe mode go start/run type msconfig choose general then diagnostic then restart the computer then put the cd copy it on the computer and install it , then run it , dont for get after that to get it back to normal mode by choosing normal instead of diagnostic ...
**** if the CD drive does not work in safe mode , so u have no choices , copy the anty virus to the computer then put it in safe mode
www.ccleaner.com
http://avg.downloadzsoftware.com/
http://www.ewido.net/en/download/...

Answer 4

It's a nuisance, and it's happened to me a few times. The best (but not the easiest) way is to re-format the hard drive and re-install windows OS. And re-install all the applications used. Then, you'll have a clean computer. Get new virus software and also get the Adware/spyware remover software. I use StopZilla - it's top rated at ZD net computer magazine.

Answer 5

It sounds as if your computer is almost dead...

Best solution to this problem is to reinstall the OS... Tell your friend to insert the Windows XP CD into her ROM drive and perform a fresh installation of Windows XP... This will remove all viruses, and his/her computer will act like brand new again.

After that, purchase an Anti Virus protection suit for the computer, including firewall, etc.

Have a great day.

Answer 6

depends on what it is?.....I would install AVG that will get rid of most Trojans and it can have off line-updates. which you could download from there website (i assume with someone alts computer, and save them to a CD/floppy)

Answer 7

here's instructions for peacomm removal:
http://www.2-spyware.com/remove-peacomm.html

print those and follow to remove that trojan from your friends computer.