Expert: Brian Benosky - 12/11/2008

Question
Hello there and thanks for taking the time to read my letter.
Ok ... Am not much into softwares but I'll try my best. I downloaded some files from internet and I belive one of them was a Torjan horse cause next day I couldn't display any wep page as if I was disconnected from the Internet, after I found out it wasn't the internet i scaned my pc with Norton Internet security which i have running all time it showed that I have a HIGH level security risk by a torjan horse which is very hard or impossible to remove, but I kept trying to apply action and remove it through Norton until it told me it's been removed and I need to restart my pc for the removal to take effect, but after i did that I had no Norton in the tool bar and I couldn't get access to it from anyware as if it doesn't exist on my pc anymore and worst I can't access the majority of the other programs and fils and which I can access I can't do anything to it, and if I try to scan any file with Norton I get a smaal window saying 'Internal error'.
I disconnected my pc from the internet and I do have lots of files in it that I can't copy or move any where because of the virus and don't want to lose it really so am wondering if there is any manual way I cango through it's steps to remove this torjan.
I am not sure if I did describe the virus really or even came near it but if there is any thing I can do to help you and myself to identify it more please tell me what to do.

Thanks again

Answer
Hi Rajeh

Start your computer in Safe Mode with Networking by continuously tapping the F8 key on boot until a menu appears.  Choose to boot into Safe Mode with Networking.  After logging on, reconnect to your network.  Open a browser and run the ESET Online Scan from here:

http://www.eset.com/onlinescan/

After the scan:
Please download HijackThis to your desktop from here:
http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
Make sure you close EVERY open window and ALL browser windows. The only thing that should be open is the HijackThis program.
Double-click on the file you just downloaded.
Click on the "Install" button.
Upon install, HijackThis should open for you.
Should it not open, go to C:\Program Files\Trend Micro\HijackThis and double click on HijackThis.exe
Choose 'Do a system scan and save a log file'.
Copy the text file which opens in Notepad and paste it in your question here.
  * Do not fix any entries in HijackThis, as they may be harmless.

Brian