I have the virus 'Troj/Tofger-I' on my computer but it's located in the file 'doru32.dll' which is in use by the computer so my anti-virus (sophos) cant delete it.
Sophos says I need the CD to get rid of it but I'd rather not have to go ask my boss for it as he'll know I've been surfing the net rather than working.
Anyone know how I can get rid of the little bugger?
Thanx in advance
thebarman
Full Version: How do I get rid of this trojan?
Try restarting the computer in safe mode.
Windows NT/2000/XP/2003
In Windows NT/2000/XP/2003 you will also need to edit the following registry entry. The removal of this entry is optional in Windows 95/98/Me. Please read the warning about editing the registry.
At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.
Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.
Locate the HKEY_LOCAL_MACHINE entry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Upgrade Service= <Windows folder>\sxchost.exe
and delete it if it exists.
Close the registry editor.
Restart
In Windows NT/2000/XP/2003 you will also need to edit the following registry entry. The removal of this entry is optional in Windows 95/98/Me. Please read the warning about editing the registry.
At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.
Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.
Locate the HKEY_LOCAL_MACHINE entry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
Upgrade Service= <Windows folder>\sxchost.exe
and delete it if it exists.
Close the registry editor.
Restart
Thanks BH top notch, it worked 
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.