My professor has a virus on his computer.

[Wei Wu Wei]

I've been helping my Religion and Literature professor with his computer these past few weeks because it seems he has a virus. I showed him Mozilla, and ZoneAlarm. He figured out what the virus was.


Originally from Wei Wu Wei's English professor
the wowex32/Peper Trojan virus, which is apparently a particularly nasty little guy. I've searched the web and there are numerous cures--too numerous, in fact

I told him I got the firewall and the web browser from the computer-savvy here, and he was impressed. So, he asked me to get in touch with you guys about what to do. Any ideas?

Thanks in advance.

[Shawn]

AVG (http://free.grisoft.com/freeweb.php/doc/2/) with the latest updates should take care of this. Then set him up with AdAware and Spybot S&D.

[Wei Wu Wei]

I'll be giving him the Spybot program next time I see him. Thanks, Shawn. I'll make sure to get him the AVG.

[Morgan Evanar]

AVG is amazingly good.

[Dasquian Belargic]

:grumble

http://www.sw-fans.net/forum/attachment.php?s=&postid=697128

[Morgan Evanar]

Why is that on your computer?

[Dasquian Belargic]

It wouldn't go away. Turns out it was hiding in the System Restore thing.

[Shawn]

I've never once had System Restore do what it's supposed to, so I just turn it off to conserve space.

[Figrin D'an]

Originally posted by Shawn
I've never once had System Restore do what it's supposed to, so I just turn it off to conserve space.

Aye. It's a waste of resources, IMO. Turn of that and the indexing service, and one will get a nice performance boost.

[Wei Wu Wei]

I will do it. And I'll make sure to tell my professor to do that too.

[Syren Wyssholt]

Originally posted by Figrin D'an
Aye. It's a waste of resources, IMO. Turn of that and the indexing service, and one will get a nice performance boost.

How do you turn these things off?

[Figrin D'an]

Originally posted by Syren Wyssholt
How do you turn these things off?


For System Restore:

Right-click on My Computer, select System Restore tab, and either check the box that says "Turn off System Restore on all drives", or select the one you want, click the settings button and turn it off for specific drives.


For Indexing Service:

Start -> Run
Type "services.msc" without quotes, hit enter
Scroll through list until you find Indexing Service
Right click on it, select Properties
Under Service Status, click on Stop
Under Startup Type, select Disabled.
Click Apply, Okay


And you will likely have to reboot for the changes to take effect.

[Syren Wyssholt]

Ah, great. Thank you, Figrin. I also downloaded that AVG and started running it. It found a virus right away. I'm not surprised as the comp has been acting oddly quirky recently. Thanks for the help and the link.

[Senator Thareena]

my AVG has yet to find a virus, and for that I am grateful. ^_^;

[Syren Wyssholt]

So I've run the AVG and it came up with this:

A0023948.exe Virus Identified PSW.Bispy C:\System Volume Information\_restore{21D7D692-4662-421F-93B0-877BC3820711}\...

bi.dll Trojan Horse PSW.Bispy.A C:\System Volume Information\_restore{21D7D692-4662-421F-93B0-877BC3820711}\...

biprep.exe Trojan Horse PSW.Bispy.B C:\System Volume Information\_restore{21D7D692-4662-421F-93B0-877BC3820711}\...

It hasn't been able to remove these and I have no idea where to find them in the comp to remove them manually.

Possible someone can help?

Not sure if it matters, but we're using XP.