How do you get rid of trojan horse PSW Bispy B?

Answer

You need to run these 5 essential steps to remove all the spyware on your computer.

1. Run Deckard's System Scanner (DSS)

2. Run Malwarebytes Anti-Malware

3. Run the anti spyware removal programs spybot

4 Run Superantispyware

5. Run a complete scan with free curing utility Dr.Web CureIt!

Install threat fire which will enhance your antivirus protection

Answer

Go to GriSoft and download their AVG anti-virus software. Be sure to get the free version. Run the program. It will automatically isolate & remove the trojan horses PSW.Bispy.A and PSW.Bispy.B, as well as most other viruses and trojan horses.

Answer

On Win 2000:

After AVG picked up the instances of BIspy.A and .B in my users /Local Settings/Temp folder, I deleted the 6 files associated (cab, ini, exe and some others that started with BI)then went into the registry (start > Run > Regedit), searched for "BI.dll" and deleted the registry entry for the program when i found the correct string.

If you are not keen on editing the registry yourself, get hold of Spybot - Search and Destroy

After I restarted the machine, and was able to delete the /winnt/BI.dll

Answer

im running AVG too, same problem with virus vault. To get rid of it (using winXP) this is what i did.

ran command prompt.

cd 'local settings'\temp

del bi*

seemed to work for me.

Answer

I too had the virus that my avg would not remove. what I did was move the infected file to the recycle bin and then ran the avg scan again. This time it healed it and put it into the vault. ..

Answer

I too had the PSW.Bispy.A and PSW.Bispy.B viruses on my C- Drive.

AVG anti-virus software detected and removed the bi.dll file but was not able to delete the virus contained in a file in the C:\_restore\temp folder. I am running Windows ME and I think the files in the folder cannot be accessed because they are used by the RESTORE function. To get around this, I downloaded a windows bootfile from www.bootfile.com, copied the files to a floppy and then booted from the floppy. At the A> prompt, I changed the drive and directory to C:\_restore\temp. Since I booted from the floppy, I was able to delete the infected file. I then rebooted from the hard drive and ran AVG anti-virus software again. This time it found the virus in another file in the same folder. I then rebooted from the floppy, erased the infected file and rebooted from the hard drive. AVG was rerun and the virus has been removed completely. It took two iterations to remove it completely.

Two online virus programs did not detect the virus before it was removed. AVG was the only one that did.

Answer

I have XP Home Edition and ran AVG. The program detected and removed the virus just easily.

Answer

Finally after a day of trying to clean it, I turned off my system restore, then rebottted ...ran AVG. it stuck them in virus vault and I was able to delete them...have scanned 3 times now and they are all gone...

Answer

this got rid of it for me.download WINPATROL and then run it it will come up with a screen pretty much straight away click on ie helpers tab and you will now see a file bi dll.delete file,it will say that it wont delete it but it will stop it running by doing this it enables avg or your own virus software to delete it cos its not running.run your virus software and it will heal it problem solved.

Answer

For those with PSW.Bispy.B or A or C AVG now has a small executable program on their homepage to deal with these and 60 others..simply boot up in safe mode(I'm running Windows ME) click on the downloaded file,and it removes all 3 files associated with the virus..reboot normal and Voila! Worked on my version A.

Answer

If you can move them to your recycle bin then delete them and your problem is solved.

Answer

All Trojan horses are hidden files so you would need to go to the Files Option (click the View tab)at Control Panel and uncheck both the *Hide file extension for known file types & *Hide protected operating system files (Recommended)-boxes, then OK yourself out. You will then need to restart your computer and go into SafeMode by HOLDING the F8 key DOWN -(at bootup - after the first screen info - be quick!). [You have to use your keyboard when you're in SafeMode - the keys to use are Ctrl/Alt/Delete (to exit the Help and Support screen) - Tab/Arrow keys/ Pageup/Pagedown/ the Window key(between Ctrl & Alt) & Enter] So, from the DeskTop screen press the Window key to get Start/ arrow up to Search/ arrow right to For Files or Folders and type up the NAME OF THE FILE & EXT (not Horse PSW.Bispy.B) but the actual name of the file, which would have shown up on your anti-virus software. To delete this file from here just press Page Up to highlight the file and then delete. To get out of Search -Alt F/ arrow down to Close and press Enter.

It will be safe to empty your Recycle Bin in the Normal mode where you can use your mouse.

I have had 4 trojan horses on my C drive and kinda figured out the above method a week ago. I deleted the Temp file (as these keep putting the same files back into your system) from the _Restore folder after unchecking the hidden files boxes, then went to SafeMode to delete what virus files that were still there. My computer is now absolutely FREE of these pests!

ps. I also have AVG 6.0 (the free one) & also the Ad-aware 6 and I use them every day as my kids love to play games from the Internet.

Answer

The AVG cannot get rid of it because it is locked into your system as a hidden file. The way to get at it is to unlock the file by going to Start/Settings/Control Panel/Folder Options/View tab and uncheck the Hide file types...etc. as I mentioned above. Then all you would need to do is to go to Search and delete it. If not in the Normal mode, then Search and delete it in SafeMode.

Answer

the problem with the virus in the restore folder is that AVG cant delete/modify files in there. you need to disable system restore. I also had this virus in a backup of my accounts. I tried running the removal tool from Grisoft but it didnt work. I disabled system restore, deleted the files associated with the virus then rebooted. I also searched the registry for any "bi" or"bispy" entries. there were none, so i guess im all good now. what ever you do just remember to disable system restore. if you dont you will continue to get the AVG extension message and if you ever need to restore to an earlier date you will reinfect your puter.

Answer

I have AVG and it could not take it off even though it was updated. I, however, did find an alternative given by grisoft/AVG at the following URL: grisoft.com

I would suggest following its instructions to the letter. If you do, you can then run AVG again and the Virus will have disappeared.

First answer by Robert. Last edit by Delltechie. Contributor trust: 1641 [recommend contributor]. Question popularity: 275 [recommend question]