Any idea how to get the memory scanned to get rid of this thing?
Moved this to the correct area. It's a bit difficult to know what to suggest without any details such as a name for the trojan, your operating system and service pack plus what versions of McAfee you have installed, but.....
Try downloading, updating and running the free version of these two tools:
Let them remove everything they find and reboot immediately when asked to.
No sir, that didn't work. It is still doing it. I think it is trying to go out via the IMs. I have Vista SP2 installed, and the McAfee is the McAfee Internet Security via Toshiba. Not certain how to find the Trojan Horse/Worm. Content.IE5\VBP3BDLT\2Tq.zip was blocked once. Not certain what is getting through the IM program.
Download Hijackthis and post its log along with the symptoms you are seeing on one of the following forums for expert advice:
Do not post the log here, we can't help!
Post the logs at a specialist Forum:
Be sure to read all the sticky announcements/instructions at the top of each malware forum!
The program, 2tq.ZIP IS running thru YAHOO IM.
An IM from a friend (infected) popped up and asked how I liked the new glasses she picked out (and YES, she wears glasses)
I have two separate computers running McAffee and another running NAV. Both identified, reported 2TQ.zip and repaired same yet YIM continues to send IM's to each individual in the address book. Apparently the ZIP file is SFX and the trojan file names have been changed since 2004. tHE TROJAN IS STILL RUNNING ABOUT EVERY 30 MIN.
Did you post a Hijackthis log as I suggested?
Yes, I did. I am awaiting an analysis report. We shall see. I'll post back here too if/when I get a fix.
You are sure that this isn't some kind of advertising from Yahoo? I seem to remember something similar happening before I ditched it altogether.