PDA

View Full Version : How can I remove this Trojan please?

carsupplier
28-01-2008, 17:45
I'm still having problems removing a Trojan, even after using SpyDoctor, AVG, Ad-Aware and Norton.
I know a lot of people advise against Norton and I am still using it.
When I do a scan it shows a Trojan is present and tells me it will be removed when I restart the computer, however on restart it is still there. When I look at the scan result it shows the following;

TROJAN HORSE DETECTED
Affected areas

3 Registry enteries
1 File
2 Services
1 Browser cache

DETAILS

HKEY_LOCAL_MACHINE\software\Microsoft\WindowsNT\Cu rrentVersion\winlogon\Notify\p3fytnob

HKEY_CLASSES_ROOT\CLSID\{1C6C524D-DE97-4422-AC82-44E9D7344C68}

HKEY_LOCAL_MACHINE\software\Microsoft\windows\Curr entVersion\Expolrer\Browser Helper Objects\{1C6C524D-DE97-4422-AC82-44E9D7344C68}

Also tried removing with AVG rootkit download with no joy.
Eddie_shef
28-01-2008, 17:47
hahaha if the subject title is anywhere near as funny as I think it is then it is very very funny!!
carsupplier
28-01-2008, 18:03
hahaha if the subject title is anywhere near as funny as I think it is then it is very very funny!!

Sorry Eddie, I'm not with you?
Ghozer
28-01-2008, 18:12
Whats the name of the trojan?
Eddie_shef
28-01-2008, 18:13
Trojan is a make of condom....
carsupplier
28-01-2008, 18:19
Whats the name of the trojan?

I am trying to open my history file to find ot but it wont let me, just doing another scan to find it.

Thanks.
carsupplier
28-01-2008, 18:20
Trojan is a make of condom....

Oh, I removed that one earlier !!:hihi:
Eddie_shef
28-01-2008, 18:21
hahaha!! good luck with the computer one then!
carsupplier
28-01-2008, 18:35
Whats the name of the trojan?

It only says Trojan when I rescan and I now can't gain access to Symantec help site for a definition.
carsupplier
28-01-2008, 19:28
Ghozer, I have used Ad-aware and it shows two items of malware, Virtumonde and win32.Trojan.KillProc
mr chris
28-01-2008, 19:29
Virus? THIS. IS. SPAR. TAAAAAAAAAAAA!!!!!

Couldn't resist. Sorry.
carsupplier
28-01-2008, 20:26
Virus? THIS. IS. SPAR. TAAAAAAAAAAAA!!!!!

Couldn't resist. Sorry.

Go on then mr_chris, I am a bit slow on the uptake this evening and don't get what you mean, I have allready fallen for the Trojan condom one from Eddie. Thanks for your PM mmitchell, can't gain access to 'filehippo' for some reason.
Ghozer
28-01-2008, 20:45
This should fix your Trojan issue..

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

and for VirtuMonde

http://www.spywareremove.com/removeVirtuMonde.html
mr chris
28-01-2008, 21:33
Go on then mr_chris, I am a bit slow on the uptake this evening and don't get what you mean, I have allready fallen for the Trojan condom one from Eddie. Thanks for your PM mmitchell, can't gain access to 'filehippo' for some reason.

Well, first of all see this

http://www.youtube.com/watch?v=eZeYVIWz99I&feature=related

and then this

http://www.youtube.com/watch?v=rZBA0SKmQy8

and you'll have some idea.

(Trojans, Spartans, Greeks....)