Can't get rid of Trojan Horse

A

ajlucco

Using XP. My computer was not running right and my anti-virus program said
there were no viruses. I deleted my old anti-virus and downloaded the trial
version of AVG and ran it. It identified 13 viruses and put them in the
virus vault. One was Trojan Horse BHO.FZC in file
C:\WINDOWS\system32\d2dxofq.dll.

After that first scan, I got AVG alerts about this same virus (everytime I
did anything; i.e., open a program, go to the internet, open email).

Everytime I run the AVG scan, it identifies this same virus and supposedly
isolates it to the virus vault.

One AVG option is to remove all unhealed viruses.

If I do this, will it delete the file. Do I need this file?

I continue to get frequent alerts about this virus (about a hundred times a
day).
 
T

Thee Chicago Wolf

Using XP. My computer was not running right and my anti-virus program said
there were no viruses. I deleted my old anti-virus and downloaded the trial
version of AVG and ran it. It identified 13 viruses and put them in the
virus vault. One was Trojan Horse BHO.FZC in file
C:\WINDOWS\system32\d2dxofq.dll.

After that first scan, I got AVG alerts about this same virus (everytime I
did anything; i.e., open a program, go to the internet, open email).

Everytime I run the AVG scan, it identifies this same virus and supposedly
isolates it to the virus vault.

One AVG option is to remove all unhealed viruses.

If I do this, will it delete the file. Do I need this file?

I continue to get frequent alerts about this virus (about a hundred times a
day).

Dump AVG. I have had nothing but stellar protection from the free AV
called AntiVIR. You can also run it in Safemode which can usually get
rid of most of what ails you. Let me know how it goes.

- Thee Chicago Wolf
 
M

Mick Murphy

Install Programs below, and then scan in safe mode with them, and AVG.
In SM with AVG, it comes up with different window to normal.
Agree with the default search options, heuristics, etc, and let it go.

http://www.spybot.info/en/index.html

Spybot Search & Destroy 1.6 is a very good, FREE Anti-Spyware Program.
Download, install, update, and immunize your System with it.
Then SCAN with it.
Update it, and scan your System once a fortnight.



http://www.malwarebytes.org/mbam.php

Malwarebytes is as the name says, a Malware Remover!
For the Free version scroll down their page to either download from
Download.com, or Major Geeks.com

Download, install, and update.

Important re: Safe Mode
If you happen to find a problem that you can’t uninstall / delete, reboot
the computer, and go into Safe Mode.
To get into Safe mode, tap F8 right at Power On / Startup, and use UP arrow
key to get to Safe Mode from list of options, then hit ENTER.
RESCAN your computer with your Anti-Virus, Malwarebytes and Spybot S & D
while in Safe Mode.

If unable to install above Programs in Normal Mode:
Sometimes Trojans, Viruses, Malware, etc stop you installing and/or updating
Programs to remove them.
If that happens, reboot into Safe Mode with Networking, and install, update
and scan from there.
 
P

PA Bear [MS MVP]

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjunction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top