Second-Thought Adware Trojan.

[Guest]

I scanned my computer using Spy Sweeper, i found a trojan adware called
Second-Thought, Spy Sweeper said it deleted it, but i did another search and
it was still there. I tried the manual way to take it off, but i couldnt find
any of the files. I also scanned my computer with spy-bot but it didnt find
anything, so did my anti-virus software.

Thanks in advance.

 

[Kent W. England [MVP]]

I scanned my computer using Spy Sweeper, i found a trojan adware called
Second-Thought, Spy Sweeper said it deleted it, but i did another search and
it was still there. I tried the manual way to take it off, but i couldnt find
any of the files. I also scanned my computer with spy-bot but it didnt find
anything, so did my anti-virus software.

This one is fairly simple to remove. Download to its own folder,
HiJackThis.exe from http://www.downloads.subratam.org/hijackthis.zip.
Then run HiJackThis and look for stcloader.exe in running processes, in
an O4 startup entry, and look for the file on the hard drive, likely in
%windir%\system32 or wherever the HJT entry indicates it is located.

Kill the running process using the Task Manager (Ctl-Alt-Del), then
delete the O4 entry from HiJackThis, and finally delete the
stcloader.exe file. Reboot and run HJT again to make sure it is gone.

 

[katchoo]

Same thing...that trojan keeps coming back on me too. Now
my SpySweeper did say that it could not delete a certain
file and that I had to do it manually. But guess what?
Right...the machine said I couldn't delete the folder or
even open it up to see what was in it. I am guessing that
the folder holds the .exe and it reinstalls itself
continuously. The folder is the temp folder at:
programs/toolbars/temp. Now, here is the odd thing, I
asked a pal who has XP also to take a look and he does not
even have the 'toolbars' folder on his machine. I am
wondering if that parent folder is bogus - put there by
the trojan. This whole situation errupted in my comp about
a week ago and now everytime I run the sweep I get 9 or so
spy ware hits and about 150 traces. Amazing.

 

[katchoo]

I also see the browser hijacker 'seekseek' appear when
ever I do a sweep. They seem to go hand-in-hand.

 

[dm]

Try using Adaware and Spybot Search and Destroy in conjunction with your
current scanner. What one will not kill the other will.