Trojan/Hijacker

[Guest]

I'v got a nasty little Trojan/Hijacker. Trojan Remover can't find it and Ad-Aware doesn't kill it. I've disabled System Restore and deleated all files Symantec detected as infected in their online virus check as well as several other very suspect files. Upon reboot, the blasted thing is back. Any suggestions?

 

[roger]

Hi katspau,

I'v got a nasty little Trojan/Hijacker. Trojan Remover can't find it and Ad-Aware doesn't kill it. I've disabled System Restore and deleated all files Symantec detected as infected in their online virus check as well as several other very suspect files. Upon reboot, the blasted thing is back. Any suggestions?

More info about parasites:
http://www.aumha.org/a/parasite.htm

Download the utility CWshredder:
http://www.spywareinfo.com/~merijn/files/cwshredder.zip

Unzip - close *all* instances of IE & OE, hit the executable and
follow
the prompts.

You can also download Hijack This from here:

http://www.mjc1.com/files/merijn/hijackthis.exe

Go here:
http://mjc1.com/mirror/hjt/

For instructions on how to use it; you have to post the log it
produces so experts tell you what is good and what is malware


Try downloading, installing and updating the
spyware removers from the links below. Run both of them.

Ad-aware
http://www.lavasoftusa.com/support/download/

Spybot S&D
http://www.safer-networking.org/index.php?lang=en&page=download


If these don't correct the problem, then get yourself a copy of
BHODemon, available at
http://www.definitivesolutions.com/bhodemon.htm .

It does not need installing - simply unzip and run the EXE program. It
is easy to use. It will find the hijackware DLL files, and give you
the ability to disable them.

Hope this helps.

 

[Guest]

Thanks, Roger
I forgot to mention in my first post that I have Hijack This and it did not help in locating the root of the problem (it did a good job of identifying the undewsireable registry entries however)
Your suggestion for CWShredder seems to have done the trick.
Thanks for the help

 

[roger]

You're welcome, katspau
Glad to help.