trojan.linkoptimizer - removal?

[Guest]

Guys,



My workstation at work is infected with the Trojan.Linkoptmizer. I have
tried almost all the ways to remove this but to no success.



the stealth setting on this makes it difficult for the antivirus software &
other spy removal tools to detect it.



the file name is lpt2.peh, again the stealth settings makes it impossible to
find this file.



please help me with a removal solution.



cheers

 

[Malke]

Guys,



My workstation at work is infected with the Trojan.Linkoptmizer. I
have tried almost all the ways to remove this but to no success.

the stealth setting on this makes it difficult for the antivirus
software & other spy removal tools to detect it.

the file name is lpt2.peh, again the stealth settings makes it
impossible to find this file.

This malware is extremely difficult to remove. It has cleverly named
itself with a protected file name. Run HijackThis and post your log at
one of these specialty forums (not here, please):

http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Merijn
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42 -
another tutorial

http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forums.subratam.org/index.php?showforum=7
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/

Malke

 

[David H. Lipman]

From: "sphilip" <[email protected]>

| Guys,
|
| My workstation at work is infected with the Trojan.Linkoptmizer. I have
| tried almost all the ways to remove this but to no success.
|
| the stealth setting on this makes it difficult for the antivirus software &
| other spy removal tools to detect it.
|
| the file name is lpt2.peh, again the stealth settings makes it impossible to
| find this file.
|
| please help me with a removal solution.
|
| cheers

As Malke indicated this is a bad Trojan infection tied with a RootKit known as the Gromozon
malware !

Please use the following utility.
http://www.prevx.com/gromozon.asp

If this utility does NOT work, please follow Malke's directions to post a HiJack This log in
one of the listed forums and mention "Gromozon malware".

 

[Bob I]

http://www.symantec.com/security_response/writeup.jsp?docid=2006-082416-2803-99&tabid=2