Trojan.Win32.Qhost.df

[Guest]

I have been trying very hard to get rid of the Trojan, Trojan.Win32.Qhost.df.
Even though the Yahoo! Toolbar Anti-Spy program detects the Trojan and I use
the program to remove it from my system, it returns after I restart my
computer. I just can't completely remove it from my system. I used Spybot S&D
after the Yahoo! Toolbar Anti-Spy program, and the scan took
significantlylonger than usual. The Spybot scan used to take only a few
minutes, but this time, the scan lasted for hours and did not detect any
components of the Trojan or the Trojan itself. I have tried Ad-Aware, but the
program freezes after about 15-20 seconds into the scan. I have HijackThis
but I don't know how to use it. Could someone please help me?

 

[Randy Knobloch]

FAQ for HijackThis;
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42
Download: http://aumha.org/downloads/hijackthis.zip

Once done > run HijackThis > save a scan log and post it to /any/ of the
following (expert) forums for analysis.
*Note, _registration_ is required prior to posting a log.
- Not listed in any particular order -
(http://aumha.net/viewforum.php?f=30)
(http://www.bleepingcomputer.com/forums/forum22.html)
(http://www.dslreports.com/forum/security)
(http://castlecops.com/forum67.html)
(http://www.cybertechhelp.com/forums/forumdisplay.php?f=25)
(http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html)
(http://gladiator-antivirus.com/forum/index.php?showforum=170)
(http://forum.iamnotageek.com/f-130.html)
(http://forums.maddoktor2.com/index.php?showforum=17)
(http://www.spywarewarrior.com/viewforum.php?f=5)
(http://forums.spywareinfo.com/index.php?showforum=18)
(http://forums.techguy.org/f54-s.html)
(http://forums.tomcoyote.org/index.php?showforum=27)
(http://forums.subratam.org/index.php?showforum=7)
(http://www.5starsupport.com/ipboard/index.php?showforum=18)

Post back the URL where you posted you log file, not the entire
log - for follow-up.

Randy

--
siljaline

MS - MVP Windows (IE/OE) & Security, AH-VSOP
_________________________________________
Security Tools Updates
http://aumha.net/viewforum.php?f=31

Reply to group, as return address
is invalid that we may all benefit.

 

[Guest]

Hi Randy,

Sorry it took so long for me to respond. Here is my URL for where I posted
my HijackThis log:

http://aumha.net/index.php

It is under the "HijackThis" forum. Thank you for your help.

 

[Guest]

Hi again,

I forgot to tell you that my username for www.aumha.net is "chaparral."
Sorry about that.

-Chaparral

 

[Randy Knobloch]

The URL for your log is here;
http://aumha.net/viewtopic.php?t=17449

It being New Year's and all, it might not get tended to for a bit.

Happy New Year!

Randy


--
siljaline

MS - MVP Windows (IE/OE) & Security, AH-VSOP
_________________________________________
Security Tools Updates
http://aumha.net/viewforum.php?f=31

Reply to group, as return address
is invalid that we may all benefit.

 

[Guest]

Happy New Year!