I cant remove Unclassified.Trojan.Z

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by papacitta, Apr 29, 2005.

  1. papacitta

    papacitta Private E-2

    Hello ,

    Any help is greatly appreciated, I ve tried several different spyware removal programs and virus checkers,, they all seem to detect it and delete it, but it then reappears when i run them again, Ive gone through my windows directory and removed any suspicious exe files as well as i removed some Hijackthis entries, but low and behold I cant find the SUCKA!

    please help me out,

    thanks
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
  3. papacitta

    papacitta Private E-2

    Hi...here is the Hijackthis logfile you requested...please check the attached.
    Thanks for your help!


     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please observe where you have HijackThis installed:
    C:\Documents and Settings\mcitta\Desktop\HijackThis.exe

    And then look where I ask that it not be installed:
    You must fix this before continuing.

    Also you must disable Spybot's Teatimer as it may get in the way of allowing us to fix the problems you have.

    To disable TeaTimer, run Spybot and click Mode and select Advanced Mode. Then click Tools and select Resident. Now in the right window pane, uncheck TeaTimer.
    Also while this is open, in the left column now select IE Tweaks and then in the right pane make sure all the Miscellaneous locks are unchecked.
    Now quit Spybot!


    Please run HijackThis click on the "Open the Misc Tools Section" button on the open page. Then select "Delete an NT service" on the left-hand side. A "Delete a Windows NT Service" window will pop up. Try entering the following into the box and then click OK:
    Network Security Service (NSS)
    If that does not work try entering the short name: 11Fßä#·ºÄÖ`I
    You will need to cut and paste the short name since the characters are not easily typed.

    Exit HijackThis and then restart it for the below steps.

    Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINNT\system32\mmial.dll/sp.html#28129
    O21 - SSODL: Ieboot - {D6C6A65C-000E-41CA-8D0B-04C30ED2C94D} - C:\WINNT\System32\rasbio.dll
    O23 - Service: Network Security Service (NSS) ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINNT\system32\mstd32.exe (file missing)

    After clicking Fix, exit HJT.
    Boot into safe mode and use Windows Explorer to delete:
    C:\WINNT\system32\mmial.dll
    C:\WINNT\system32\mstd32.exe

    Now run Ccleaner

    Now reboot in normal mode and post a new HJT log. And tell us how things are working.
     
    Last edited: May 2, 2005

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds