Trojan 11.Q..... cant remove???

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by frans_w4, May 19, 2005.

  1. frans_w4

    frans_w4 Private E-2

    my AVG free edition notice that there is a trojan on my computer. but when I deleted them and i start Internet explorer again it comes again. The trojan is called 11.Q. I've got AVG free edition, ad-aware and Hijack this.
    can somebody please help me to destroy this troyan??
    Frans
     
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    First, please follow ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    After doing ALL of the above if you still have a problem:


    [​IMG] Download HijackThis 1.99.1

    [​IMG] Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    [​IMG] Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

    [​IMG]Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    [​IMG]Run HijackThis and save your log file.

    [​IMG] Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

    [​IMG]Need help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting
     
  3. frans_w4

    frans_w4 Private E-2

    ok
    I have done it, here are the results
     

    Attached Files:

  4. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Download LSP-Fix

    After download is complete, Run LSP-Fix

    Check the Box labeled "I know what I'm doing" and then click on the 'xfire_lsp_10650.dll file (in the “Keep” section) to select it.

    Then, Select the >> button to move 'xfire_lsp_10650.dll into the Remove section.

    Now, click the Finish Button. When the Repair Summary box appears, click OK.

    (Note: If the file 'xfire_lsp_10650.dll is already in the remove section, then just click FINISH.)


    Now, for the below entry you will need to run Spybot S&D. But before you do the scan you will need to go in Advanced Mode and uncheck ALL ignored items. After you have done this run a full scan and remove all found infections. Be sure you get ALL updates before scanning.

    O10 - Hijacked Internet access by New.Net


    After you have completed ALL of the above, please run the below online scans:


    TrendMicro Online Scan
    Bitdefender online scan
    RavAntivirus online scan <-- select Auto Clean then click Scan My PC
    TrojanScan online scan


    After you have ran the above scans, reboot and post a fresh HJT log.
     
  5. frans_w4

    frans_w4 Private E-2

    which items do I have to uncheck??
     
  6. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Which part are you doing?
     
  7. frans_w4

    frans_w4 Private E-2

    Now, for the below entry you will need to run Spybot S&D. But before you do the scan you will need to go in Advanced Mode and uncheck ALL ignored items. After you have done this run a full scan and remove all found infections. Be sure you get ALL updates before scanning.

    That part
     
  8. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Once you are in Advanced Mode, click on Settings and then Ignore Products. Make sure you are on the ALL PRODUCTS TAB.

    Now, anywhere in the white right click and select "deselect all".

    Now go back into "Default Mode" and run another scan.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds