A little Help please

chumba · Mar 2, 2007

Hi all
I have been having a few problems over the past few days with an anooying group of trojans...
AVG free oicked them up and allowed me to move them and heal..butin reality they didn't heal and came back again at start up ... I then ..switched off system restore ..started in safe mode ran spy bot and avg and removed trojans to vault deleted all and emptied tem internet file...then restart
switched back on system restore and the little buggers still came up ...sooo..downloaded trial version of avg full ran that picked them up ...but same scenario would allow to heal put in vault but hen looked at said healble ..NO.
o I may have made a little error here in this txt. I downloaded as suggested the svg anti spyware ...and ran than in safe mode and have attached my txt ...but ...I did this uopon a restart rather than shutting down so the trojans i had may only have been healed for this start up but not prasent in this restart txt file ?? does that make ense.
The trojans I am getting

are
Trojan Clicker.EOD on c:\bxyt.exe
Trojan Collected.Z on c:\ddkg.exe
Trojan Collected.Z on c:\dtxnxtjq.exe
Trojan Downloader.Generic3.TKJ on c:\jgckgo.exe
Trojan Proxy.KPU on c:\loataw.exe
Trojan Collected.Z on c:\sqbkdgt.exe
Trojan Generic3.FWL on c:\Windows\system32\rpcc.dll

And similar finds in C\Documents And Settings.......\LocalService\Local Settings\Temporary Internet Files\Content.IE5

My PC is flying and it's not slowing the system down but only I presume as i am removing them t start up...I can't or rather dont have the skills to go any further so all help would be greatly appreciated . I hope I have been concise enough in my what i have done >>
Thanks for any help folks ...as you all well know it's mighty annoying ...and ...another little help to me in the earning curve
cheers
avg as log txt attached

TimW · Mar 2, 2007

Welcome to Majorgeeks!

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis
Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:

CounterSpy

AVG Antispyware log - ONLY IF NEEDED you were not able to run CounterSpy

Bitdefender - from step 6

Panda Scan - from step 6

runkeys.txt - the log from GetRunKey.bat

newfiles.txt - the log from ShowNew.bat

HijackThis

NOTE: You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!

chumba · Mar 2, 2007

will follow this over the weekend and apologies for not reading the initial thread properly.
cheers

TimW · Mar 2, 2007

Not a problem ...following the steps will remove some of the malware..then we can work on what is left over.

Log in or Sign up

A little Help please

chumba Private E-2

Attached Files:

Report-Scan-20070302-165231.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

chumba Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member