Downloader-AWX Trojan (HELP)

Discussion in 'Malware Help (A Specialist Will Reply)' started by elitelogi, Jun 17, 2006.

  1. elitelogi

    elitelogi Private E-2

    Can anyone assist me? My Mcafee has detected the Downloader-AWX trojan and is unable to delete or move it. Windows defender doesn't even detect it. Hijack This finds the following items, but fixing using HJT doesn't do anything. The trojan still remains.

    02 - BHO (no name) ..... C:\Windows\system32\krnmmc.dll

    O20 - Winlogon Notify: krnmmc - C:\Windows\system32\krnmmc.dll

    There was also a exe named jkklj.exe that was placed on the system32 folder at the same time as the dll, but I was able to delete it.

    Computer is WinXP, SP2
     
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi and Welcome to Majorgeeks.... do please follow the below guide as it will greatly assist in the removal process of the malware infestating your PC.

    • Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
    • Make sure you check version numbers and get all updates.
    • Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.
    • After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:
    • When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)
      • Bitdefender
      • Panda Scan
      • HijackThis
    .
     
  3. elitelogi

    elitelogi Private E-2

    Thanks for the advice. Actually, I was finally able to eliminate the Trojan thanks to the "Delete file on reboot" option that is available in HJT. That was the only way I could clean my system.

    Believe it or not, this is the first instance in all my years of computing that I've had a real problem with a virus/trojan.
     
  4. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Great stuff on removing the malware, you do sound knowledgable so I dont want this to come off patronising but I would advise a quick read of this guide of ours for some further tips on How to Protect yourself from malware! ( plus the addition link in section 12 ) as the world of malware is ever changing.

    I have a quick read of it now and again just to refresh myself.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds