HOW TO REMOVE Trojan.Thun ???

Discussion in 'Malware Help (A Specialist Will Reply)' started by Maggie_61, Feb 17, 2006.

  1. Maggie_61

    Maggie_61 Private First Class

    One day ago I found in MICROSOFT ANTISPYWARE that Trojan.Thun was in my PC.

    I found in GOOGLE how to remove it and I succeeded !

    The only problem is that all fonts are very small now !!!

    How can I correct this ?
    Because if I go to CONTROL PANEL / DISPLAY and I put larger fonts are a LOT LARGER...

    Please find here below the Trojan's analysis !


    Spyware Scan Details
    Start Date: 16/2/2006 12:00:13 ðì
    End Date: 16/2/2006 12:13:54 ðì
    Total Time: 13 mins 41 secs

    Detected Threats

    Trojan.Thun Trojan more information...
    Details: Trojan.Downloader.Thun disables the Windows Firewall and changes the computer security settings to download and allow other malicious software.
    Status: Removed
    Severe threat - Severe-risk items have an extreme potential for harm, such as a security exploit, and should be removed.

    Infected files detected
    c:\Documents and Settings\user\Local Settings\Temp\tmpD.tmp


    Detected Spyware Cookies
    No spyware cookies were found during this scan.


    Trojan.Thun

    Type: Trojan
    A Trojan that silently installs other programs without consent.

    Threat level: Severe
    Widespread or exceptionally harmful programs, similar to viruses or worms, that negatively affect your privacy and your computer's security, and that damage your computer.

    Description: Trojan.Downloader.Thun disables the Windows Firewall and changes the computer security settings to download and allow other malicious software.

    © 2005 Microsoft Corporation. All rights reserved.



    GOOGLE SEARCH TO REMOVE TROJAN.THUN http://www.pcreview.co.uk/forums/thread-1689777.php :


    12-05-2005, 03:52 PM #3

    chad

    Guest

    Posts: n/a

    RE: Possible Browser Hijack redirects Internet Explorer.

    --------------------------------------------------------------------------------

    The same thing is happening here.

    Trojan.Thun is the problem for us but the Microsoft anti-
    spyware say it removed it. It right away changes the
    registry entries back to point to all-find.com

    >-----Original Message-----
    >Please submit a suspected spyware report to MSAS (tools -
    >> suspected spyware report)
    >
    >Boot to Safe Mode.
    >
    > Empty your IE cache and your other temporary file
    >folders, eg: c:\temp, c:\windows\temp or C:\Documents and
    >Settings\<name>\Local Settings\Temp (the path to your
    temp
    >folder will change depending on your name) - sometimes
    >programmes can be hidden in there - watch out for
    >mysterious *.exe files or *.dll files in those folders.
    >
    >Have you tried scanning with Microsoft Antispyware in
    safe
    >mode?
    >Run a FULL SYSTEM SCAN, check the 3 boxes
    >
    >Assuming that the installation is on drive C:
    >1. In "My Computer", right click on the icon for drive
    C:,
    >select "Properties".
    >2. Click tab "Tools".
    >3. Click button "Check Now".
    >3. Check both "Automatically fix file system errors"
    >and "Scan for and attempt recovery of bad sectors".
    >4. Click "Start".
    >
    >Follow the instructions to allow system shut-down and
    >restart. The disk checks will run after restart and
    >before Windows loads. This scan for bad sectors might
    >take few minutes if you have a large hard disk: be
    patient.
    >
    >Assuming that the installation is on drive C:
    >1. In "My Computer", right click on the icon for drive
    C:,
    >select "Properties".
    >2. Click tab "Tools".
    >3. Click button "Defragment Now".
    >3. Click Defragment.
    >
    >Reboot.
    >
    >>-----Original Message-----
    >>Everytime I run the scan it detects this high level
    >threat.
    >>
    >>"Description: Possible Browser Hijack redirects Internet
    >>Explorer.
    >>
    >>Advice: High-risk items have a large potential for
    adverse
    >>effect, such as loss of computer control, and should be
    >>removed unless knowingly installed.
    >>
    >>About Browser Modifier: Software that changes browser
    >>settings, such as the homepage, without adequate
    consent."
    >>
    >>It is not removing the spyware. Any advice?
    >>
    >>
    >>.
    >>
    >.
    >


    :eek:
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I'm not sure you font size problem is malware related but you should follow are standard cleaning procedures below to make sure you malware problems are all fixed.

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

    Downloading, Installing, and Running HijackThis

    .
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds