Persistent Multiple Trojans

Discussion in 'Malware Help (A Specialist Will Reply)' started by heinrich, Aug 24, 2005.

  1. heinrich

    heinrich Private E-2

    I've been scanning and removing in different forms for two days now; I've run through the normal virus removal steps described in your tutorial at least twice and looked up all the HijackThis entries in Sysinfo.org, as suggested. I certainly found a few bad files, including, smss.exe, alg.exe, csrss.exe, lsass.exe, etc. etc. The first time I found these, I was able to terminate the processes and "fix" them entries with HijackThis. However, they showed up again with a couple of new friends under the SYSTEM user, and if I try to terminate them now access is denied.

    Symptoms, BTW, are your usual pop-ups, with the bonus that IE crashes everytime it is opened by the malware (or whatever this is).

    The latest HT log is attached.

    Thanks for any help.

    --Aaron
     

    Attached Files:


MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds