trojan horse worries

Discussion in 'Malware Help (A Specialist Will Reply)' started by adjohnson1971, May 25, 2006.

  1. adjohnson1971

    adjohnson1971 Private E-2

    Hi. A trojan horse called downloader zlob adf was stopped on my computer by AVG yesterday, but since then I've had a few problems. I can't run microsoft anti spyware and instead an installer window pops up. I've read and run the read me first thread and again couldn't start microsoft anti spyware in safe mode. Bitdefender found nothing but panda active scan found something. A panda scan and hjt logs are attached. Please help and tell me what to do next. Many thanks
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Copy the bold text below to notepad. Save it as fixme.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Now run the below procedure and attach the smitfiles.txt log that is requested:

    SpywareQuake & SpyFalcon Removal Procedure


    Any change in your problems?
     
  3. adjohnson1971

    adjohnson1971 Private E-2

    Hi. I've followed the instructions, but when I follow the procedure to remove spyware quake and spy falcon, when I'm looking for the files in the system32 folder, none of the listed ones are present, and I have allowed viewing of hidden folders, so obviously I stopped at that point.
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I quote from the very begining of the procedure:
     
  5. adjohnson1971

    adjohnson1971 Private E-2

    Sorry! I've followed the procedure correctly this time. I've attached the smitfiles.txt as requested. After unning al of the above I tried to use microsoft antispyware and it still will not run. Still keep on getting an installer window appearing. This is the only signs that I've noticed.
     
  6. adjohnson1971

    adjohnson1971 Private E-2

    Sorry forgot to upload the smitfiles.txt
     

    Attached Files:

  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You do not really have any signs of other malware. You can have HijackThis fix the below left over from uninstalling Spy Sweeper:

    O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)

    As far as MS Antispyware not running, you really need to update to Windows Defender anyway. MS Antispyware has been discontinued by Microsoft. It sounds like some how the install for MS Antispyware is broken, but this is not malware. You could try running the below to see if you can fix it.

    Windows Installer CleanUp Utility

    If not, your could try uninstalling (may not work) and then reboot and reinstall (if you still have the original program). But again, Windows Defender is the current program that Microsoft has replace MS Antispyware with.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds