Trojan removal

Discussion in 'Malware Help (A Specialist Will Reply)' started by Lev, Mar 20, 2007.

  1. Lev

    Lev MajorGeek

    I've found the NMC.QLOW.F trojan on my laptop, and located the file regtlib.exe in the system32/URTTemp folder, which I understand is how it comes in. Finding it very hard to find removal information, except in French! EMCO detects and quarantines NMC.QLOW.F but it just keeps coming back.

    Is there a specific removal tool or procedure for this?
     
    Lev, Mar 20, 2007
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Hey Lev....you know the drill ....and the removal may involve registry keys and other files ..do the read and run and post the logs ...:)
     
    TimW, Mar 20, 2007
    #2
  3. Lev

    Lev MajorGeek

    Already on it..more l8r...tnx Tim. Was just curious if there was a specific fix for this one.
     
    Lev, Mar 20, 2007
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    chaslang, Mar 20, 2007
    #4
  5. Lev

    Lev MajorGeek

    Just like to update this for others who may have similar issues. This appears to be a false positive from EMCO borne out of having the trial version of CounterSpy. I've uninstalled CS and no longer have this appearing in an EMCO scan
     
    Lev, Mar 22, 2007
    #5
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Good to know Lev....thanks for the update.:)
     
    TimW, Mar 22, 2007
    #6

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds