Unable to remove (TROJ QOOLOGIC.AQ)

mjohns62 · Apr 5, 2006

I am running Windows XP Pro. Trend PC Cillin found a few viruses but cant remove them. I was able to remove them manually except for one. The file is called XCGRG.EXE and Trend lists it as (TROJ QOOLOGIC). Tried removing it from C:\WINDOWS\SYSTEM32\ but it is not listed there. Cant delete from registry either. It simply recreates itself.

I ran the "FindQool" tool and "rffiles" tool. Listed below are the results.

Edit by chaslang: Inline FindQool & RKfiles logs attached

Not sure what else I can do? Please help.

Sincerely.
Matt

chaslang · Apr 5, 2006

Please do not post any logs inline. It looks like you may have more than just Qoologic. Please run the below procedures.

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)

Bitdefender

Panda Scan

HijackThis

.

Log in or Sign up

Unable to remove (TROJ QOOLOGIC.AQ)

mjohns62 Private E-2

Attached Files:

findqool&rkfile.txt

chaslang MajorGeeks Admin - Master Malware Expert Staff Member