Trojans...........help!!!!!!!!!!!!!!!!!

juman47kl on 26/5/2008 at 20:09

Now things are getting real nasty. :ebil:

1. at startup my computer experiences a sharing violation message for some file in syswin folder which exactly isn't there. after i check the message the CPU comes under full load for some time. say a 2-3 minutes. the problem is same wether or not my coputer is part of a domain.:eek:

2. i noticed a dxdlg.exe file in task manager and googled about it . they say it's a trojan so i quit it. but i don't think that it has taken care of that, the trojan might still be there.:confused:

AND I dont know how to upload my taskmanager image in post. the insert image option ask for some http:// link only.:nono:

Inline Image:

C:\Documents and Settings\Junaid\My Documents\taskmanager.bmp:p

I have NOD32 2.7 and it doesn't do anything about the above mentioned problems.:mad:

PEEWWWWWWWWWWWWWWWWWWWWW

EDIT: tell me any free program if u know to take care of those REG messers.

Matthew on 27/5/2008 at 11:04

Quote Posted by juman47kl

AND I dont know how to upload my taskmanager image in post. the insert image option ask for some http:// link only.:nono:

Inline Image:

C:\Documents and Settings\Junaid\My Documents\taskmanager.bmp:p

(www.photobucket.com)
(www.flickr.com)

juman47kl on 27/5/2008 at 19:16

well I ran indepth scan of NOD32 and now everything is ok.

Omega on 30/5/2008 at 20:36

Please download and run these two tools. They should clean out most of the stuff not found by NOD32.

(http://www.bleepingcomputer.com/combofix/how-to-use-combofix) Combofix
(http://www.freedrweb.com/cureit/) Cureit

Feel free to link to any log files you've pasted to (http://pastebin.com/) pastebin.

Good luck. :)

nickie on 30/5/2008 at 20:46

Well I can confirm sUBs' tool Combofix is excellent but I don't know Cureit and the link is broken.

pavlovscat on 1/6/2008 at 20:10

Yes, ComboFix is great. (http://www.emsisoft.com/en/software/download/) a-squared free 3.5 and (http://www.malwarebytes.org/) MalwareBytes are also very helpful. If you are still having problems, check out the (http://forums.majorgeeks.com/forumdisplay.php?f=35) MajorGeeks.com free malware removal help forum. They walked me through cleaning my pc a few weeks ago. I managed to acquire Vundo, Smitfraud-C, Zlob downloader, Renos & some other crap. It took a few days of work, but my pc is now 100% clean.

Good luck!

Omega on 2/6/2008 at 16:57

Updated link.

Basically, Cureit is just an up-to-date scanner in a single executable. I use it at work when I fix other people's infected computers. Along with Combofix, HijackThis and Dial-a-fix. I like single executables that run off USB sticks. ;)

nickie on 2/6/2008 at 17:01

Bookmarked - thank you! I notice people using Deckhard's system scanner more than hjt these days though I still use it myself. I don't know Dial-a-fix either but then I'm not really doing any training at the moment.