Please help remove backdoor: win32/cycbot.b

BleepingComputer.com: Please help remove backdoor: win32/cycbot.b

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

Please help remove backdoor: win32/cycbot.b

#1 jenjia

New Member

Group: Members
Posts: 1
Joined: 02-December 10

Posted 02 December 2010 - 08:06 PM

Hello,

My laptop have been infected by the backdoor: win32/cycbot.b trojan. I've tried to remove it by installing Spybot and Avast to no avail. It seems everytime I tried to remove it, my internet explorer stops working. I am prohibited from downloading Ad-Aware and Dr. Web CureIt. Spybot did not detect the trojan.

Please help me remove this trojan.

Thank you very much in advance.

#2 boopme

To Insanity and Beyond

Group: Global Moderator
Posts: 48,761
Joined: 10-September 04
Gender:Male
Location:NJ USA

Posted 02 December 2010 - 08:27 PM

Hello if you mean the malware is prohibiting you please do this. I will go with you have XP.

Reboot into Safe Mode with Networking
How to enter safe mode(XP)
Using the F8 Method
Restart your computer.
When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you

should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu.
Select the option for Safe Mode with Networking using the arrow keys.
Then press enter on your keyboard to boot into Safe Mode.

>>>> Download this file and doubleclick on it to run it. Allow the information to be merged

with the registry.

RKill....

Download and Run RKill

RKill

Grinler

Link 1

Link 2

Link 3

Link 4

Before we begin, you should disable your anti-malware softwares you have installed so they do not interfere RKill running as some anti-malware softwares detect RKill as

malicious. Please refer to this page if you are not sure how.
Double-click on Rkill on your desktop to run it. (If you are using Windows Vista, please right-click on it and select Run As

Administrator)
A black screen will appear and then disappear. Please do not worry, that is normal. This means that the tool has been successfully executed.
If nothing happens or if the tool does not run, please let me know in your next reply

Do not reboot your computer after running rkill as the malware programs will start again. Or if rebooting is required run it again.

If you continue having problems running rkill.com, you can download iExplore.exe or

eXplorer.exe, which are renamed copies of rkill.com, and try them instead.

Now try running DrWeb. If it comes up in RUSSIAN change it to English by clicking the down arrow on the top right that says Pycckknn.

How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook