Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help With Manually Virus Delete


  • Please log in to reply
3 replies to this topic

#1 Holy woman

Holy woman

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgrade,Serbia
  • Local time:06:45 AM

Posted 04 February 2008 - 07:29 AM

:thumbsup:
Can anyone help me deletig Trojan.Win32.BHO.abo and Trojan_clicker.Win32.Delf.mg from my computer?
Antivirus cannot treat these files (in E:\WINDOWS\system32), and they can't be deleted manualy, not even in safe mode.
What should I do? I've updated anti virus base, it stil can't fix them.
Thank you!

(Moderator edit: added Topic Description and slightly modified Title. jgweed)

Edited by jgweed, 04 February 2008 - 11:26 AM.


BC AdBot (Login to Remove)

 


#2 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 37,012 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:01:45 AM

Posted 04 February 2008 - 10:07 PM

Hello Holy woman and welcome to BC :thumbsup:

What antivirus detected these? Do the two files have separate file paths? Please provide them.

What is your operating system: Windows XP, Vista etc.?

For now, do a scan in Safe Mode with SUPERAntiSpyware.

Download and install SUPERAntiSpyware free found here: http://www.superantispyware.com/superantis...efreevspro.html

Be sure to click on the download button to the left, not on the free trial download on the right.

Install it and double-click the icon on your desktop to run it.
It will ask if you want to update the program definitions, click Yes.
Under Configuration and Preferences, click the Preferences button.
Click the Scanning Control tab.
Under Scanner Options make sure the following are checked:
o Close browsers before scanning
o Scan for tracking cookies
o Terminate memory threats before quarantining.
o Please leave the others unchecked.
o Click the Close button to leave the control center screen.
On the main screen, under Scan for Harmful Software click Scan your computer.
On the left check C:\Fixed Drive.
Reboot into safe mode.
On the right, under Complete Scan, choose Perform Complete Scan.
Click Next to start the scan. Please be patient while it scans your computer.
After the scan is complete a summary box will appear. Click OK.
Make sure everything in the white box has a check next to it, then click Next.
It will quarantine what it found and if it asks if you want to reboot, click Yes.
Reboot into normal mode.
To retrieve the removal information for me please do the following:
o After reboot, double-click the SUPERAntispyware icon on your desktop.
o Click Preferences. Click the Statistics/Logs tab.
o Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
o It will open in your default text editor (such as Notepad/Wordpad).
o Please highlight everything in the notepad, then right-click and choose copy.
Click close and close again to exit the program.

Please post the log in your next reply.
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#3 Holy woman

Holy woman
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgrade,Serbia
  • Local time:06:45 AM

Posted 05 February 2008 - 07:03 AM

Thank you for welcome and advices!
My antivirus is Zone Alarm, Kaspersky and Avast cannot see these viruses.I have windows XP. They are placed in E:\WINDOWS\system32\vcqivlwn and E:\WINDOWS\system32\ckmackm.dll.bak

#4 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 37,012 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:01:45 AM

Posted 05 February 2008 - 10:07 PM

Hello Holy Woman,

Thank you for providing the file paths. That is very helpful. Can you please address the other two things in my previous post?

1) What is your Operating System? Knowing this will help us provide the proper disinfection procedures.

2) Please scan with SUPERAntiSpyware in Safe Mode and post the log in your next reply. The directions are in the previous post.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users