SpyDoctor seems to have successfully quarantined the Kavox.exe and Rootkit.Agent.QV files. However, some other function of this trojan is still active. When I try to access hard drives/partitions via explorer I get a 'Windows style' alert "Windows cannot access the specified device, path or file. You may not have the appropriate permissions to access the item" and the Zone Alarm firewall blocks the running of 'tmf3w3g0.com'.
Using Tree Size Pro I have found the tmf3w3g0.com file in the root of each drive. Question... how can I safely remove it and any associated registry entries? It is a 'programme' so I suppose it will be registered.
And is there anything else I'd need to attend to? I don't want to trash the system, if I can avoid it... pro sound and video editing apps. etc.
Zone Alarm Suite
Edited by Orange Blossom, 14 July 2008 - 06:23 PM.
Move to more appropriate forum. ~ OB