Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.



  • Please log in to reply
1 reply to this topic

#1 mike l

mike l

  • Members
  • 1 posts
  • Local time:08:56 PM

Posted 14 January 2006 - 08:13 AM

I also am infected with this virus. (Just now received another Trojan pop-up while writing this) Trend Micro has been trying to help, but no success thus far. It appears that I will have to live with this at least until next week, as Trend Micro does not work on week-ends.....Just joined this forum about 5 minutes ago, so am unsure as how to follow this subject. Am hoping someone out there has a solution to this virus problem. Just for repeaters, the virus I have id TROJ_DLOADER.APR and .BKH. The virus is affecting the same files as yours......I have gone thru several removal attempts suggested by TM, but seem to get stuck when I try to locate the affected files. TM says they are located in My Computer, Windows Folder, but I can never find them. (Just now received another pop-up). Hope someone can help.....Again, I just joined this forum this morning, so HELLO to all out there......Mike

BC AdBot (Login to Remove)


#2 stidyup


  • Members
  • 641 posts
  • Gender:Male
  • Local time:07:56 PM

Posted 16 January 2006 - 03:06 AM

If you think you are infected submit a hijackthis log to the HJT Forum.

How to submit a hijackthis log

Download Hijackthis

Try running the following from safe mode (Getting to safe-mode) Sysclean you'll also need the virus template file from here lpt***.zip remember to extract the contents of the zip file into the same folder as Sysclean.com


DrWeb CureIT


KASFX which is powered by the Kaspersky AV engine, you will need internet access to update it. If you haven't got net access in safe mode, update it before you use it.

If your good with the command line also try Sophos Command Line scanner this command will scan all of your hdd's SAV32CLI.EXE -F -di -remove -dn -mbr -all -zip -p=avscanlog.txt and give you a log file to review afterwards.

Also try installing and running A2 Free and Ewido again run from safe mode.

I'd also run Spybot(Spybot Tutorial) and Adaware

If your using Win2K/XP run adaware/spybot from "safe mode with command prompt" If your using Win9x just run it from safe mode the command line options aren't needed..

At the C:\ prompt type the following:-

C:\progra~1\spybot~1\spybotsd.exe /autocheck /autofix

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users