Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Trojan Won't Go Away


  • This topic is locked This topic is locked
2 replies to this topic

#1 cschopf

cschopf

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:04:12 PM

Posted 27 September 2011 - 05:37 PM

Hi,

I'm being driven crazy with a trojan that won't go away. Avast stops it from accessing the internet, but I still need to get rid of it. As soon as I restart the computer, it tries to do its thing. Avast pops up with threat detected and it says C:\Windows\assembly\tmp\u\80000032.@(trojan.gen.2)

I do a restart with a boot scan and it deletes these files:

C:\Windows\assembly\tmp\kwrd.dll
C:\Windows\assembly\tmp\U\00000002.@|>[Embedded_R#00290]

They come back right away though. I've disabled the set restore points and deleted temp files to no avail.

My firewall is not on and my computer won't let me turn it on.

Here are my logs.

Thanks for reading and helping. :)

Attached Files



BC AdBot (Login to Remove)

 


#2 cschopf

cschopf
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:04:12 PM

Posted 29 September 2011 - 07:49 PM

Hi,

I'm being driven crazy with a trojan that won't go away. Avast stops it from accessing the internet, but I still need to get rid of it. As soon as I restart the computer, it tries to do its thing. Avast pops up with threat detected and it says C:\Windows\assembly\tmp\u\80000032.@(trojan.gen.2)

I do a restart with a boot scan and it deletes these files:

C:\Windows\assembly\tmp\kwrd.dll
C:\Windows\assembly\tmp\U\00000002.@|>[Embedded_R#00290]

They come back right away though. I've disabled the set restore points and deleted temp files to no avail.

My firewall is not on and my computer won't let me turn it on.

Here are my logs.

Thanks for reading and helping. :)


I ended up just paying somebody to get rid of it for me via remote access. Took them several hours...was rough.

#3 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,579 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:12 AM

Posted 29 September 2011 - 08:02 PM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users