Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Samicro.dll Norton Won't Get


  • Please log in to reply
3 replies to this topic

#1 Jo R

Jo R

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:08:29 AM

Posted 23 February 2006 - 10:36 PM

My computer says it is infected with Samicro.dll, I also get a message saying i have blackworm virus And there are about 13 files the computer will not delete including: ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 9:35:44 PM, 2/23/2006
+ Report-Checksum: 710FAE48

+ Scan result:

C:\WINNT\Nail.exe -> Adware.BetterInternet : Cleaned with backup
C:\WINNT\svcproc.exe -> Adware.BetterInternet : Cleaned with backup
C:\WINNT\system32\DrPMon.dll -> Adware.BetterInternet : Cleaned with backup
C:\WINNT\system32\xalstg.exe -> Trojan.Poler.a : Cleaned with backup
C:\WINNT\Temp\~114128.tmp -> Downloader.Wintool.a : Error during cleaning
C:\WINNT\Temp\~156962.tmp -> Downloader.Wintool.a : Error during cleaning
C:\WINNT\Temp\~195534.tmp -> Downloader.Wintool.a : Error during cleaning
C:\WINNT\Temp\~500855.tmp -> Downloader.Wintool.a : Error during cleaning
C:\WINNT\Temp\~588617.tmp -> Downloader.Wintool.a : Error during cleaning
C:\WINNT\Temp\~838851.tmp -> Adware.Wintol : Error during cleaning
C:\WINNT\Temp\~843744.tmp -> Downloader.Wintool.a : Error during cleaning
C:\WINNT\Temp\~895033.tmp -> Downloader.Wintool.a : Error during cleaning
C:\WINNT\Temp\~901685.tmp -> Downloader.Wintool.a : Error during cleaning


::Report End

Norton will not get them either.

Please help. Thank you for your time

Edited by Jo R, 23 February 2006 - 10:38 PM.


BC AdBot (Login to Remove)

 


#2 Leurgy

Leurgy

    Voted most likely


  • Members
  • 3,831 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Collingwood, Ontario, Canada
  • Local time:09:29 AM

Posted 24 February 2006 - 12:21 AM

Hello Jo R and welcome to BC.

In that list, everything from C:\WINNT\Temp\~114128.tmp and below are temporary files in your temp directory. You can delete those files with a program like Ccleaner. You can also use Windows Disk Cleanup which is in Start>Programs>Accesories>System Tools, though Ccleaner is a much more effective tool.

After they are deleted run Ewido again as they have the potential of replacing whatever Ewido removes.

Also see our How To Remove The Aurora - Nail.exe - Svcproc.exe - Epolvy Hijacker to make sure that nail.exe does not return. If you feel you need some one on one guidance see our Preparation Guide For Use Before Posting A Hijackthis Log, Instructions for receiving help in cleaning your computer.

Good luck.

Edited by Leurgy, 24 February 2006 - 12:32 AM.

When the only tool you own is a hammer, every problem begins to resemble a nail. Abraham Maslo

**** We use our powers for good, not evil ****

 Trying to remove your data from the web is like trying to remove pee from a swimming pool


#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,287 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:29 AM

Posted 24 February 2006 - 08:42 AM

In addition to Leurgy's suggestions, you can download and scan with a-squared free. Scroll down to bottom of the page for download link.

a2 squared shows this malware in their removal list.
Trojan-Downloader.Win32.Wintool.a
Trojan-Downloader.Win32.Wintool.b
Trojan-Downloader.Win32.Wintool.c
Trojan-Downloader.Win32.Wintool.f

I would suggest you run it in safe mode.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#4 Jo R

Jo R
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:08:29 AM

Posted 25 February 2006 - 10:28 PM

thanks i downloaded hijackthis and i will try to fix the problem...thanks for everything




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users