Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


All Hell Is Breaking Loose :)

  • Please log in to reply
1 reply to this topic

#1 Raydanator


  • Members
  • 30 posts
  • Local time:11:51 PM

Posted 20 March 2007 - 05:50 PM

Hi, I have been having some trouble with malware/spyware/trojans over the past week, and have followed your directions, but still have some problems. I scanned with all sorts of virus/adware scans that you recommended , as well as “SmitfraudFix” and “VundoFix”, but still have three Trojans that cannot be delete, even in Safe Mode. I found them by doing a “Housecall Antivirus”scan, here are there names and locations:

TROJ_RISK.CH …WINNT/_delete_on_reboot_m_l_i_f_g_._d_l_l

TROJ_CONHOOK.CF …System32/Divla2.dll

TROJ_AGENT.PNJ …System32/gebcabb.dll

Norton and other programs do not detect them, even when specially scanned. I cannot find the first one, but can find the other two. Norton had also detected and removed “Downloader” threats, and whole bunches of other stuff. Music, like a radio station had been playing and stopped a few days ago and now that I connected to the internet, it just started again. I have no idea how that is happening. I am still getting pop-ups as well. If this is something that needs to be taken into the shop, please tell me. I have a HijacktThis log as well if that would help any. Any help would be deeply appreciated. Thank you very much, Danny

BC AdBot (Login to Remove)


#2 jgweed


  • Members
  • 28,473 posts
  • Gender:Male
  • Location:Chicago, Il.
  • Local time:12:51 AM

Posted 20 March 2007 - 06:12 PM

Before taking the computer to the shop, first submit a HJT log to our team of volunteers. You can find the instructions here:


Be sure to refer them to your post above, so they will have a clearer understanding of your problem and what you have done so far to correct it.
Whereof one cannot speak, thereof one should be silent.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users