Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Jbloader - Need Help Removing


  • Please log in to reply
2 replies to this topic

#1 Santana187

Santana187

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:09:55 AM

Posted 29 June 2007 - 08:38 PM

Does anybody here know how to get rid of the jbloader trojan? Any help would be appreciated.

:thumbsup:

BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,516 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:08:55 AM

Posted 29 June 2007 - 08:48 PM

This spyware steals user passwords for Windows OS. When executed, it copies itself in the Windows system folder as svch0st.exe. In the same folder, it also drops files jbloader.dll and jbhook.dll, both detected by Trend Micro as TSPY_MMTHIEF.P.

It registers jbloader.dll as a COM object. The said file also hooks the keyboard for its information theft routines.


Install Super Antispyware. Run it in safe mode. Allow it to quarantine whatever it finds.
http://www.superantispyware.com/

Run the online scan for Bit Defender in normal mode. Allow it to quarantine whatever it finds.
http://www.bitdefender.com/scan8/ie.html

--------------------------------------------------------------------------------

Post a Hijack This log in the Hijack This Forum by following the directions in the link below if the programs above have not removed ALL malware. DO NOT post the log in this forum.
http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/
--------------------------------------------------------------------------------

How To start Windows in Safe Mode
http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/

Edited by buddy215, 29 June 2007 - 08:49 PM.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 Santana187

Santana187
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:09:55 AM

Posted 30 June 2007 - 03:16 PM

This spyware steals user passwords for Windows OS. When executed, it copies itself in the Windows system folder as svch0st.exe. In the same folder, it also drops files jbloader.dll and jbhook.dll, both detected by Trend Micro as TSPY_MMTHIEF.P.

It registers jbloader.dll as a COM object. The said file also hooks the keyboard for its information theft routines.


Install Super Antispyware. Run it in safe mode. Allow it to quarantine whatever it finds.
http://www.superantispyware.com/

Run the online scan for Bit Defender in normal mode. Allow it to quarantine whatever it finds.
http://www.bitdefender.com/scan8/ie.html

--------------------------------------------------------------------------------

Post a Hijack This log in the Hijack This Forum by following the directions in the link below if the programs above have not removed ALL malware. DO NOT post the log in this forum.
http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/
--------------------------------------------------------------------------------

How To start Windows in Safe Mode
http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/


Super Antispyware detected it and got rid of it, thanks for the help!

:thumbsup:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users